1. Who We Are
Nuora LTD ("Nuora", "we", "us", or "our") provides patient-facing remote pharmacy technology, clinical service access, and support tools. This policy explains how we handle personal data when you visit nuorahealth.com, use Nuora services, contact us, or receive service communications from us.
Data controller: Nuora LTD
Privacy contact: privacy@nuorahealth.com
Pharmacy partner: Cornwells Chemists Ltd may process data where dispensing, pharmacy governance, or pharmacy support is required.
2. Information We Collect
- Identity and contact details, including name, email, phone number, date of birth, and address.
- Account, communication, consent, and preference records.
- Health information you provide in assessments, messages, consultations, or care forms.
- Payment, billing, and order information where a paid service is used.
- Technical data such as device details, IP address, cookies, pages visited, and interaction logs.
Health information is special category data under UK GDPR. We only use it where we have a lawful basis and a special category condition, such as explicit consent or provision of health care.
3. How We Use Information
- To operate public websites, patient journeys, accounts, and service communications.
- To assess eligibility, prepare clinical review, support pharmacist oversight, and manage care where you choose to use a clinical service.
- To process payments, subscriptions, deliveries, refunds, and support requests.
- To maintain audit records, safety records, pharmacy records, and legal or regulatory records.
- To improve reliability, security, content quality, and patient experience.
4. Legal Bases
Depending on the context, we process personal data because it is needed to provide a service, comply with legal obligations, pursue legitimate interests such as security and service improvement, or because you have given consent. For health data, we rely on explicit consent and/or the provision of health care where applicable.
5. AI-Assisted Support
Nuora may use AI tools to support operations, triage, drafting, safety checks, and clinical preparation. AI does not make autonomous prescribing decisions. Qualified professionals remain responsible for regulated clinical decisions.
We do not permit patient data to be used to train public AI models. Where an AI provider processes data for Nuora, it must do so under contractual controls and security obligations.
6. Sharing Information
We may share information with:
- Healthcare professionals, pharmacists, prescribers, and pharmacy partners involved in your care.
- Delivery, payment, identity verification, communications, hosting, analytics, and support providers.
- Your GP or another healthcare provider where you consent or where a legal or safety basis applies.
- Regulators, courts, law enforcement, or public authorities where required by law.
We do not sell personal or health data.
7. Cookies
We use essential cookies and similar technologies to run the site and may use analytics or marketing cookies where permitted. Read the Cookie Policy for more detail.
8. Retention
We keep data only for as long as needed for the purpose collected, including legal, pharmacy, clinical, accounting, safety, and audit requirements. Health, prescription, and pharmacy records may need to be retained for longer than ordinary website or marketing records.
9. Your Rights
Under UK data protection law, you may have rights to:
- Access a copy of your personal data.
- Correct inaccurate or incomplete information.
- Ask us to delete, restrict, or transfer certain data.
- Object to certain processing activities.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact privacy@nuorahealth.com. You may also complain to the Information Commissioner's Office at ico.org.uk.
10. Service-Specific Notices
The weight-management privacy notice explains additional context for the weight-management pathway. Other service pages may provide similar service-specific notices where needed.