Privacy Policy

Who We Are

This website, The Nook, is the official blog of Nursnook, Inc., a Nurshaus Foundation enterprise. The Nook is served from Switzerland by Infomaniak, a Swiss hosting provider.

What Data We Collect

The Nook is designed to respect your privacy by default. Here is exactly what we collect:

  • No analytics tracking. We do not use Google Analytics, Meta Pixel, or any third-party tracking service.
  • No advertising cookies. We do not serve ads or participate in ad networks.
  • No third-party scripts on public pages. We do not load fonts, widgets, or trackers from external domains.
  • Subscription data. If you subscribe to our newsletter, we store your name, email address, topic preferences, and frequency choice. This data is stored in our database hosted by Infomaniak in Switzerland.
  • Server logs. Our hosting provider (Infomaniak) may collect standard server access logs including IP addresses, browser type, and pages visited. These logs are managed by Infomaniak under Swiss law.

Cookies We Use

We use only the following cookies:

Cookie Purpose Category Duration
nh_consent Stores your cookie preference choice Essential 1 year
PHPSESSID Session management (admin authentication only) Essential Session

That's it. No functional, analytics, or marketing cookies are currently deployed. If this changes, we will update this page and prompt you for consent before any new cookies are set.

Legal Basis for Processing

Under the EU General Data Protection Regulation (GDPR), Swiss Federal Act on Data Protection (nDSG/FADP), and applicable laws:

  • Essential cookies: Legitimate interest (Art. 6(1)(f) GDPR) — required for the site to function.
  • Newsletter subscription: Consent (Art. 6(1)(a) GDPR) — you actively choose to subscribe.
  • Future non-essential cookies: Will require your explicit opt-in consent before activation.

Your Rights Under GDPR & Swiss nDSG

You have the right to:

  • Access your personal data (Art. 15 GDPR)
  • Rectify inaccurate data (Art. 16 GDPR)
  • Erase your data — "right to be forgotten" (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability — receive your data in a structured format (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact privacy@nursnook.com.

Your Rights Under CCPA/CPRA (California)

If you are a California resident, you have the right to:

  • Know what personal information we collect and why
  • Delete your personal information
  • Opt out of the sale or sharing of personal information
  • Non-discrimination for exercising your privacy rights

We do not sell or share your personal information. We have no advertising relationships, no data brokers, and no third-party data sharing agreements. The "Do Not Sell My Info" link in our footer opens your cookie preferences as a matter of compliance and transparency.

We honor the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, we automatically treat it as an opt-out of any future non-essential data collection.

Healthcare Data & HIPAA

The Nook serves a community of nurses and healthcare professionals. We take that responsibility seriously.

  • The Nook is not a HIPAA covered entity. We are not a healthcare provider, health plan, or healthcare clearinghouse. We do not collect, store, process, or transmit Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA).
  • No clinical data is collected. We do not ask for, and our systems are not designed to handle, patient information, medical records, diagnoses, treatment details, or any other form of PHI.
  • Do not share PHI on this site. If you use any interactive feature — comments, community discussions, or any future user-generated content — do not include patient-identifiable information. Content that appears to contain PHI will be removed.
  • We recognize our audience. Many of our readers are bound by employer confidentiality policies, state nurse practice acts, and professional codes of ethics. Nothing on The Nook should be interpreted as a substitute for your employer's compliance requirements or professional obligations.

If Nursnook or Nurshaus Foundation launches features that involve direct messaging, care coordination, or any form of clinical data exchange, a full HIPAA Business Associate analysis and corresponding technical safeguards will be implemented before those features go live.

Third-Party Processors

Processor Purpose Location
Infomaniak Web hosting & server infrastructure Switzerland

No data is transferred outside of Switzerland or the European Economic Area.

Data Retention

  • Cookie preferences: Stored for 1 year, then re-prompted.
  • Newsletter subscriptions: Retained until you unsubscribe. You can unsubscribe at any time using the link in any email or by contacting us.
  • Server logs: Managed by Infomaniak per their retention policy.

Children's Privacy

The Nook is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to This Policy

We will update this page when our data practices change. Material changes will be noted with a revised "Last updated" date at the top. We will not reduce your rights under this policy without your explicit consent.

Cookie Preferences

You can review and change your cookie preferences at any time by clicking Privacy Preferences or using the "Privacy" link in our footer.

Contact

For any privacy-related questions or requests:

Home Subscribe