Nurivo Care
  • Who we are
  • CarePilot
  • CareLink
  • Contact
  • Open CarePilot →
  • Early access
Legal

Privacy Policy

Last updated: 20 April 2026

This policy explains how Nurivo Care — a trading name of Tekstak Ltd, a company registered in England and Wales (company number 17154786) and based in Scotland — collects, uses, and protects personal data. It's written to be readable. If anything's unclear, email us and we'll explain.

Contents

  1. Who we are
  2. What data we collect
  3. Why we collect it
  4. Our lawful basis
  5. Who we share data with
  6. International transfers
  7. Cookies and tracking
  8. How long we keep it
  9. Security
  10. Your rights
  11. Complaints
  12. Changes to this policy
  13. How to contact us

1. Who we are

Nurivo Care is a trading name of Tekstak Ltd, a company registered in England and Wales under company number 17154786, with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. The team operates from Scotland. For the purposes of UK GDPR and the Data Protection Act 2018, Tekstak Ltd is the data controller of personal data collected through this website and during pre-sales conversations.

Tekstak Ltd's registration with the Information Commissioner's Office is in progress; the registration number will be published here once issued. You will then be able to verify it on the ICO's public register.

When you become a customer of CarePilot or CareLink, the relationship changes. For data you enter about residents, staff, or service users, you are the controller and we are the processor. That relationship is governed by a separate Data Processing Agreement (DPA) which forms part of your contract with us.

2. What data we collect

When you visit the website

We may collect technical information such as your IP address, device type, browser, and pages visited. This is for security, diagnostics, and understanding how the site is used.

When you contact us or enquire about a product

  • Your name
  • Your email address
  • Your organisation (if provided)
  • Your phone number (if provided)
  • The content of your message
  • Any further correspondence between us

When you become a customer

  • Account and billing details for your organisation
  • Named user details for people accessing CarePilot or CareLink (name, email, role)
  • Authentication data (hashed passwords, session tokens)

About resident data: Where the service processes personal data about residents, service users, or their families, that data is under your control as the customer. We only process it on your instructions, as set out in our Data Processing Agreement.

3. Why we collect it

  • To respond to enquiries and conversations about our products
  • To provide, support, and improve CarePilot and CareLink
  • To manage billing, contracts, and customer relationships
  • To keep our systems secure and compliant
  • To send service announcements (things like downtime, security notices, or billing updates) — these are not marketing

We only send marketing communications to people who have explicitly opted in or where we have a clear and lawful business interest in doing so. You can unsubscribe at any time.

4. Our lawful basis

Under UK GDPR, we rely on the following lawful bases:

  • Contract — to provide the services you've bought from us
  • Legitimate interest — for business-to-business outreach to care homes, councils, and related organisations, and for keeping our systems secure. We balance our interest against your rights, and you can object at any time
  • Consent — for marketing emails, newsletters, and any processing that requires a clear opt-in
  • Legal obligation — where we must keep records for tax, fraud prevention, or regulatory reasons

5. Who we share data with

We don't sell your data. We share it only with carefully selected sub-processors and service providers who help us run the business:

  • Hosting providers — for running the website and the CarePilot / CareLink applications (UK-based where possible)
  • Email providers — for sending transactional emails and, where you've opted in, marketing
  • Payment processors — for handling subscriptions and invoices
  • Analytics providers — if and when used, always in a privacy-respecting way, with an option to opt out
  • Professional advisers — accountants, solicitors, and auditors where strictly necessary

On request we'll provide a current list of sub-processors. We will never share your data with third parties for their own marketing purposes.

6. International transfers

We aim to keep all personal data within the UK. Where transfers outside the UK are unavoidable (for example, certain cloud services), we rely on recognised safeguards such as the UK International Data Transfer Agreement or an adequacy decision.

7. Cookies and tracking

This website uses a small number of cookies. We don't run advertising cookies or third-party tracking, and we don't sell or share data with advertisers.

Strictly necessary

We use a single piece of browser storage (nurivo_cookie_consent, stored in localStorage) to remember your cookie choice so we don't ask again on every page. This is exempt from consent requirements under PECR.

Analytics — only set with your consent

If you accept the cookie banner, we load Google Analytics 4, which sets the following cookies:

  • _ga — used to distinguish visitors. Expires approximately 2 years from your most recent visit.
  • _ga_647RCQD2LY — used to persist session state. Expires approximately 2 years from your most recent visit.

Analytics data is processed by Google LLC. Google may transfer data outside the UK; see Google's privacy policy for details. If you reject the banner, no Google Analytics scripts are loaded and no analytics cookies are set.

You can change your cookie preferences at any time by clicking here to revisit the banner.

8. How long we keep it

  • Enquiry and contact form submissions: up to 24 months unless a business relationship develops
  • Customer account data: for the duration of the contract plus 7 years for accounting and legal compliance
  • Resident / service user data (as processor): according to your instructions as controller, deleted or returned at the end of the contract
  • Website logs: 90 days

9. Security

We take security seriously. Personal data is protected using industry-standard measures including encrypted connections (HTTPS), encryption at rest where appropriate, role-based access controls, and regular reviews of our infrastructure. No system is ever perfect, but we aim to match or exceed the standards expected in the healthcare software sector.

If we ever experience a data breach that affects your personal data, we will notify you and the Information Commissioner's Office within the timeframes required by law.

10. Your rights

Under UK GDPR, you have the right to:

  • Be informed about how we use your data (this policy)
  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data erased, in certain circumstances
  • Restrict how we process your data
  • Receive your data in a portable format
  • Object to processing based on legitimate interests, including direct marketing
  • Not be subject to decisions made solely by automated processing
  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, email us at info@nurivo.co.uk. We'll respond within one month.

11. Complaints

If you're unhappy with how we've handled your personal data, please contact us first — we genuinely want to put things right. If you're not satisfied, you have the right to complain to the UK's supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113
Web: ico.org.uk/make-a-complaint

12. Changes to this policy

We may update this policy from time to time. When we do, we'll update the "last updated" date at the top. For significant changes, we'll notify customers directly.

13. How to contact us

For any privacy-related questions, data requests, or concerns:

Email: info@nurivo.co.uk
Post: Tekstak Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
General contact: Contact form

Nurivo Care — A Tekstak Ltd company · Built in Scotland · © 2026
  • Privacy
  • Terms
  • Contact

We'd like to use a single Google Analytics cookie to understand which pages people read — nothing else, and nothing shared with advertisers. See our cookie policy.