Introduction:
Nurture & Transform Ltd ("N&T", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, and protect your personal data when you interact with our website, services, and communications.
Who We Are:
N&T provides strategic consultancy services to start-ups and small businesses, specialising in operations, people & culture, IT operations, and office management. For the purposes of UK data protection laws, N&T acts as a data controller in relation to the personal data we collect and process.
Personal Data We Collect: We may collect and process the following categories of personal data:
Identity Data:
Name, job title, and company details.
Contact Data:
Email address, phone number, and mailing address IT Account Data: Client company IT account information (e.g. usernames) stored securely using encrypted password management tools (we do not store passwords directly outside of encrypted storage systems).
Communications Data:
Any personal data included in emails, online forms, or other direct interactions with us.
Meeting Notes Recordings:
Notes from manual, virtual, and audio-recorded meetings, where necessary for business purposes and with consent Payment Information:
Bank details for invoicing consultants, suppliers, and vendors, securely processed and stored.
How We Collect Your Data:
We collect personal data when you:
Contact us via email, phone, or online forms
Engage with us in a professional capacity
Use our website or subscribe to our newsletters
Provide information as part of a business contract or service agreement.
How We Use Your Data:
We use personal data for the following purposes:
To provide our consultancy services
To communicate with clients and respond to inquiries
To manage IT setups and security measures for client accounts
To process payments and manage invoicing
To comply with legal obligations and regulatory requirements
To enhance our website, services, and client experience, including through website analytics (if applicable).
Legal Basis for Processing:
We process personal data under the following lawful bases:
Contractual Necessity: To fulfil our agreements with clients
Legitimate Interests:
To provide and enhance our services, maintain business relationships, and improve operational efficiency.
Legal Obligation: To comply with regulatory requirements
Consent: Where necessary, we will obtain your consent before processing certain types of data.
Data Sharing and Security:
We do not sell or rent your personal data. However, we may share personal data with:
Trusted third-party service providers that support our business operations (e.g., IT providers, secure password managers, accountants, invoicing systems)
Regulatory or legal authorities when required by law.
We implement appropriate security measures to protect your data from unauthorised access, disclosure, alteration, or destruction. Passwords and sensitive IT account information are stored securely using encrypted password management tools.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this notice or as required by law. For example:
Financial records, including invoices and payment details, are retained for six years in compliance with UK tax regulations.
Client account data is retained for the duration of our business relationship and deleted within 12 months after termination, unless otherwise required by law.
Communications and meeting notes are retained for two years, unless otherwise required for contractual or legal reasons.
Once data is no longer needed, it is securely deleted or anonymised.
Your Rights & Complaints
Under UK data protection law, you have the right to:
Access your personal data
Request corrections to inaccurate data.
Request deletion of your personal data (where applicable). Restrict or object to processing in certain circumstances. Request data portability where applicable
Withdraw consent where processing is based on consent
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk. However, we encourage you to contact us first so we can address any concerns.
To exercise any of these rights, please contact us using the details below.
Cookies and Website Tracking:
If our website collects cookies or analytics data, a separate Cookies Policy will outline how we use these technologies. You can manage cookie preferences through your browser settings.
Contact Us
If you have any questions about this Privacy Notice or how we handle your personal data, please contact us at:
Nurture & Transform Ltd
Email: hello@nandt.io Phone: 07448 506 079.
Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time. The latest version will always be available on our website.
By using our services, you acknowledge that you have read and understood this Privacy Notice.
Updated: 10.02.2025