Privacy Policy

Effective Date: 2 November 2026

Website: TheStudentNurse.co.uk

Data Controller: Daniel Hancock (The Student Nurse)

Contact Email: TheStudentNurse.co.uk

At TheStudentNurse.co.uk, we are committed to protecting your privacy and ensuring your personal data is handled securely and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect and process personal data only when necessary to provide our digital educational resources, process orders, and communicate with you.

• Order & Transaction Data: When you purchase digital downloads from our store, we collect your name, billing address, email address, and purchase history.
• Payment Information: Payment processing is handled securely by third-party payment gateways (such as Stripe and PayPal). We do not store or have direct access to your debit/credit card numbers.
• Account & Communication Data: If you subscribe to our newsletter, download free resources, or contact us via email, we collect your name, email address, and any messages you send us.
• Technical & Usage Data: When you browse our website, we may automatically collect basic technical information such as your IP address, browser type, device information, and site interaction data via essential cookies.

2. How We Use Your Information

We use your personal data for the following lawful purposes:

• Fulfilling Orders: To process transactions, generate digital download links, and send order confirmations or abandoned cart reminders.
• Customer Support: To respond to your inquiries, assist with technical download issues, or provide post-purchase support.
• Marketing Communications: With your explicit consent, to send you educational newsletters, site updates, and promotional offers (e.g., special offers or new book releases). You can opt out at any time using the "Unsubscribe" link in any email.
• Legal Compliance: To maintain proper tax, accounting, and transaction records as required by UK law.

3. Legal Basis for Processing Data

Under the UK GDPR, we process your data under the following legal bases:

1. Contractual Necessity: Processing required to fulfill your order and deliver your purchased digital products.
2. Consent: Where you have explicitly opted in to receive our email communications.
3. Legitimate Interests: To improve our website performance, prevent fraud, and run our business effectively without unreasonably impacting your rights.
4. Legal Obligation: To comply with statutory financial and record-keeping requirements.

4. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with trusted service providers necessary to operate our website and fulfill our services:

• Website Platform & Hosting: WordPress, WooCommerce / Easy Digital Downloads.
• Payment Processors: Stripe / PayPal for secure payment handling.
• Email Marketing & Delivery: Email service providers used to deliver newsletters and transactional emails.

All third-party providers are vetted to ensure they adhere to strict UK GDPR compliance and security standards.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Transaction Records: Retained for up to 6 years to comply with UK tax and financial reporting laws.
• Marketing Subscriber Data: Retained until you unsubscribe or request data deletion.

6. Your Data Protection Rights

Under UK data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data where there is no legal requirement for us to keep it.
• Right to Restrict or Object: Object to data processing or request restrictions on how your data is used.
• Right to Withdraw Consent: Withdraw your consent for marketing communications at any time.

To exercise any of these rights, please contact us at [Insert Contact Email].

7. Security

We take appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or misuse. Access to personal data is restricted strictly to authorized purposes.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or relevant legal requirements. Any updates will be posted on this page with an updated "Effective Date."

9. Complaints

If you have concerns about how we handle your data, please contact us first so we can resolve the issue. You also have the right to lodge a complaint with the UK's independent data protection authority:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk