Privacy Policy

01 Who we are

Older Adult Nursing Practice Supervision and Development Services ("we", "us") provides 1:1 clinical supervision and leadership coaching for nurses and Non-Medical Prescribers. For the purposes of UK data protection law, Gregory Lamb, trading as Older Adult Nursing Practice Supervision and Development Services, is the "data controller" responsible for your personal data.

ICO registration: application submitted and in progress. This section will be updated with the registration reference once confirmed.

02 What data we collect

We collect only what's needed to arrange and deliver sessions:

• Contact details — name, email address, phone number
• Booking information — session dates, times, and frequency
• Professional context — your NMC PIN, employer or setting (NHS, care home, independent, charity), if you choose to share it, so sessions can be logged appropriately
• Payment information — handled entirely by Stripe; we never see or store your card details
• Session records — brief logs confirming a session took place (for NMC revalidation purposes), not detailed clinical notes of what was discussed

03 Why we collect it (our legal basis)

• Contract — to arrange, deliver, and take payment for the sessions you've booked
• Legitimate interest — to keep straightforward records supporting your NMC revalidation and our own professional accountability
• Legal obligation — where record-keeping is required by our regulatory or insurance obligations

We do not use your data for marketing, and we do not sell or share it with third parties for their own purposes.

04 How your data is stored

Bookings and scheduling are managed through Acuity Scheduling; payments are processed by Stripe. Both are established providers with their own GDPR-compliant data protection measures. Session logs are stored securely and are not shared with your employer without your explicit consent, except where we have a professional or legal duty to disclose information (see Section 8).

05 How long we keep it

We retain booking and session records for 7 years in line with professional record-keeping guidance, after which they are securely deleted. You can request earlier deletion at any time — see Section 7.

06 Who we share it with

Data is only shared with the processors needed to run the service — Acuity Scheduling (booking) and Stripe (payment). We do not share your data with your employer, other supervisees, or any marketing or advertising service. We will only disclose information without your consent where we have a professional or legal duty to do so (see Section 8).

07 Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request corrections to inaccurate data
• Request deletion of your data (subject to our record-keeping obligations)
• Object to or restrict certain processing
• Complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled

To exercise any of these rights, contact us using the details in Section 9.

08 Confidentiality & professional duty to disclose

Sessions are confidential. The exception is where something disclosed suggests a risk of harm to you or someone else — in which case we have a professional duty to respond, which may include contacting emergency services or another appropriate authority. This mirrors the boundary already set out on the main site's FAQ section.

09 Contact us

For any question about this policy or your data, contact: [email protected]

10 Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.