GDPR and EEA/UK Privacy Notice
Additional information for individuals in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland.
Last updated: May 19, 2026
This notice supplements our Privacy Policy and provides additional disclosures required under the GDPR and UK GDPR.
Data controller and processing roles
Nurturefy is the data controller for personal data it processes for its own business purposes (for example, operating and securing our website, managing customer accounts, billing, and communications).
When Nurturefy processes personal data on behalf of a business customer to deliver the Services (such as processing lead/contact information and communications via connected email, SMS, voice, social, CRM, or calendar integrations), the customer is typically the controller and Nurturefy acts as a processor.
Legal bases for processing
We process personal data only where there is a lawful basis, including:
Performance of a contract
To provide and manage the Services you request, including account creation, subscription management, and support.
Legitimate interests
To operate, secure, and improve the Services, prevent fraud, and communicate with business contacts.
Consent
For certain activities where consent is required (for example, specific cookies or certain marketing communications).
Legal obligations
To comply with applicable laws, regulatory requirements, and lawful requests.
International transfers
Personal data may be processed in countries outside the EEA/UK, including the United States and other jurisdictions where we and our service providers operate.
Where required, we use appropriate safeguards such as standard contractual clauses or other lawful mechanisms.
Your GDPR rights
Subject to conditions and exceptions, you may have rights including:
Access
Request confirmation and a copy of personal data we process about you.
Rectification
Request correction of inaccurate or incomplete personal data.
Erasure
Request deletion of personal data in certain situations.
Restriction
Request restriction of processing in certain situations.
Portability
Receive certain data in a machine-readable format and transmit it to another controller.
Objection
Object to processing based on legitimate interests, including direct marketing.
To exercise these rights, contact us using the details below. We may need to verify your identity.
Requests where Nurturefy is a processor
If Nurturefy processes personal data solely on behalf of a business customer, requests regarding that customer's data should generally be directed to the customer (the controller).
Data retention and security
We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.
We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, and misuse.
Complaints
If you have concerns about how we handle personal data, please contact us first so we can try to resolve the issue.
You may also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where you believe a GDPR-related issue occurred.
Contact
For GDPR questions or to exercise your rights, contact us at: