Privacy notice

This notice describes the site as it runs today: a free beta of study guides and a free diagnostic, published as a static website. There are no accounts, no payments, no email sign-up, no statistics of our own and no cookies set by us.

Who is responsible

BedsidePath is a trading name of BHARATFARE TRAVEL AND TECHNOLOGIES LTD, registered in England and Wales, company number 16716642, whose registered office is Room 3, 40 Beechwood Avenue, Plymouth, England, PL4 6PW. The company is the data controller for this website. Email: support@eu-nursehub.com. We are registered with the Information Commissioner's Office, registration reference ZC063918.

This site is for qualified and student nurses and is intended for adults. We do not knowingly collect data from children.

What happens to your information

We have designed this site to need as little information about you as possible. Three different things happen, and they are worth separating.

1. Your diagnostic answers never reach us. The questions arrive with the page. When you submit, your browser downloads the answer key and works out your results itself. Your answers and your score are never sent to us, and we keep no record of them. Results are shown once and are not saved: note down anything you want to keep.

2. Delivering the website involves your network information. Like every website, this one cannot reach you without your device's network details. Our hosting provider receives your IP address, the page you asked for, your browser's user agent and similar request information, and uses it to deliver the page and to protect the service against attack. We do not receive a copy of those logs. Our provider's dashboard does show us summary traffic information, such as how many requests a page received and which countries they came from; we do not use it to identify or profile you, and we do not combine it with anything else.

• Purpose: delivering and protecting the website. Lawful basis: our legitimate interests in making the site available and keeping it secure (UK GDPR Article 6(1)(f)). Retention: we keep none of it ourselves. Our hosting provider keeps request records for as long as it needs them to run and protect its network, under its own terms.

3. If you email us, we hold your email. We process your address, your message and anything you include, to answer you and to keep a record of corrections and complaints.

• Purpose: answering correspondence; recording corrections and complaints. Lawful basis: our legitimate interests in running and correcting the service and in replying to the people who use it (Article 6(1)(f)); where you exercise a data protection right, complying with our legal obligation (Article 6(1)(c)). Retention: see below.

No automated decision-making. Nothing here profiles you or makes decisions about you.

Cookies and storage on your device

We set no cookies. We use no analytics, advertising or social media tools, and no tracking pixels.

While you take the diagnostic, your answers so far are kept in your browser's local storage. That is not a cookie: it stays on your device and is never sent to any server, including ours. It is removed when you submit, and you can clear it at any time in your browser settings.

Our hosting provider is able to set strictly necessary cookies when certain protection features are switched on, such as bot protection or a security challenge. We keep those features switched off, and checking this is a required step in the release checks we run before and after every deployment. If that ever has to change, we will update this notice first.

Who else is involved

Our hosting and domain provider: Cloudflare, Inc. Cloudflare serves this website and handles our domain and our incoming email. It acts as our processor under its Customer Data Processing Addendum, which forms part of its terms. It operates a global network, so your request information may be processed outside the United Kingdom; Cloudflare states that it relies on the European Commission's standard contractual clauses together with the UK Addendum for those transfers. Cloudflare publishes its privacy policy, its data processing addendum and its list of sub-processors on its own website, and you can ask us for details of those safeguards at the address below.

Our email route: Cloudflare Email Routing, then Google. Mail to support@eu-nursehub.com passes through Cloudflare Email Routing and is delivered into a Google mailbox that we read. Google states that it does not offer a data processing agreement for the consumer version of Gmail, and that it does not act as a data processor for it. In plain terms, Google handles that mail under its own terms and privacy policy as an independent controller, rather than purely on our instructions, and your message is stored on Google systems, which are located in the United States and in other countries. For that transfer we rely on Google LLC's certification under the UK extension to the EU-US Data Privacy Framework; we hold no data processing agreement, standard contractual clauses or UK Addendum with Google for this mailbox, and we tell you so plainly rather than implying protections we do not have. If you would rather your message were not handled this way, write to us by post at the address above.

We use no payment provider and no analytics provider.

How long we keep email

We keep support correspondence for 12 months and then delete it, except where we need to keep a message longer: while a complaint or correction is still open; where a record of a clinical correction belongs in our published corrections log; where the law requires it; or where we need it to establish, exercise or defend a legal claim.

Deletion is done by hand, on a review we carry out every three months. It is not automatic. Once we delete a message, Google documents that it stays in the bin for 30 days, that completing a deletion generally takes around two months, and that data can remain in encrypted backups for up to six months.

Your rights

You have rights over personal data about you: to ask for a copy, correction or deletion, to object or ask us to restrict processing, and to ask for portability where it applies. Because the website itself stores nothing about you, there is usually nothing to find. If you have emailed us, we can find, supply and delete that correspondence. Write to support@eu-nursehub.com. We respond within one month, as UK law requires.

Where we rely on legitimate interests, you can object, and we will stop unless we have compelling grounds to continue.

If you are unhappy with how we handle your data, please tell us first at support@eu-nursehub.com. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) at any time.

Security

The site is served only over HTTPS. It is built as plain files, with no server of ours and no database of diagnostic results, so there is no store of results to lose. The pages load no third-party scripts, and we publish a content security policy and related security headers with the site. These are technical measures intended to reduce the risk of tampering and of content being loaded from somewhere else. No such measure removes risk entirely.

Email correspondence is different: it sits in our mailbox and with the providers described above, protected by their security and by the protections we keep on our own accounts. No method of transmission or storage is completely secure, and we do not guarantee that ours is.

Changes

We record changes to this notice on our content update policy page. Before we add anything that collects data, such as statistics, accounts, email sign-up or payments, we will update this notice first and, where the law requires it, ask for your consent.