Privacy policy

Last updated: 22 October 2026

Nestor helps families find a care home with a place available. To do that, we need some personal information about you and about the person who needs care. This policy explains what we collect, why, who we share it with, how long we keep it and the rights you have. It applies to find.nestor.org.uk, www.nestor.org.uk and any other Nestor page where it is linked.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Nestor is a trading name of Nextmoov Ltd, a company registered in England and Wales, with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Nextmoov Ltd is the data controller for the personal data described in this policy.

2. What we collect

We collect two kinds of information: details about you (the person making the request) and details about the person who needs care, who may be you or a relative.

Type of data	Examples	Where it comes from
Identity and contact	Your name, mobile number, email address	You, through our forms
Care request	Who the care is for, the type of care needed (residential, nursing, dementia, respite), how soon, the town or postcode area, your approximate budget and how the care will be funded	You, through our forms
Verification	The one-time code we text you and whether it was confirmed	Generated by us
Follow-up	Notes from calls and messages with you about your request, the homes you were put in touch with, the outcome of the search	You and our partner advisers
Technical and usage	IP address, device and browser type, pages viewed, how you reached us (for example a Google search or an advert), the advertising click identifier	Your device, our website and our analytics tools

You do not have to give us this information, but without your contact details and the basics of the care request we cannot find homes for you.

3. Why we use your data and our lawful basis

Purpose	Lawful basis
Understand the care request and find care homes near you that have a place and match your needs	Performance of a contract (providing the service you asked for) and our legitimate interest in running the service
Confirm your mobile number with a one-time code so we only work on real requests	Legitimate interest (preventing misuse and fraud)
Pass your request to our partner advisers and to care homes that may have a suitable place, so they can contact you	Performance of a contract and your consent, given when you submit the form
Contact you by phone, text message or email about your request	Performance of a contract
Ask you how the search went and improve our service	Legitimate interest
Measure our website and advertising (how many people visit, which pages work, which adverts led to a request)	Your consent for cookies and similar technologies; legitimate interest for aggregated, non-identifying statistics
Keep records, resolve disputes and comply with the law	Legal obligation and legitimate interest

We do not sell your personal data. We do not use it for automated decisions that have a legal or similarly significant effect on you.

4. Health information

To find a suitable home we may need general information about the health and care needs of the person who needs care, for example whether they need nursing care or support with dementia. This is special category data under the UK GDPR. We process it only to the extent needed to find and arrange care, on the basis of your explicit consent, which you give when you submit a request, and, where relevant, because it is necessary for the provision of health or social care. You can withdraw your consent at any time by contacting us, in which case we will stop the search.

If you are making a request for someone else, please make sure they are happy for you to share their information with us.

5. Who we share your data with

• Our partner care advisers. Nestor works with Senior Home Plus, a UK care placement service, whose advisers call families, check availability and fees, and put you in touch with homes. They receive your contact details and your care request so they can do this. They act on our behalf and under our instructions.
• Care homes. We or our partner advisers pass your request to care homes that may have a suitable place, so they can confirm availability and arrange a visit. Each care home is responsible for the information it receives from that point.
• Service providers. Companies that host our website and data, send our text messages, run our customer database and provide analytics and advertising measurement. They process data only on our instructions and under written contracts.
• Advertising platforms. Where you have consented to marketing cookies, Google and Microsoft receive a signal that a request was made after clicking one of our adverts, together with a hashed (encrypted) version of your email address or phone number, so they can measure our advertising. This is explained further in our Cookie policy.
• Authorities and advisers. Where the law requires it, or to protect our rights, we may share information with regulators, courts, insurers or our professional advisers.
• Business transfers. If Nestor or Nextmoov Ltd is sold or restructured, your data may be transferred to the new owner, who will remain bound by this policy.

6. Text messages and phone calls

When you submit a request we text a 4-digit code to the mobile number you gave us. We only use this number to confirm it is yours and to contact you about your request. Our partner advisers may call you from a UK number, and calls may be recorded for training and quality purposes. We do not send marketing text messages unless you have asked for them, and you can ask us to stop at any time.

7. How long we keep your data

• Care requests, contact details and follow-up notes: 5 years after your last contact with us, so we can respond if you come back to us, deal with any complaint and keep the records the law requires.
• Verification codes: deleted shortly after they expire.
• Website analytics data: up to 26 months in aggregated form.
• Incomplete requests (you started but did not confirm your number): 30 days.

After these periods we delete or anonymise the data. We may keep anonymous statistics indefinitely.

8. How we keep it secure

Your data is transmitted over encrypted connections (HTTPS) and stored with reputable providers that use access controls, encryption and monitoring. Access is limited to the people who need it to deal with your request. If a breach is likely to put you at risk, we will tell you and the Information Commissioner's Office as the law requires.

9. Where your data is stored

Your data is stored in the United Kingdom and the European Economic Area. Some of our providers (for example analytics, advertising measurement and text messaging) may process data in the United States. Where that happens we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, so that your data keeps the same level of protection.

10. Your rights

Under the UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you (access);
• ask us to correct data that is wrong or incomplete (rectification);
• ask us to delete your data (erasure);
• ask us to stop or limit how we use it (restriction and objection);
• withdraw your consent at any time, without affecting what was done before;
• receive the data you gave us in a usable format (portability);
• complain to the Information Commissioner's Office (see section 14).

To exercise any of these rights, email hello@nestor.org.uk from the address you used with us, or write to the postal address above. We may ask you to confirm your identity. We respond within one month.

11. Cookies and tracking

Our website uses cookies and similar technologies for essential functions, to measure visits and to measure our advertising. Non-essential cookies are only set with your consent, which you give or refuse through the banner when you arrive and can change at any time. Full details are in our Cookie policy.

12. Children

Our service is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us information, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If the changes are significant, we will tell you by email or with a notice on our website.

14. Contact and complaints

Questions about this policy or about your data: hello@nestor.org.uk, or Data Protection, Nestor (Nextmoov Ltd), 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, UK.

If you are not happy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk, helpline 0303 123 1113.