Privacy policy

MyNutriCare is the controller of your personal data. This means we decide how and why it is used. You can contact us about privacy at support@mynutricare.co.uk; please put Privacy in the subject line.

This policy applies to every country edition of our site. For UK users it follows the UK GDPR and the Data Protection Act 2018. Country sections at the end explain extra rights in other editions.

• Account details: your name, email address, password (stored in scrambled form) and country edition.
• Orders: the courses you buy, prices, dates and the billing details you give at checkout. Card payments are handled by our payment provider; we never see or store your full card number.
• Learning records: your enrolments, lessons completed, quiz and final check results, certificates and their verification IDs.
• Tool data: what you enter in trackers, planners, checkers, calculators, builders, lists and templates, such as meals, weight, symptoms, sleep, feeding logs or pregnancy details.
• Support messages: emails and contact form messages you send us (your name, email address, topic and message) and our replies.
• Consent records: whether and when you gave or withdrew consent to save tool data and the wording you saw, and, for orders, when you asked for immediate access at checkout.
• Technical and analytics data: device and browser type, pages visited and how the site is used. Analytics data is only collected if you accept analytics cookies.

Many tool entries are information about your health, or about the health of a baby or child you care for. Under UK GDPR this is special category data, which needs extra protection.

• We only save tool data to your account with your explicit consent, given separately with an unticked box the first time you save a tool, or on My Progress. We record when you gave it and the wording you agreed to.
• You do not have to agree in order to buy or read a course. Without consent, tools still work in your browser while you use them, but your entries are not saved to your account.
• We use tool data only to show you your tools, charts, PDFs and progress.
• We never sell tool data, use it for advertising or profiling, or share it with anyone except the processors who host and run the site for us.
• You can withdraw consent at any time with the button on My Progress or by emailing us. Withdrawing deletes all your saved tool data straight away and stops new entries being saved. It does not affect your access to your courses, your lesson progress or your certificates.

We do not make decisions about you using only automated processing that have legal or similarly significant effects.

We use trusted service providers (processors) who act only on our instructions, under written contracts that require them to keep your data secure:

• Payment provider: processes your card or wallet payment.
• Hosting provider: stores the website, your account, learning records and tool data.
• Email provider: delivers order confirmations, password resets and, if you agree, newsletters.
• Analytics provider: only if you accept analytics cookies.

We may also share data when the law requires it, to protect people's safety, or with a buyer if MyNutriCare is sold, in which case this policy continues to apply. We do not sell personal data.

Some of our providers may process data outside the UK. When they do, we make sure the data is protected by a UK adequacy decision or by approved safeguards, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework.

After these periods we delete the data or make it fully anonymous.

We use encrypted connections (HTTPS), store passwords in scrambled form, limit staff access to what is needed for their role and require our processors to protect your data. If a data breach is likely to put you at risk, we will tell you and the regulator as the law requires.

Under UK GDPR you have the right to:

1. be informed about how we use your data;
2. access a copy of your data;
3. have inaccurate data corrected;
4. have your data erased;
5. restrict how we use it;
6. data portability (receive it in a reusable format);
7. object to processing based on legitimate interests or for marketing;
8. not be subject to decisions based only on automated processing.

You can also withdraw consent at any time.

• Export: download your data from My Progress.
• Delete: delete your tool data and course progress from My Progress. Your enrolments and certificates stay so you keep access to what you bought.
• Close your account: email us and we will delete your account, apart from records we must keep by law, such as order records for tax.

We reply to requests within one month. If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use essential cookies to keep you signed in, remember your basket and country edition and keep the site secure. These do not need consent. Analytics and any other non-essential cookies are only set if you accept them, and you can change your choice at any time.

Our site and courses are for adults aged 18 and over. We do not knowingly collect data from children. Some courses help parents and carers record information about a baby or child; that data belongs to the parent's or carer's account and is protected as health data. If you think a child has created an account, email us and we will delete it.

The EU General Data Protection Regulation and the Data Protection Act 2018 (Ireland) apply. Your rights are the same as those listed above. You can complain to the Data Protection Commission at dataprotection.ie.

This section is also our consumer health data privacy notice for state laws such as Washington's My Health My Data Act.

• The consumer health data we collect is the tool data described in section 2. We collect it from you, with your consent, only to provide your tools, charts and progress.
• We share it only with the processors in section 5, and we do not sell it or use it for targeted advertising.
• Depending on your state, you may have the right to know, access, correct, delete and obtain a copy of your personal data, to withdraw consent and to opt out of sale or targeted advertising. We do not discriminate against you for using these rights.
• To use your rights, email us. If we refuse a request, you can ask us to reconsider.

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We treat health information as sensitive and only collect it with your express consent. You can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

We handle personal information in line with the Privacy Act 1988 and the Australian Privacy Principles. Health information is sensitive information and is only collected with your consent. You can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We handle personal information in line with the Privacy Act 2020 and its information privacy principles, and we protect health information to the standard of the Health Information Privacy Code 2020. You can request access to or correction of your information at any time and can complain to the Office of the Privacy Commissioner at privacy.org.nz.

We may update this policy when our services or the law change. The date at the top shows the latest version. If we make an important change, such as using your data for a new purpose, we will email you before it takes effect and ask for your consent where needed.