The Nourish Nurse® logo

Privacy Policy

Last updated: 1 November 2026

1. Who I am

The Nourish Nurse® is run by me, Caroline Staples, a Registered Mental Health Nurse and Women's Health Educator. I trade as a sole trader in the UK.

I am the data controller for the personal information described in this policy. That means I decide how and why your information is used, and I am responsible for looking after it.

Email: info@thenourishnurse.co.uk

ICO registration number: ZC184068

2. What this policy covers

This policy explains how I collect, use, store and protect your personal information when you:

  • visit my website, thenourishnurse.co.uk, my booking pages, or my Stan Store page
  • sign up for a free resource, quiz or programme, such as my free hormone guide
  • book or buy a call, programme or other service, or fill in a booking form or questionnaire
  • join one of my private online groups
  • contact me by email, through social media or by phone
  • join my mailing list

3. The information I collect

  • Contact details: your name, email address and, if you give it, your phone number.
  • Information about your health and wellbeing: for example symptoms you are experiencing, where you are in perimenopause or menopause, sleep, eating habits, mood, medication you choose to mention, and your goals. You may share this through quiz answers, booking or intake forms, calls, programmes or messages.
  • Purchase information: what you bought, when, and how much you paid. Card payments are handled by the payment provider. I never see or store your full card details.
  • Session notes: notes I make during calls and programmes so I can support you properly.
  • Messages: emails, direct messages and anything else you send me.
  • Technical information: my website, booking pages and Stan Store may collect information such as your device, browser and pages visited, using cookies. This is covered by their own policies and cookie notices.

4. Why I use your information and my lawful basis

Under UK data protection law I must have a lawful reason for using your information. These are mine:

  • To provide what you have signed up for or bought, including free resources, programmes, calls and the emails that are part of them. Lawful basis: contract, or steps you have asked me to take before entering into one.
  • To send you newsletters and offers, only if you have opted in. You can unsubscribe at any time using the link in every email. Lawful basis: consent.
  • To use information about your health, so I can tailor education and support to you. Lawful basis: your explicit consent, which I ask for separately (see section 5).
  • To keep financial and tax records. Lawful basis: legal obligation.
  • To run and protect my business, including answering enquiries, keeping records in case of a question or complaint, and keeping my systems secure. Lawful basis: legitimate interests.

5. Your health information

Information about your health is classed as special category data and needs extra protection. I only collect what I need to support you, and I only use it with your explicit consent. I ask for this consent separately from anything else you agree to.

You can withdraw consent at any time by contacting me. If you do, I may not be able to continue coaching you, because I would not be able to take your circumstances into account.

My work is nurse-led education and coaching. It is not diagnosis or treatment. If something you tell me suggests you should seek medical advice, I will encourage you to speak to your GP.

As a Registered Nurse I have a professional duty to act if I believe you, or someone else, are at serious risk of harm. In that situation I may share relevant information with emergency services or other appropriate professionals without your consent. Wherever it is safe and possible, I will talk to you first.

I never sell your health information or use it for advertising.

6. Private online groups

Some of my programmes include a private Facebook group. Anything you post there can be seen by other members of the group, and Facebook (Meta) processes it under its own privacy policy. Please only share what you are comfortable with other members seeing. Members who do not respect others' privacy will be removed.

7. Who I share your information with

I never sell your personal information. I share it only with trusted service providers who help me run my business. They act on my instructions and must keep your information secure:

  • HighLevel (LeadConnector): my website, booking calendar, forms and questionnaires, client records, and booking reminders by email or text
  • Stan (Stan Store): my online store, sign-ups and checkout
  • Stripe and PayPal, who process payments made through my booking pages and Stan Store
  • MailerLite: my mailing list and programme emails
  • Microsoft 365: my business email, secure file storage and calendar
  • Fixing IT: IT support, security and backup of my business systems
  • Zoom: video calls and recorded sessions
  • HMRC, and any accountant I use, where required by law

I may also share information if the law requires it, or to protect someone's safety as described in section 5.

8. Information stored outside the UK

Some of the services I use, including HighLevel and Stan Store, are based in the United States or store information there. Where your information is transferred outside the UK, I rely on the safeguards UK law requires, such as the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or the UK Extension to the EU-US Data Privacy Framework where the provider is certified.

9. How I keep your information secure

Your information is stored in secure, password-protected systems that are backed up, with IT support from a specialist provider. Access is limited to me.

No system is completely risk-free. If a data breach affects your information and is likely to put your rights at risk, I will tell you and, where required, the Information Commissioner's Office.

10. How long I keep your information

Mailing list: until you unsubscribe. I keep your email address on a suppression list after that so you are not contacted again.

Enquiries and free sign-ups where you do not go on to work with me: 12 months from our last contact, unless you remain on my mailing list.

Client records, including health information and session notes: 6 years after our work together ends.

Financial records: for as long as HMRC requires, currently at least five years after the 31 January submission deadline for the relevant tax year.

After these periods, your information is securely deleted.

11. Your rights

You have the right to:

  • ask for a copy of the information I hold about you
  • ask me to correct anything inaccurate
  • ask me to delete your information
  • ask me to restrict or stop using your information
  • object to how I use your information
  • ask for your information in a format you can take elsewhere
  • withdraw your consent at any time

Some rights depend on the circumstances. For example, I must keep financial records for HMRC. To use any of these rights, email me. There is no charge, and I will respond within one month.

12. Automated decisions

My quiz suggests resources based on your answers. It does not make any decision about you that has a legal or similarly significant effect.

13. Age

My services are for adults aged 18 and over. I do not knowingly collect information from anyone under 18.

14. Complaints

If you have a concern about how I handle your information, please contact me first so I can put it right.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

15. Changes to this policy

I may update this policy from time to time. The latest version will always be available on my website and Stan Store page, with the date it was last updated at the top.