Privacy Policy

Novalun Ltd ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information in the course of delivering our services.

Who We Are

Novalun Ltd We’re not just another care provider. We’re a movement. At Novalun, we’re redefining what care means, not by doing more of the same, but by doing things differently. From the ground up, we’ve built an all-in-one care ecosystem designed to unlock human potential, empower caregivers, and elevate the experience for those we serve.

What Information We Collect

We may collect and process the following personal data:

​a. From Care Staff (e.g., nurses, support workers):

  • Name, address, contact details

  • CV, qualifications, and employment history

  • Right to work documents (e.g., passport, visa)

  • DBS checks, training certifications

  • Bank details (for payment)

  • Health declarations, vaccination status (if required)

  • Professional references

​

b. From Clients (e.g., NHS Trusts, care providers):

  • Name, job title, contact information

  • Organisation details

  • Service request and communication history

​

c. From Website Visitors:

  • IP address and browser information

  • Contact form submissions

  • Cookie data (with consent)

How We Use Your Information

We use personal data to:

  • Deliver our services and manage staffing contracts

  • Screen, recruit, and onboard healthcare professionals

  • Communicate with clients and fulfil service agreements

  • Ensure compliance with legal and regulatory obligations

  • Improve our service delivery and operational performance

  • Respond to enquiries or support requests

Lawful Bases for Processing

We rely on the following lawful bases:

  • Contractual obligation – to fulfil a service agreement or employment contract

  • Legal obligation – to comply with relevant laws (e.g., employment, safeguarding)

  • Legitimate interest – to operate and improve our services

  • Consent – for certain communications or marketing activities

How We Store and Protect Your Data

We store data securely using encrypted platforms and restrict access to authorised personnel only. We regularly review our data handling procedures and conduct staff training to ensure high levels of data protection.

How Long We Keep Your Data

We retain personal data only as long as necessary:

  • Staff records: up to 6 years post-engagement

  • Client records: 6 years post-contract

  • Enquiries and contact form submissions: 12 months

  • Financial records: as required for audit and tax purposes

Sharing Your Data

We may share your data with:

  • Regulatory bodies (e.g., CQC, NHS Digital)

  • DBS checking services

  • Payroll and HR platforms

  • IT and software providers (under strict data agreements)

  • Legal or law enforcement agencies if required

We do not sell your data to third parties.

Your Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate information

  • Request deletion of your data (subject to legal requirements)

  • Object to or restrict processing

  • Withdraw consent where applicable

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Cookies and Website Analytics

Our website may use cookies to enhance your experience. You will be given the option to accept or reject cookies upon visiting the site. For more details, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.​

Contact Us

If you have questions about this policy or how your data is handled, please contact: info@novalun.co.uk