Data Protection & GDPR Policy

This privacy notice explains how we collect, use, store, and protect personal data in line with the UK General Data Protection Regulation (GDPR).

​

1. Who We Are

We are Nurture to Thrive, a children’s emotions coaching service supporting children and families in developing emotional awareness, resilience, and wellbeing.

• Data Controller: Lisa Chamberlain

• ICO Registration: ZB876568 (registered with the Information Commissioner’s Office)

• Contact: hello@nurturetothrive.co.uk | 07561 712728

​

2. The Data We Collect

We may collect and process the following personal information:

• Child’s information: name, age, date of birth, relevant health or educational background (where necessary for the support sessions).

• Parent/guardian information: name, contact details, relationship to child.

• Session records: notes on progress, agreed goals, and outcomes.

• Administrative data: invoices, payment details, correspondence.

We only collect data that is relevant and necessary for providing support services.

​

3. Why We Collect This Data (Lawful Basis)

We use personal data for:

• Delivering support services (contract).

• Keeping parents/guardians informed (legitimate interests).

• Maintaining accurate records for safeguarding and quality assurance (legal obligationwhere safeguarding applies).

• Processing payments and invoices (contract).

For sensitive information (e.g., health details), we rely on explicit consent from parents/guardians.

​

4. How We Store and Protect Data

• Paper records (if any) are kept securely in locked storage.

• Digital records are stored on password-protected, encrypted devices and/or secure cloud services.

• Only Lisa Chamberlain (practitioner) has access.

• Data is kept for [e.g., 6 years after last session] unless safeguarding law requires longer retention.

​

5. Sharing of Data

We do not share personal data with third parties unless:

• Required by law (e.g., safeguarding concerns).

• With explicit consent from the parent/guardian (e.g., to liaise with schools or other professionals).

​

6. Your Rights

Under GDPR, parents/guardians (and children, where age-appropriate) have the right to:

• Access the personal data we hold.

• Request correction of inaccurate information.

• Request erasure of data (where lawful and not required for safeguarding/legal reasons).

• Restrict or object to processing.

• Data portability (receive a copy in a portable format).

Requests should be made in writing to hello@nurturetothrive.co.uk.

​

7. Consent

Where consent is required (e.g., for holding health information), we will ask parents/guardians to provide written consent before sessions begin. Consent can be withdrawn at any time.

​

8. Complaints

If you have concerns about how your data is handled, please contact us directly:
📧 hello@nurturetothrive.co.uk

📞 07561 712728

​

As a registered member of the ICO (Registration No. ZB876568), we take data protection seriously.
You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

​

9. Updates to This Notice

We may update this notice from time to time to reflect changes in law or practice. The latest version will always be available from us on request.