Privacy notice
What we hold about you and your child, why, and what you can do about it.
Last updated
Who is responsible
Catalyst Health Initiative is the controller for the information described here. NeuroNurture is a programme it runs, not a separate organisation.
For anything about your information, write to privacy@neuronurtureglobal.org.
What we hold
Your account details: your name, email address and how you have chosen to be shown to other members.
What you record about your child: observations, milestones, notes and anything you upload. Some of this is health information, which the law treats as needing extra protection, and so do we.
How you use the platform: which pages you open and when, so that we can keep it working and secure.
If you pay for premium membership: the fact and amount of payment. Your card details go directly to Stripe and never reach us.
Why we are allowed to hold it
For your account and the running of the service: because it is necessary to provide the membership you asked for.
For anything about your child’s health or development: because you have given explicit consent, purpose by purpose, in the consent centre. You can withdraw any of it at any time, and withdrawing one does not affect the others.
For security and preventing misuse: because we have a legitimate interest in keeping a service for families safe.
How it is protected
Everything you record about your child is encrypted with a key belonging to that child alone. Deleting the child’s record destroys that key, which makes the information unreadable everywhere it exists, including in backups.
The platform runs in the United Kingdom. Your information is not transferred outside the UK.
A small number of named staff can reach children’s records, and only where their work requires it. Every such access is recorded.
Who else sees it
Other members see only what you choose to share with the community. Your private records are never visible to another member.
We use Amazon Web Services to run the platform and Stripe to take payment. They act on our instructions and cannot use your information for their own purposes.
We do not sell your information, and we do not use it for advertising.
Research
We may use what the community records to understand what helps children — but only in a form that cannot be traced back to a child, and only where you have consented to it.
Information about individual children is never published, and personal details are removed before anything is used for research.
How long we keep it
While you are a member, and for a short period afterwards so that you can change your mind. When you delete your account we destroy the encryption keys, and the records become unreadable.
Some records — payments, and the audit trail of who did what — are kept longer because the law requires it.
What you can do
See everything we hold about you, and export it, from your settings.
Correct anything that is wrong, delete your records, or withdraw a consent — all from the consent centre or your settings.
Complain to us at privacy@neuronurtureglobal.org — we will acknowledge it within 30 days and tell you the outcome — or, if you would rather not come to us first, to the Information Commissioner’s Office at ico.org.uk.