Privacy Notice
This notice explains how NurseLink Jamaica handles personal information for the public website and account platform. The service is currently in MVP stage; real clinical records and live payment processing are not yet enabled.
1. Information we collect
For real accounts we may collect name, email address, telephone number, parish, account type, login/security events and basic professional or organization profile information. Nurse accounts may later provide credential, education, employment, reference and verification information. Client accounts may later provide care-request and patient information only through authenticated workflows.
The public website does not ask visitors to submit diagnoses, medication lists, government identification numbers, banking details or other sensitive health information through the general contact form.
2. Why we use personal information
We use account information to create and secure accounts, provide role-based access, respond to enquiries, operate the nursing marketplace, support verification, prevent fraud and abuse, maintain security logs, provide customer support and improve the service. Where health or other sensitive information is later processed, it will be limited to defined care-management purposes and protected through additional access controls.
3. Consent, fairness and transparency
Where consent is the appropriate basis for processing, NurseLink will seek clear consent and provide a way to withdraw it where applicable. Direct marketing will not be treated as part of ordinary account consent. Marketing choices will be separated from care and account functions.
4. Sensitive health and care information
Health information requires a higher level of protection. The current live app uses sample care data only. Before real patient records are enabled, NurseLink will implement purpose-based permissions, clinical access logging, a finalized retention schedule, breach procedures, a production data-protection impact assessment and the applicable controller/DPO arrangements.
5. Who may receive information
Information may be shared with authorized staff, approved nurses or care-team members, contracted service providers and professional advisers only where needed for the service or legal obligations. NurseLink does not sell personal information to advertisers. Service providers will be assessed for confidentiality, security and data-protection obligations.
6. International processing and transfers
Some hosting, email, security or technology providers may process information outside Jamaica. Before production sensitive-data processing, NurseLink will document relevant locations and safeguards and assess whether transfers meet the applicable Jamaican data-protection requirements.
7. Security
Current account controls include HTTPS, hashed passwords, secure session cookies, CSRF protection, login rate limiting, restricted database credentials and authentication audit events. Additional controls will be added before production health records are enabled, including clinical audit trails and stricter role-based access.
8. Retention
We retain information only for as long as needed for the stated purpose, security, dispute handling and applicable legal obligations. See the Retention & Deletion Policy for the current MVP schedule.
9. Your rights
Subject to the Data Protection Act, 2020 and applicable exceptions, individuals may have rights concerning access, correction, prevention of certain processing, direct marketing and automated decision-making. See Data Protection & RightsExercise Privacy Rights.
10. Contact and complaints
Privacy enquiries can presently be submitted through the NurseLink privacy request form. Fraternal Ventures Limited, Mandeville, Jamaica P.O., is the DPO organization and Nickeisha Christopher is the designated individual DPO contact. The DPO contact email is nickeisha.muir@fvservices.com and the DPO telephone contact is 876-568-4010. Individuals may also contact Jamaica's Office of the Information Commissioner regarding their rights or concerns.
11. Changes
We will update this notice when the platform, legal entity, service providers or processing activities change. Material changes will be dated and, where appropriate, communicated to account holders.