Template notice. This policy is a starting template. Have it reviewed against the data protection law that applies to your organisation and jurisdiction before publication.
1. Who we are
The Nexus Institute of Nutrition & Research ("we", "us") operates this website and the education programmes described on it. Contact details for data protection queries are on our contact page.
2. What we collect
- Application data: name, email, phone, country, education, profession, course of interest, and your message you upload.
- Inquiry data: name, email, optional phone and country, subject and message.
- Newsletter data: your email address.
3. Why we use it
To assess and respond to applications, answer inquiries, deliver courses, issue and verify certificates, send the newsletter you asked for, and improve the website. We do not sell personal data.
4. Legal basis
We process data on the basis of your consent (newsletter, inquiries), the performance of a contract (course delivery and certification), and our legitimate interests (site security and improvement).
5. Sharing
We use third-party processors for hosting, email delivery, file storage, analytics and newsletter management. Each processes data only on our instructions. We disclose data otherwise only where the law requires it.
6. Retention
Applications and inquiries are retained for up to three years. Certificate records are retained indefinitely so that verification remains possible. Newsletter data is retained until you unsubscribe.
7. Your rights
You may request access to, correction of, or deletion of your personal data, object to processing, or withdraw consent. Note that deleting a certificate record removes your ability to have that certificate verified.
8. Security
Data is transmitted over HTTPS, passwords are hashed, uploaded files are stored in access-controlled object storage, and administrative access is restricted to named accounts.
Last updated 1 Jul 2026