Privacy Policy and Personal Data Processing

1. Information we collect

From Professionals: full name, email, phone/WhatsApp number, country, region and service cities, profile photo, photos, courses and certificates, business name, description, years of experience, languages and social media links.

For Professionals' verification: ID number, a photo of the ID, a photo holding it, background check, professional license or registration number, course certificate and the name and phone number of work references. This data is private: it is never published, only the Nurvalia team sees it to verify, and the files and references are deleted when the review ends. We keep only the verification result and the ID and license numbers, so the check can be repeated in official registries.

Nurvalia does not request or store patients' health information. Users must not post it on the Platform.

From Users with an account: name, email, reviews, favorites, viewed-profile history and contact history (which Professional they contacted, how and when; never the reason or any patient data).

From all visitors: technical browsing information (cookies, IP address, device type) and statistics on visits and clicks on contact buttons. When you register as a Professional we also record how you reached Nurvalia (for example, from an ad, a social network or Google) to measure our campaigns.

2. How we use information

We use data to: publish and give visibility to Professionals' profiles; let Users contact them directly; show reviews; provide favorites and history; send system notices and support; process payments for paid plans; and prevent spam and fraud.

The public data of a Professional's profile (name, photo, description, cities and reviews) is visible to any visitor once the profile is approved. Their WhatsApp and phone number are only shown to registered Users, and each contact is recorded.

3. Sharing data with third parties

Professionals' public profile: by registering as a Professional you expressly authorize the data in your profile (name, business name, photo, description, cities, reviews and any links you add) to be published on the Platform and visible to any visitor, and your WhatsApp and phone number to be shown to registered Users so they can contact you directly through those channels. This publication is the purpose of the service. Search engines such as Google may index your public profile, and anyone who sees it may copy that data. You can edit or hide your profile, or request its deletion, at any time (see section 5). Your email, password and the private data of your account are not published.

Nurvalia does NOT sell, rent or trade your personal data to third parties, nor hand it over to companies so they can send you advertising.

To operate the service we share data with providers acting on our behalf: infrastructure and storage (Supabase and Vercel), system emails (Resend), payment processing (PayPal, for paid plans) and visit and advertising measurement (Google Analytics and the Meta pixel, which receive technical browsing data and events such as visits, registrations and contact clicks). These providers may only use the data to provide their service to us, under their own privacy policies.

We may also disclose data when a competent authority requires it by law.

Your data may be processed on servers located outside your country of residence (for example, in the United States or Europe), with appropriate security measures. By using the Platform you accept that transfer.

4. Data security

We apply technical and administrative measures, such as SSL/HTTPS encryption, per-account access control and secure password storage, to protect your data against unauthorized access, loss or alteration. Nurvalia does not store full card data or bank credentials; that information is handled by the payment provider.

5. Your rights

You have the right to know, update, correct and request deletion of your personal data, and to withdraw your consent, at any time. Professionals can edit their profile from their dashboard, and account holders can manage their information from My account. You can also send a request to soporte@nurvalia.com. If you live in the European Economic Area or the United Kingdom, you may also object to processing, request data portability and lodge a complaint with your data protection authority.

6. Cookies

We use essential cookies (for example, to keep you signed in and remember your language) and, in a limited way, analytics and advertising cookies (such as the Meta/Facebook pixel, which measures the effectiveness of our ads; in Europe and the UK it is only enabled if you accept). You can set your browser to block them, although some features, such as signing in, may stop working.

7. Data retention

We keep your data while your account or profile is active and for as long as needed to meet legal obligations. When you delete your account or profile, we will delete or anonymize your data, except what the law requires us to keep.

8. Minors

The Platform is intended for people aged 18 and over. We do not knowingly collect data from minors.

9. Data controller

The controller of the personal data collected on this site is Nurvalia, based in Floridablanca, Santander, Colombia. You can contact us at soporte@nurvalia.com.

10. Changes to this policy

We may update this policy. The current version will be published on this page with its update date.