Privacy Policy

1. Introduction

New Beginnings Care Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, submit a referral, make a donation, or otherwise interact with our organisation.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all applicable data protection legislation. Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this policy.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

3.1 Website Visitors

• IP address and browser type (collected automatically via cookies and server logs)
• Pages visited, time spent on site and referring URL
• Device type and operating system

3.2 Contact Enquiries

• Full name, email address and telephone number
• The content of your message or enquiry
• Organisation name and job title (where provided)

3.3 Professional Referrals

• Referring professional’s full name, job title, organisation, team, email and phone number
• Information about the young person being referred (initials, date of birth, legal status, presenting needs, placement requirements and relevant background)
• Risk assessments and care-related information provided as part of the referral process

3.4 Donations

• Name and email address (as provided to Stripe during checkout)
• Gift Aid declarations (where applicable)
• We do not store card details — all payment data is processed and held by Stripe

3.5 Job Applications & Recruitment

• CV, cover letter, employment history and qualifications
• Right-to-work documentation and DBS check consent
• References and professional registrations

4. How We Collect Your Information

We collect personal data through the following means:

• Directly from you — via our website contact form, referral form, donation page, email correspondence, telephone calls, or in person
• Automatically — via cookies, analytics tools and server logs when you browse our website
• From third parties — such as Local Authorities, placing teams, social workers and other professionals in connection with referrals and placements
• From payment processors — Stripe provides us with limited transaction confirmation data following a donation

5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

6. How We Use Your Information

We use the personal data we collect for the following purposes:

• To respond to enquiries, referrals and complaints you submit to us
• To assess, process and manage placement referrals for children and young people
• To fulfil our statutory safeguarding and care obligations
• To process charitable donations and comply with Gift Aid requirements
• To manage recruitment and employment processes, including DBS checks
• To improve and maintain our website using anonymised analytics data
• To comply with legal, regulatory and contractual obligations
• To communicate with Local Authorities, Ofsted, social workers and placing teams as required
• To send communications you have consented to receive (e.g. newsletters)

We will not use your personal data for purposes incompatible with those for which it was originally collected without your consent or a legitimate legal basis.

7. Sharing Your Information

We may share your personal data with the following categories of recipients:

• Local Authorities & placing teams — in connection with placement referrals and statutory care obligations
• Ofsted & regulatory bodies — where required by law or inspection
• NHS, CAMHS & health professionals — to support the health and wellbeing of young people in our care
• Police and safeguarding authorities — where there is a safeguarding concern or legal requirement to disclose
• Stripe Inc. — our payment processor for charitable donations (see Stripe’s privacy policy for details)
• IT service providers & hosting companies — who process data on our behalf under data processing agreements
• Professional advisers — including solicitors, accountants and auditors under obligations of confidentiality
• HMRC — in connection with Gift Aid claims

We do not sell, rent or trade personal data to third parties for marketing purposes.

8. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Our general retention periods are:

Once data is no longer needed, it is securely deleted or anonymised. Physical records are securely destroyed. Digital records are permanently deleted from all systems.

9. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right of Access — you may request a copy of the personal data we hold about you (Subject Access Request)
• Right to Rectification — you may ask us to correct inaccurate or incomplete personal data
• Right to Erasure — you may ask us to delete your personal data where there is no compelling reason for us to continue processing it
• Right to Restrict Processing — you may ask us to pause processing of your data in certain circumstances
• Right to Data Portability — where processing is based on consent or contract, you may request your data in a structured, machine-readable format
• Right to Object — you may object to processing based on legitimate interests or for direct marketing
• Rights in Relation to Automated Decision-Making — you have the right not to be subject to solely automated decisions that significantly affect you
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@newbeginningscare.co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.

10. International Data Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, such as adequacy decisions by the UK Secretary of State, Standard Contractual Clauses (SCCs), or other approved transfer mechanisms.

Stripe Inc. is based in the United States. Stripe’s transfers to the US are covered by Standard Contractual Clauses and Stripe’s certification under applicable privacy frameworks. For more information, please refer to Stripe’s Privacy Policy.

11. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience and analyse website usage. We use the following categories of cookies:

You can control cookies through your browser settings at any time. Declining non-essential cookies will not affect your ability to use our website. For more details, please see our separate Cookie Policy.

12. Children’s Data & Safeguarding

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children through our website. Information about children and young people received through the professional referral process is handled exclusively by authorised staff under strict data handling protocols.

All staff who access records relating to children in our care are subject to enhanced DBS checks, confidentiality agreements and data protection training.

Where we have a legal obligation to share information about a child (for example, in the event of a safeguarding concern), we will do so regardless of any objection, as the safety of the child takes precedence.

13. Changes to This Policy

We review and update this Privacy Policy periodically to reflect changes in our practices, legal requirements or service offerings. When we make significant changes, we will update the “Last Updated” date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website or services following any changes constitutes your acceptance of the updated policy.

Previous versions of this policy are available on request by contacting us at info@newbeginningscare.co.uk.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how we handle your personal data, please contact us:

Right to Lodge a Complaint

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK’s supervisory authority: