NurseNest Privacy Policy
Effective Date: April 1, 2026
Last Updated: April 1, 2026
This Privacy Policy explains how NurseNest collects, uses, discloses, stores, and protects personal information when you use our website, applications, study tools, subscriptions, emails, and related services.
Scope
This Privacy Policy applies to information we collect through NurseNest and related communications.
Information We Collect
Information you provide directly
We may collect:
name
email address
password or authentication credentials
billing address
country and pathway selections
subscription selections
support requests
notes or user-generated study content
survey responses
marketing preferences
any other information you choose to provide
Information collected automatically
We may collect:
IP address
device identifiers
browser type
operating system
session data
usage activity
page visits
clickstream data
time spent on pages
lesson/question usage
subscription status events
referral URLs
error logs
security event logs
cookie and similar technology data
Payment information
Payments are processed by third-party payment providers such as Stripe. We typically do not store full payment card numbers on our own servers. We may receive limited payment-related information such as billing name, last four digits, payment status, country, postal code, and transaction identifiers.
How We Use Information
We may use personal information to:
create and manage accounts
provide access to subscriptions and entitlements
process payments and renewals
deliver lessons, practice tools, notes, and study features
personalize user experience
improve content, pathways, and product design
operate blog scheduling, content generation, and internal workflows
communicate transactional messages
send marketing messages where permitted and where consent is obtained when required
detect fraud, abuse, unauthorized sharing, scraping, and security threats
enforce our Terms and protect our rights
comply with legal obligations
maintain backups, analytics, logging, and audits
Legal Basis / Consent
Where required by law, we rely on your consent, our contractual necessity to provide the Services, our legitimate interests in operating and securing the platform, compliance obligations, and other lawful grounds recognized by applicable law.
For Canadian users, we seek meaningful consent where required and collect, use, and disclose personal information for stated and reasonable purposes related to providing and operating the Services.
Marketing Communications
We may send you service-related communications such as receipts, renewal notices, password resets, support messages, policy updates, and important account notices.
We may also send marketing communications where permitted by law and, where required, where we have the appropriate consent. You can unsubscribe from marketing emails using the unsubscribe mechanism in the message or by contacting us. In Canada, commercial electronic messages generally require consent and must include identification and an unsubscribe mechanism; unsubscribe requests must be acted on within 10 business days.
Cookies and Similar Technologies
We may use cookies, local storage, pixels, tags, SDKs, and similar technologies to:
keep you logged in
remember settings and preferences
analyze traffic and product usage
measure campaign performance
detect fraud and abuse
improve performance and reliability
You can manage some cookies through your browser settings. Some features may not function properly if certain cookies are disabled.
How We Share Information
We may disclose personal information:
to service providers who help us operate the Services
to payment processors
to hosting, storage, email, analytics, logging, security, and support vendors
to professional advisors such as lawyers, accountants, and insurers
in connection with mergers, financing, restructuring, asset sales, or acquisitions
when required by law, court order, subpoena, or lawful request
to protect rights, safety, or the integrity of the Services
in connection with fraud prevention, chargeback defense, or abuse investigations
We do not sell your personal information in the ordinary meaning of that phrase. If laws like California’s define "sale" or "sharing" more broadly and they apply to our practices, we will address those obligations through applicable notices and rights processes.
International Transfers
Your information may be stored or processed in Canada, the United States, or other countries where we or our service providers operate. Laws in those jurisdictions may differ from those in your home jurisdiction.
If you target or serve EU users in a way that brings GDPR into scope, you should add a more specific international transfer section after legal review.
Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining records, resolving disputes, enforcing agreements, complying with legal obligations, defending chargebacks, and supporting security investigations.
Retention periods may vary based on the type of information, sensitivity, legal requirements, accounting obligations, dispute risk, and technical necessity.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Rights
Depending on your location, you may have rights to request access to, correction of, or deletion of certain personal information, to withdraw consent where applicable, or to complain to a privacy regulator.
For Canadian privacy concerns, users can contact us first so we can try to resolve the issue. PIPEDA is overseen by the Office of the Privacy Commissioner of Canada.
If you are subject to CCPA or GDPR, you may need a more detailed rights section and request-handling process.
Children
The Services are not directed to young children. If we learn that we collected personal information from a child in a manner that violates applicable law, we will take appropriate steps to delete it.
Third-Party Links and Tools
The Services may contain links to third-party websites or tools. We are not responsible for their privacy practices.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted with a revised "Last Updated" date.
Contact Us
For privacy questions or requests, contact:
NurseNest
Ontario, Canada