Logo
FeaturesPricing

Book a Demo

Privacy

Nurish Pro Privacy Policy

Last Updated:August 8, 2025

Please read this Privacy Policy carefully before using the Nurish Pro website and software (the "Service"). The Service is owned and operated by Craftech Media Solutions LTD ("us," "we," or "our"), which trades as Nurish Pro. Craftech Media Solutions LTD is the data controller for the personal data processed in connection with your use of the Nurish Pro Service.

You can contact our data protection team at: [email protected]


Purpose and Scope

The purpose of this Privacy Policy is to inform nutrition professionals ("Practitioners" or "you") who use our Nurish Pro Service about:

  • The types of personal data we collect from you.
  • How we use the personal data we collect.
  • How we handle the client data you input and manage through the Service (where we act as a processor).
  • Who has access to the data collected.
  • Your rights as a Service user regarding your data.
  • The Service's cookie policy.

This Privacy Policy applies to the Nurish Pro website and software and operates in conjunction with our Nurish Pro Terms and Conditions. While Nurish Pro is part of the broader Nurish ecosystem, this policy specifically addresses the data practices relevant to practitioners using the Nurish Pro management software.


GDPR Compliance

For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the "GDPR"). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.
We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.


Consent

By using our Service, you indicate that you consent to the conditions set out in this Privacy Policy.

When the legal basis for us processing your personal data is that you have provided your explicit consent to that specific processing activity, you may withdraw your consent at any time.
If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.
You can withdraw your consent by contacting our data protection team at: [email protected].


Legal Basis for Processing Your Personal Data

We collect and process personal data about Practitioners only when we have a legal basis for doing so under Article 6 of the GDPR. We rely on the following legal bases to collect and process your personal data:

  • Contractual Necessity: Processing is necessary for the performance of our contract with you as a Practitioner (e.g., to provide you with the Nurish Pro Service, manage your account, process your subscription payments, enable client management features, facilitate your video calls).
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject (e.g., for tax purposes, regulatory compliance related to our Service provision).
  • Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms (e.g., to improve and maintain the Service, for security purposes, for analytical insights on Service usage, for marketing our services to you where permissible).
  • Consent: Where required, we will obtain your explicit consent for specific processing activities, such as for certain marketing communications.

Personal Data We Collect

We only collect data that helps us achieve the purposes set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.


Data You Provide Directly to Us:
  • Account and Professional Information: Your name, email address, phone number, business address, professional qualifications, registration details, professional body memberships, username, and password associated with your Nurish Pro account.
  • Billing and Payment Information: Details required for your Nurish Pro subscription, including billing address, and payment method details (while full payment card details are handled by third-party processors, we may store transaction records, payment status, and limited details for record-keeping and facilitating refunds).
  • Service Configuration Data: Information you input to configure your practice within Nurish Pro, such as your service offerings, availability, pricing, and video call preferences.
  • Communication Content: Any messages or communications exchanged with our customer support or other Nurish Pro teams.
  • Voluntary Information: Any other personal data you voluntarily provide to us when using the Service features or interacting with us.

Client Data Managed by Practitioners (Where we act as a Processor):

As a Practitioner using Nurish Pro, you may input, store, and process personal data of your clients through the Service. For this client data, you are the data controller, and Craftech Media Solutions LTD (Nurish Pro) acts as a data processor on your behalf. Our responsibilities as a data processor are governed by a separate Data Processing Addendum (DPA) that is incorporated into our Terms and Conditions.


The types of client data you might manage through Nurish Pro can include:

  • Client names, contact details, dates of birth.
  • Client health data (e.g., dietary information, medical history, progress notes, lifestyle details, data from connected wearable devices/smart sensors if you integrate these through the platform).
  • Appointment details, billing, and payment records related to your client services.
  • Communications between you and your clients.

You, as the Practitioner, are solely responsible for ensuring you have the necessary legal bases and consents from your clients for the collection, processing, and storage of their personal and health information via Nurish Pro


Data Collected Automatically:

When you visit and use our Service, we may automatically collect and store the following information:

  • IP Address:Used for approximate location services and security.
  • Device Information: Type of device, operating system, browser type, unique device identifiers.
  • Usage Data: Content viewed, pages navigated, features used, timestamps, and referral URLs.
  • Log Data: Information automatically recorded when you use the Service (e.g., access times, system activity, errors).
  • Cookies and Tracking Technologies:As detailed in our Cookie Policy below.

How We Use Personal Data

Data collected on our Service will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Service. We will not use your data beyond what we disclose in this Privacy Policy.

The data we collect from you (the Practitioner) is used for the following purposes:

  • Providing and Maintaining the Service: To operate, deliver, maintain, and improve the functionalities of the Nurish Pro platform, including account management, subscription services, practice configuration, and access to client management tools.
  • Communication: To send you service-related notifications, updates, billing information, reminders, educational content, newsletters, offers, promotions, marketing, and general information about the Service that we believe may be of interest to you.
  • Customer Support:To provide customer support, respond to your enquiries, and resolve any issues you encounter.
  • Security and Fraud Prevention:To protect the security and integrity of our Service, prevent fraud, verify identity, and enforce our Terms and Conditions.
  • Analytics and Service Improvement: To gather analysis and valuable information to understand how our Service is used, monitor its usage, detect and address technical issues, and continuously improve its design and functionality. This often involves anonymised or aggregated data.
  • Compliance: To meet and comply with legal obligations, regulatory requirements, and to establish, protect, and defend our legal rights and interests.

How We Process Client Data (Data Processor Role)

When you use Nurish Pro to manage your clients and their data, Craftech Media Solutions LTD acts as your data processor. This means we process your clients' data strictly in accordance with your instructions as the data controller, and as outlined in our Data Processing Addendum (DPA).


We process client data on your behalf for purposes such as:

  • Storing client profiles, health information, and progress notes.
  • Facilitating appointment scheduling and billing between you and your clients.
  • Enabling secure communication between you and your clients.
  • Storing user-generated content and wearable device data uploaded by your clients for your review.
  • Providing tools for you to analyse your clients' data for their nutrition guidance.

We do not use client data for our own purposes (e.g., marketing to your clients) unless explicitly agreed upon in a separate agreement or required by law.


Who We Share Personal Data With

We may disclose your personal data (as a Practitioner) to the following categories of recipients:


  • Employees and Internal Teams: We may disclose your data to members of our organization who reasonably need access to your data to provide the Service, bound by strict confidentiality agreements.
  • Third-Party Service Providers (Sub-Processors): : We engage trusted third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analysing how our Service is used. These include:
    • Payment Processors: Such as Stripe, to handle secure transactions for your Nurish Pro subscription fees.
    • Cloud Hosting Providers: For secure data storage and infrastructure.
    • Analytics Providers: Such as Google Services, to help us understand user behaviour and improve the Service. We share anonymised and aggregated data where possible.
    • Video Call Providers: To enable virtual appointments you conduct via the platform.
    • Other Technical Service Providers: For email delivery, customer support, and other operational functionalities.

  • Other Users (Limited): Your public profile information (e.g., name, professional title, specialisations) may be visible to clients on the Nurish client platform if you choose to list your services there. We do not share your private account details with other users.
  • Successors and Affiliates: In the event that we seek to sell the company, or in the event of a merger, acquisition, or asset sale, your personal data may be transferred as a business asset.
  • Legal and Regulatory Authorities: We may disclose your data if required to do so by law, a judicial proceeding, court order, or other legal process (e.g., in response to a subpoena or warrant), or to establish, protect, and defend our legal rights and interests.

Regarding Client Data: We only share your clients' personal data with sub-processors strictly for the purposes of providing the Nurish Pro Service to you, and in accordance with our Data Processing Addendum.

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose. If you follow hyperlinks from our Service to another website, please note that we are not responsible for and have no control over their privacy policies and practices.


How Long We Store Personal Data

We will retain your personal data for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.


Generally, we will retain your account information and associated data for the duration of your active Nurish Pro subscription. If you terminate your subscription or delete your account, we will delete or anonymise your personal data, though some data may be retained for a limited period to comply with legal obligations, resolve disputes, or enforce our legal agreements and policies.

Regarding Client Data: Client data that you manage through Nurish Pro will be retained according to your instructions and our Data Processing Addendum. Upon termination of your Nurish Pro account, client data will be deleted or returned to you as specified in the DPA.


You will be notified if your data is kept for longer than this period for specific reasons.



How We Protect Your Personal Data

We are committed to ensuring the security of your personal data, and the client data you manage, especially sensitive health information. We implement a variety of robust technical and organisational measures designed to protect your data from unauthorised access, use, alteration, and disclosure. These measures include:

  • Using strong encryption (SSL/TLS) for data in transit and at rest.
  • Storing all data on servers in secure, access-controlled facilities.
  • Implementing strict access controls and limiting access to your data to a restricted number of our employees who require it for their job functions
  • Ensuring our employees are bound by strict confidentiality agreements, with a breach of this agreement resulting in dismissal.
  • Implementing robust authentication mechanisms, regular security audits, and vulnerability assessments.
  • Maintaining appropriate backup and disaster recovery procedures.

While we take all reasonable precautions to ensure that your data is secure, and that your clients' data is protected, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.


Your Rights as a User

Under the GDPR and UK GDPR, you have the following rights regarding your personal data:

  • The Right to be informed: You have the right to be informed about the collection and use of your personal data.
  • Right of access:You have the right to request access to the personal data we hold about you.
  • The Right to rectification:You have the right to request that we correct any inaccurate or incomplete personal data.
  • The Right to erasure (the "Right to be Forgotten"): You have the right to request the deletion of your personal data in certain circumstances.
  • The Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • The Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
  • The Right to object:You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
  • Rights in Relation to Automated Decision-Making and Profiling:You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Children

The Nurish Pro Service is intended for use by adult nutrition professionals and is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 years of age directly through the Nurish Pro Service. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 years of age has provided us with personal data, their parent or guardian may contact our privacy team.


How to Access, Modify, Delete, or Challenge the Data Collected

If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to whom we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please contact our privacy team at:
[email protected]


Delete Your Account

You can request to delete your Nurish account and associated data at any time. To proceed with account deletion, please visit our Account Deletion Request Page at

http://nurish.life/delete-account-guide

Alternatively, you may send an email with your account deletion request to [email protected] Please include your nurish username or the email address associated with your account in your request.


Do Not Track Notice

Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. We do not track the users of our Site over time and across third party websites and therefore do not respond to browser-initiated DNT signals. We are not responsible for and cannot guarantee how any third parties who interact with our Site and your data will respond to DNT signals.


How to Opt-Out of Data Collection, Use or Disclosure

In addition to the method(s) described in the "Your Rights as a User" and "How to Access, Modify, Delete, or Challenge the Data Collected" sections, we provide the following specific opt-out methods:

  • Marketing Communications:You may opt-out of receiving marketing materials from us by following the unsubscribe link or instructions provided in any marketing email we send. Please note that even if you opt-out of marketing communications, we may still send you transactional or service-related messages regarding your account or our Service.
  • Cookies: You can manage cookie preferences through your browser settings as described in our Cookie Policy.

Cookie Policy

A cookie is a small file, stored on a user's device by a website. Its purpose is to collect data relating to the user's browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience.

We use the following types of cookies on our Service:

  • Functional cookies These cookies are essential for the operation of our Service, enabling core functionalities like secure login, session management, and remembering your preferences.
  • Analytical cookies These cookies allow us to improve the design and functionality of our Service by collecting anonymised data on user behaviour, such as page views, feature usage, and overall Service performance. We use services like Google Analytics for this purpose.
  • Security cookies These cookies are used for security purposes, such as identifying and preventing security risks.

International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your country, province, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction

As Craftech Media Solutions LTD is incorporated in Ireland, your personal data will primarily be processed within the European Economic Area (EEA). However, we use third-party service providers (sub-processors) who may operate outside the EEA. In such cases, we ensure that appropriate safeguards are in place to protect your personal data, such as relying on adequacy decisions, Standard Contractual Clauses (SCCs), or other legally approved transfer mechanisms.

By providing your personal data, you agree to this transfer, storing, and processing.


Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection processes or Service operations. When we amend this Privacy Policy, we will update the "Last Updated" date at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of significant changes to this Privacy Policy.


Complaints

If you have any complaints about how we process your personal data, please contact us through the contact methods listed in the "Contact Information" section so that we can, where possible, resolve the issue. If you feel we have not addressed your concern in a satisfactory manner, you may contact a supervisory authority. You also have the right to directly make a complaint to a supervisory authority. You can lodge a complaint with a supervisory authority by contacting the Data Protection Commission (DPC) in Ireland.


Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, you can contact us: