Privacy Policy
Last updated: 30 July 2026 (draft)
This notice explains what personal data GlobalNurse collects, why, who it is shared with, how long it is kept, and what rights you have. Our Terms of Service cover the agreement itself.
1. Who is responsible for your data
GlobalNurse, Dublin, Ireland, is the data controller for the information described here. For any privacy question, or to exercise the rights in section 7, contact hello@globalnurse.ie.
2. What we collect
- Account details — name, email address, and the password hash held by our authentication provider. We never see your password in readable form.
- Professional profile — country of origin, country of residence, specialty, years of post-qualification experience, and phone number if you provide one.
- Documents you upload — which may include your passport, nursing licence, transcripts and degree certificates, CV, reference letters, police clearance, health check, English test certificates and competency exam results.
- Test scores — IELTS, OET, CBT, OSCE and similar results, including sub-scores and expiry dates.
- Messages — if you accept a connection from a recruiter, the messages you exchange on the platform.
- Billing references — if you subscribe, the customer and subscription identifiers issued by our payment provider. We never receive or store your card details.
Some of this is sensitive. Police clearance and health check documents, and identity documents such as a passport, attract additional protection under UK and EU data protection law, and we handle them only for the purposes below.
3. Why we use it, and on what legal basis
- To run your registration journey — scoring your eligibility, building your roadmap, tracking documents and exams. Basis: performance of our contract with you.
- To let recruiters find you — showing a limited profile (experience, specialty, country of origin, target country, eligibility percentage) in the recruiter directory. Your name, email, documents and test scores are not shown, and are revealed to a recruiter only if you accept their connection request. Basis: performance of our contract, and your consent when you accept a request.
- Optional AI features — if you use CV review or the career coach, the relevant text is sent to our AI provider to generate feedback. Basis: your consent, given by choosing to use the feature.
- Payments — to take subscription payments. Basis: performance of our contract.
- Security and reliability — bot protection, error monitoring, and abuse prevention. Basis: our legitimate interest in keeping the platform safe.
- Analytics cookies — only if you opt in. Basis: your consent, which you give or refuse on your first visit.
4. Automated eligibility scoring
Your eligibility percentage is produced automatically, by comparing the qualifications, experience, documents and test scores you enter against the published requirements of the relevant regulator (the NMC for the United Kingdom, NMBI for Ireland). It is an informational estimate to help you plan. It is not a decision by a regulator, it does not determine whether you will be registered, and no employment or immigration outcome is decided by it. You can see exactly which requirements were counted as missing, and you can contact us if you believe a result is wrong.
5. Who we share it with
We do not sell your personal data. We share it only with the service providers we need to operate, each acting on our instructions:
- Supabase — database, authentication and document storage. Data is hosted in the EU (Ireland).
- Anthropic — powers CV review and the career coach. If you use those features, the CV text or conversation you submit is processed by Anthropic in the United States.
- Stripe — subscription payments and card handling.
- Sentry — error monitoring, configured not to send personal data by default.
- Cloudflare — bot protection on the signup and login forms.
- Recruiters — see section 3. Only the limited directory fields, unless you accept a connection request.
Where a provider processes data outside the UK or EU, that transfer relies on the safeguards in their data processing terms, such as Standard Contractual Clauses. We are reviewing these arrangements as part of finalising this notice.
6. How long we keep it, and how it is protected
We keep your data for as long as your account is open. If you delete your account, your profile, documents, test scores, roadmaps and messages are removed immediately and permanently. Uploaded documents are held in private storage that is not publicly reachable — no one can retrieve a file by guessing its address, and access is restricted to you and, where necessary for verification, our administrators. Access to every record is enforced at the database level, not only in the interface.
Messages you exchange with a recruiter are private to the two of you and encrypted in transit and at rest, but they are not end-to-end encrypted: we are technically able to access them, for example if we are required to investigate a report of abuse.
7. Your rights
You have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw any consent you have given. You can download a complete export of your data, or permanently delete your account, at any time from Settings — no request to us is needed.
If you think we have handled your data improperly, please contact us first so we can put it right. You also have the right to complain to a supervisory authority — in Ireland, the Data Protection Commission; in the United Kingdom, the Information Commissioner's Office.
8. Changes to this notice
If we change how we use your data, we will update this page and the date above, and tell you directly where the change is significant.