Privacy Policy

NurseLink operates a digital staffing marketplace connecting licensed nurses with hospitals and healthcare facilities in the United Republic of Tanzania.

For privacy questions, contact our data protection contact at the email published on the Contact page or in your account settings.

Identity and contact: name, email, phone (including WhatsApp where provided), residential address, emergency contacts, and profile photo.

Professional (nurses): Tanzania Nursing Council (TNC) number and expiry, qualifications, specialisations, employment status, certificates, national ID, and documents you upload for verification.

Organisation (hospitals): facility name, location, licence and registration documents, billing contacts, and authorised representatives.

Platform use: shift postings, bookings, ratings, messages, activity logs, IP address, device/browser type, and timestamps for security and audit.

We do not intentionally collect special-category health data about patients; you must not upload patient-identifiable records to NurseLink.

We process personal data under the Personal Data Protection Act, 2022 (Tanzania) where it applies, including for contract performance, legitimate interests (fraud prevention, platform security, quality assurance), legal obligation, and consent where required (e.g. marketing messages).

For users in other countries, we apply equivalent principles including purpose limitation, data minimisation, and transparency consistent with widely recognised standards (including GDPR-style rights where applicable to cross-border users).

To register and verify accounts, match nurses with hospital shifts, process bookings, send operational notifications (email, SMS, WhatsApp where enabled), and provide support.

To enforce our Terms, prevent fraud, investigate complaints, and maintain platform integrity (including suspension and audit logs).

To improve the service through aggregated analytics that do not identify individuals.

We do not sell your personal data.

Between users: when a shift is booked, relevant profile and contact details are shared between the nurse and hospital for that engagement.

Service providers: hosting, email (e.g. Resend), SMS/WhatsApp gateways, and payment processors under contracts requiring confidentiality and security.

Regulators and authorities: where required by Tanzanian law, court order, or to protect vital interests and public health oversight (e.g. TNC verification).

International transfers: if data is processed outside Tanzania, we use appropriate safeguards (standard contractual clauses or equivalent) where required.

Account data is kept while your account is active and for a reasonable period after closure for legal, tax, and dispute resolution purposes (typically up to seven years for financial and employment-related records unless a longer period is required by law).

Verification documents may be retained to demonstrate compliance with regulatory checks.

You may request earlier deletion subject to exceptions below.

We use password hashing, HTTPS, access controls, secure session handling, and restricted access to uploaded credentials.

Uploads are stored on secured infrastructure; production deployments should use encrypted storage and regular backups.

No method of transmission over the Internet is 100% secure; please use a strong unique password and report suspected compromise immediately.

Subject to applicable law (including the Tanzania Personal Data Protection Act, 2022), you may request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing.

You may withdraw consent for optional processing (e.g. marketing) without affecting core platform services.

You may lodge a complaint with the Personal Data Protection Commission (Tanzania) or your local supervisory authority where applicable.

NurseLink is for professional healthcare staffing. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, contact us to delete the account.

Contact support or use account settings (where available) to request deletion. We will delete or anonymise data unless retention is required for legal obligations, ongoing disputes, or regulatory audit.

Privacy requests and data subject enquiries: [email protected]. We aim to respond within 30 days.