Privacy Policy

Data Governance, Processing Notice, and Rights Framework

Effective Date: April 19, 2026

This Privacy Policy describes how NursingReach collects, uses, secures, retains, and discloses personal data in the course of providing website functionality, commercial services, and support operations. Our processing model is designed to align with applicable privacy and communications obligations, including GDPR, CCPA/CPRA, HIPAA-boundary restrictions, and CAN-SPAM requirements where relevant.

By accessing or using NursingReach, you acknowledge this Privacy Policy and consent to the processing described herein to the extent such consent is required by law. Where consent is not the lawful basis, processing is performed under another legally valid ground as set out below.

1. Information We Collect

We may collect personal and technical information when you browse our platform, submit forms, purchase services, or otherwise interact with our systems.

A. Personal Information You Provide to Us

Information you submit directly may include:

  • Name and business affiliation
  • Professional contact details, including email and telephone data
  • Billing and transactional identifiers
  • Account credentials and authentication artifacts where applicable
  • Communication preferences and consent selections
  • Inquiry content and customer support correspondence

B. Information Collected Automatically

System and usage telemetry may be collected through logs, cookies, and analogous technologies, including:

  • IP address and network metadata
  • Device, browser, and operating environment signatures
  • Approximate geolocation inferred from IP routing
  • Referral channel and campaign attribution signals
  • Visited pages, session duration, and feature interaction events
  • Error diagnostics and performance indicators

C. Information from Third Parties

We may receive data from vetted third parties operating under lawful data-sharing frameworks, such as:

  • Payment and fraud-screening service providers
  • Advertising and campaign performance partners
  • Public professional directories and registry sources
  • Licensing and credential verification references
We do not intentionally solicit social security numbers, patient medical records, or full financial account secrets outside the minimum scope required for authorized payment processing.

2. How We Use Your Information

Personal data may be processed for the following purposes:

  • Transaction Administration - Confirm purchases, deliver services, and manage account operations.
  • Support and Service Management - Respond to requests, resolve issues, and maintain service continuity.
  • Product and Platform Improvement - Analyze usage trends, optimize workflows, and improve reliability.
  • Permitted Communications - Send service notices and, where lawful, marketing messages consistent with your preferences.
  • Security and Abuse Prevention - Detect fraud, misuse, and unauthorized access attempts.
  • Regulatory and Legal Compliance - Fulfill statutory duties, preserve records, and respond to lawful requests.

We do not monetize personal data by selling or renting it to unrelated third parties for their independent advertising use.

3. How We Protect Your Information

We apply technical and organizational safeguards intended to protect confidentiality, integrity, and availability of data:

  • Transport and Storage Protection - Encrypted transmission channels and controlled storage mechanisms.
  • Perimeter and Network Security - Defensive controls to reduce unauthorized ingress and lateral movement risk.
  • Payment Segregation - Transaction handling through vetted payment processors with dedicated security obligations.
  • Access Governance - Role-based, least-privilege access controls for internal personnel.
  • Control Review and Monitoring - Ongoing monitoring, patching, and periodic security assessments.

No internet-connected system can be guaranteed absolutely secure. Users should maintain credential hygiene and avoid transmitting sensitive data through unsecured channels.

4. Cookies and Tracking Technologies

We use cookies and comparable technologies for service functionality, analytics, security, and preference retention.

A. Types of Cookies We Use

  • Essential Cookies - Required for core platform operation, security, and session continuity.
  • Analytics Cookies - Measure usage patterns and performance to improve service quality.
  • Marketing Cookies - Support campaign attribution and relevance measurement where lawful.
  • Preference Cookies - Retain user settings to improve repeat-visit usability.

B. Managing Cookies

You may configure browser controls to block or delete cookies. Certain platform features may degrade if essential cookies are disabled.

5. Data Sharing & Third-Party Disclosure

We disclose personal data only where operationally necessary or legally required, including:

  • Service Providers - Infrastructure, payment, analytics, and support vendors acting under contractual restrictions.
  • Public Authorities - Government bodies or law enforcement where disclosure is lawfully compelled.
  • Corporate Transactions - Successor entities in merger, acquisition, restructuring, or asset transfer contexts.

6. Your Rights & Choices

Depending on jurisdiction, you may exercise rights regarding your personal data as permitted by law:

A. General Privacy Rights

  • Access - Request confirmation and a copy of personal data we hold.
  • Rectification - Request correction of inaccurate or incomplete information.
  • Deletion - Request erasure where continued retention is not legally required.
  • Restriction - Request limited processing in qualifying circumstances.
  • Portability - Request data in a structured, machine-readable format where applicable.

B. GDPR Compliance (For EU Users)

Data subjects in the European Economic Area may invoke GDPR rights, including objection and consent withdrawal rights, where legally applicable. To submit a request, use our Contact Us page.

C. CCPA Compliance (For California Residents)

California residents may invoke applicable rights under CCPA/CPRA, including:

  • Request access to collected personal information
  • Request deletion subject to statutory exceptions
  • Exercise opt-out rights for certain data disclosures

To submit a California privacy request, visit our Contact Us page.

D. Opting Out of Marketing Communications

Marketing recipients may unsubscribe at any time using the opt-out link included in relevant messages.

7. Data Retention Policy

Personal data is retained only for as long as necessary to fulfill legitimate business, contractual, and legal purposes.

  • Account and service records are retained during active use and archived pursuant to retention schedules.
  • Transaction documentation is retained for tax, audit, and legal compliance obligations.
  • Marketing preference records are retained until you opt out or lawful basis otherwise expires.

8. International Data Transfers

Where cross-border transfers occur, we implement transfer safeguards appropriate to the destination and risk profile, including contractual and organizational controls required by applicable law.

9. Children's Privacy

Our services are not directed to minors under 18 years of age, and we do not knowingly collect their personal data. If you believe data of a minor has been submitted, contact us promptly so appropriate remediation can be performed.

10. Updates to This Privacy Policy

We may revise this Privacy Policy to reflect legal developments, operational changes, or control enhancements. Material updates may be communicated through website notice or direct service communication where appropriate.

Privacy Questions?

For privacy questions, rights requests, or data-governance concerns, please contact our team through the channel below.

Get in Touch

Last Updated: April 19, 2026