Privacy Policy – The Boxall Profile Online

Privacy Policy

We are committed to protecting your personal information

We are committed to protecting your personal information. This page will set out the basis on which we will process any personal information we collect from you or that you provide to us.

Any questions regarding this privacy policy should be sent by email to [email protected] or by writing to:

Data Protection Officer
18 Victoria Park Square
London E2 9PF

Who are nurtureuk?

We are nurtureuk (formerly The Nurture Group Network). We are the UK's leading charity specialising in the practice of nurture, and we own and operate the Boxall Profile Online website. The Boxall Profile Online website is the first and foremost assessment tool enabling teachers to assess and support children with emotional, social and behavioural difficulties. A secondary use of the website is the collection and analysis of anonymous data for research purposes.

Our registered charity numbers are Registered England and Wales, charity number: 1115972. Scottish registered charity number: SC042703

The types of information we collect

  1. While using the Boxall Profile Online, you will provide anonymous data about the children being assessed. By anonymous we mean that we do not ask for names or other personal details that would allow us to identify the children being assessed. It is your responsibility as a user of the Boxall Profile Online not to enter any identifying details about the child into the profile. Instead we suggest maintaining an offline list (in a secure location) of the children under your care, with each corresponding EBP code, for your own reference.
    It is your responsibility to ensure that you do not provide any personal information that would allow us to link a specific EBP code to a specific child (for example, by typing in a name while creating a learning plan).
    For your own reference, please keep a list of the children you assessed and their associated EBP codes. It is your responsibility to ensure the confidentiality of the EBP codes, by keeping the list in a secure location and making it accessible only to trusted parties.
  2. When you engage with us, for example, access our information or use our services/products, or become involved in our campaigns, we may collect and process personal information about you. Depending on your activity, this personal information may include your name, email address, postal address, telephone number, date of birth or financial details.
    By submitting this personal information you enable us to provide you with the information, services or products you select.
  3. We may also ask you for information when you report a problem with our website.
  4. If you contact us, we may keep a record of that correspondence.
  5. We may ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
  6. We may also collect details of your visits to our website, including but not limited to traffic data, location data, weblogs, and other communication data and the resources that you access.
  7. To help us create a more effective website that reflects users needs, we may also use cookies to collect and record information about how our site is used and collect your IP address (a number that identifies a specific internet connection) for system administration and to report aggregated information. Unless you sign in to your Boxall Profile Online account, cookie files and IP addresses will not identify you as an individual. For more information on cookie files and IP addresses, please read our cookies policy. By continuing to use our site, you agree to our use of cookies.

How we may use this information

  1. To allow you to participate in interactive features on our website, when you choose to do so, for example, we may generate reports or invoices or help you complete forms by pre-filling them, using contact details you have previously provided.
  2. To provide you with information (including fundraising or campaigning activities), services or products you have requested.
  3. To analyse and improve the services offered on our website by providing you with the most user-friendly navigation experience we can for your computer or other internet device.
  4. With IP addresses, to identify your approximate location, block disruptive use or to establish the number of visits to the website from different countries.
  5. To process personal information for the purposes of customer analysis and direct marketing to help us with our activities and to provide you with the most relevant information.
  6. To answer research questions related to mental health; wellbeing; social, emotional and behavioural difficulties; nurture groups; or the Boxall Profile.

You have the right to delete any of your data collected using the Boxall Profile Online. For Boxall Profile data, you can delete individual profiles or entire EBPs directly from your dashboard.

Your account data will be stored securely on our servers as long as it is needed for communication, research and improvement purposes. If you no longer wish nurtureuk to store or use your information, you can contact the Data Protection Officer and your data will be deleted from the website and from our servers. In such circumstances, you will no longer be able to access your account or the information stored on your account.

Note that we are legally required to hold some personal information to fulfil statutory obligations, for example the collection of Gift Aid or to support certain financial transactions.

How we will contact you

If we contact you by phone or letter, we will not contact you again if you ask us not to. You can contact us to change your contact preferences by emailing our Membership Team at [email protected] or by calling +44 (0)141 280 0524.

We will never contact you to send you information about how you can support nurtureuk by email or text unless you have given us your prior permission.

How we handle your information and other organisations

SSL encryption is used on the website to encrypt the information transmitted. This ensures that the data is collected securely.

Nurtureuk will not rent or sell your personal information to other organisations for use by them in their own direct marketing activities.

We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or in order to enforce or apply our terms of use for this website or other agreements; or to protect the rights, property or safety of nurtureuk, our donors or others. This includes exchanging information with other companies and organisations for the purposes of fraud detection and protection.

How we handle direct debit or credit card information

Nurtureuk will ensure that sensitive information such as debit cards, credit cards or personal information will be collected and stored securely. We and our partners always use Secure Socket Layer (SSL) encryption to encrypt data sent between the customer and us or our partners.

Nurtureuk is Payment Card Industry (PCI) compliant and uses external PCI compliant providers to collect this data on our behalf. We do not store PCI data on our own systems. We use GoCardless to collect Direct Debits and Braintree to accept and process card payments.

To protect yourself when sending us sensitive information, please ensure that you use devices running supported operating systems and browsers that are regularly updated, and incorporate some form of malware protection. Only connect your devices to networks that you trust.

Securing your passwords

Your password is encrypted and stored securely on our servers.

Where we have given you (or where you have chosen) a password which enables you to access certain parts our website, you are responsible for keeping the password confidential. You agree not to share that password with anyone else.

Where we store information

Nurtureuk uses Internet Service Providers and servers located within the European Economic Area. All servers storing data are located in France. nurtureuk shall ensure that your personal information will be held by those Internet Service Providers in compliance with European data protection regulations. By submitting your personal information to our website, you agree to the transfer, storing or processing of data to locations within the European Economic Area. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

How to access your personal information

You have a right to know whether or not nurtureuk holds any information about you (personal data) and a right to be provided with your information within 40 days in accordance with the Data Protection Act.

You can request your personal information by email to [email protected] or by writing to:

Data Protection Officer
18 Victoria Park Square
London E2 9PF

We do not make a charge for this. It'll help us to find your information if you can tell us something about the nature of your contact with us.

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.

Updates or changes to the privacy policy

We reserve the right to make changes to this Privacy Policy. Each time you visit this site you should check this Privacy Policy to check that no changes have been made to any sections that are important to you. Where appropriate, any changes may be notified to you by email.

Cookies Policy


We use cookies on our website so that we can tailor the content to you, ensure it's working the way it should and make improvements.

A cookie is a small file that is sent to your computer or mobile phone which contains information that allows us to recognise that you have used our website before.

Cookies are safe and secure and are commonly used on websites.

A cookie typically contains:

  • The name of the server the cookie was sent from
  • The lifetime of the cookie
  • A unique identifier (usually a number)

How cookies work

When you visit The Boxall Profile Online website, the page that you see and cookies are downloaded to your device. Your browser and our web server exchange the cookie and we use this number to recognise you when you return to our site or browse from page to page. Only the server that sends a cookie can read it, and therefore use, that cookie.

This file is stored on your computer's (or phone's) hard drive. All websites can send a cookie to your browser if your browser settings allow it. Many websites do this to track online traffic flow.

Types of cookies

Cookies can be categorised from their life span:

  1. Session or temporary cookies: these cookies expire when you close your browser or when the session times out
  2. Persistent or permanent cookies: these are usually stored on your hard disk and survive across multiple sessions and have a longer expiration date

Cookies used on





End of session

Recognise you when you browse from page to page


1 year

Recognise you when you sign in


1 year

Recognise you when you sign in


2 years

Used to distinguish users


1 minute

Used by Google Analytics to throttle request rate


End of session

Used to distinguish users

We use _ga, _gat and _gid cookies as part of Google Analytics to analyse the use of our website. This allows Google Analytics to generate statistical and other information about website use.

Controlling or deleting cookies

You can control and disable cookies through your browser settings. All browsers are different, so visit allaboutcookies website to find out more.

View Privacy Policy This website uses cookies to collect and analyse information about the users of this website.
By clicking on any link on this website, you are providing consent for us to set cookies.