Privacy Policy – The Nest Doulas

Last updated: 9 October 2026

At The Nest Doulas, we respect your privacy and are committed to protecting your personal data. We understand that pregnancy, birth and the transition to parenthood can involve deeply personal experiences. We handle your information with care, respect and confidentiality.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, enquire about our services, attend our events or receive support from a member of The Nest Doulas collective.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act (1050/2018) and other applicable data protection legislation.

1. Who is responsible for your personal data?

Data controller: The Nest Doulas, Rosalia Pihlajasaari

Business ID: Pending

Address: Kutteritie 12b as 1, 00870, Helsinki, Finland

Email: info@thenest.fi

Website: https://thenest.fi/

The data controller is responsible for ensuring that personal data is processed lawfully and securely.

The Nest Doulas is a collective of professionals. Depending on the service you choose, an individual doula or service provider may also be responsible for processing your personal data. Where applicable, we will explain who is responsible for your information and how to contact them.

2. What personal data do we collect?

We collect only the information reasonably necessary for the purposes described in this policy.

Depending on how you interact with us, we may collect the following categories of personal data:

Contact and identification information

Name
Email address
Telephone number
Preferred language
Other contact details you choose to provide

Enquiries and service information

Information you provide through contact forms, email, telephone or social media
Your interest in particular services, workshops, courses or events
Appointment and booking information
Information necessary to organise and deliver the services you request
Communications and feedback you share with us

Pregnancy, birth and wellbeing information

If you choose to receive doula or related perinatal support, you may share information about your pregnancy, birth preferences, previous birth experiences, postpartum recovery, breastfeeding or other health-related matters.

Health information is considered a special category of personal data under the GDPR. We collect and process such information only when necessary, with an appropriate legal basis and any additional condition required by data protection law. Where explicit consent is the appropriate condition, we will obtain it before processing.

Please avoid sharing detailed medical or other sensitive information through general website contact forms unless it is necessary for your enquiry.

Event and course information

Registration details
Attendance information
Dietary or accessibility requirements you choose to share
Information needed to administer workshops, training and events

Website and technical information

When you visit our website, certain information may be collected automatically, depending on the website’s technical configuration. This may include your IP address, browser type, device information, pages visited, approximate location derived from technical data and cookie or usage information.

The extent of this collection depends on the hosting provider, website plugins, analytics tools and cookie settings in use.

3. Why do we process your personal data?

We use personal data for the following purposes:

To respond to enquiries and requests for information.
To arrange consultations, bookings, courses, workshops and events.
To provide doula support and other services you have requested.
To communicate with you before, during and after a service.
To manage payments, invoicing and applicable accounting obligations.
To send newsletters or marketing communications where legally permitted.
To improve our website, services and visitor experience.
To maintain website security and prevent misuse.
To comply with legal obligations and establish, exercise or defend legal claims where necessary.

We do not use personal data for purposes that are incompatible with the purpose for which it was collected.

4. What is the legal basis for processing?

Under the GDPR, personal data must be processed on a valid legal basis. Depending on the purpose, we rely on one or more of the following:

Consent: When you voluntarily subscribe to a newsletter, agree to optional cookies or give the specific consent required for processing sensitive information.

Contract or steps taken before entering into a contract: When processing is necessary to respond to your request, arrange a service or fulfil an agreement with you.

Legal obligation: When we must process information to comply with applicable laws, including accounting and tax requirements.

Legitimate interests: When processing is necessary for legitimate business purposes, such as responding to professional enquiries, maintaining website security or improving our services, provided that these interests do not override your rights and freedoms.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. How do we handle sensitive information?

We recognise that information about pregnancy, birth, reproductive health and postpartum recovery can be particularly personal.

We aim to:

Collect only information necessary to provide the service you have requested.
Explain why sensitive information is needed.
Restrict access to people who genuinely need the information.
Use appropriate technical and organisational safeguards.
Avoid collecting detailed health information through general-purpose website forms where a more suitable communication method is available.

The processing of health information requires both a legal basis under Article 6 of the GDPR and a valid condition under Article 9, where applicable.

A general agreement to this Privacy Policy does not, by itself, constitute explicit consent to process health information.

6. Who can access your personal data?

Your personal data may be accessed, where necessary, by:

The relevant doula or professional providing your requested service.
Authorised members of The Nest Doulas who need the information for an agreed purpose.
Website hosting, maintenance and technical support providers.
Email, booking, payment, newsletter and event-management providers used by us.
Accountants or other professional advisers, where necessary.
Public authorities where disclosure is legally required.

Service providers who process personal data on our behalf must be subject to appropriate contractual and data protection safeguards.

Where independent professionals within the collective act as separate data controllers, they are responsible for their own processing activities. Information will not automatically be shared among all members of the collective.

We do not sell your personal data.

7. Do we transfer personal data outside the EU or EEA?

We aim to use service providers and systems that provide appropriate protection for personal data.

Some providers used for website hosting, email, analytics, booking or marketing may process data outside the European Economic Area (EEA).

If personal data is transferred outside the EEA, we will ensure that the transfer complies with the GDPR. Depending on the circumstances, this may involve an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism, together with any additional safeguards required.

Further information about relevant transfers can be requested using the contact details in this policy.

8. How long do we keep your personal data?

We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Our retention practices should include the following:

General enquiries: Until the enquiry has been resolved and for a reasonable period afterwards, unless further contact or recordkeeping is necessary.
Client and service records: For the duration of the service relationship and for a justified period afterwards, taking account of legal obligations and potential claims.
Accounting and payment records: For the period required by applicable Finnish accounting and tax legislation.
Newsletter subscriptions: Until you unsubscribe or withdraw your consent, subject to limited records needed to document your preference.
Event registrations: For the period needed to administer the event and complete any necessary follow-up or legal recordkeeping.
Website logs and analytics data: According to the retention settings and policies of the relevant hosting, security and analytics providers.

We will establish appropriate retention periods for each category of information and securely delete or anonymise data when it is no longer needed.

9. Cookies and website analytics

Our website may use cookies and similar technologies to ensure that the website functions properly, remember preferences, measure website performance or support marketing activities.

Strictly necessary cookies may be used where permitted by law. Non-essential analytics, advertising or tracking cookies will be used only where the required consent has been obtained.

You can manage your cookie preferences through the cookie banner or settings tool available on the website, where provided. You may also manage certain cookies through your browser settings.

Blocking some cookies may affect website functionality.

The exact cookies, providers, purposes and retention periods should be disclosed in a separate cookie notice or an appropriate section of this policy based on the technologies actually installed on the website.

10. Newsletters and marketing

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may use your contact information to share updates about our services, workshops, courses, events and relevant resources.

You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us directly.

We will process your information for electronic direct marketing in accordance with applicable Finnish and EU law. Where consent is required, we will obtain it before sending marketing communications.

You can object to the processing of your personal data for direct marketing at any time. Following an objection, we will stop using your data for that purpose.

11. How do we protect your personal data?

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures may include access controls, secure accounts, appropriate confidentiality arrangements, software updates, backups and secure communication practices.

Access to personal data is limited to authorised people who need it for legitimate purposes.

No method of transmitting or storing information can be guaranteed to be completely secure. If a personal data breach occurs, we will assess it and notify the relevant supervisory authority and affected individuals where required by law.

12. What are your rights?

Under the GDPR, you may have the following rights, subject to applicable legal conditions and exceptions:

Right of access: Request confirmation of whether we process your personal data and obtain a copy.
Right to rectification: Ask us to correct inaccurate or incomplete information.
Right to erasure: Request deletion of your personal data in circumstances where the law provides this right.
Right to restriction: Ask us to restrict processing in certain circumstances.
Right to data portability: Receive certain data you have provided to us in a structured, commonly used and machine-readable format, where the legal conditions apply.
Right to object: Object to processing based on legitimate interests in circumstances covered by the GDPR.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
Rights relating to automated decisions: Receive the protections provided by the GDPR where decisions are made solely by automated means and produce legal or similarly significant effects.

You always have the right to object to the processing of your personal data for direct marketing.

To exercise your rights, contact us at info@thenest.fi. We may need to verify your identity before responding.

We will respond within the time limits established by the GDPR, generally within one month of receiving your request. Where legally permitted, this period may be extended if the request is complex or numerous.

Some rights are subject to legal exceptions. For example, we may need to retain certain accounting records or information necessary to establish, exercise or defend legal claims.

13. Your right to lodge a complaint

If you believe that your personal data has been processed unlawfully, please contact us so that we can address your concerns.

You also have the right to lodge a complaint with the Finnish supervisory authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)

Website: https://tietosuoja.fi/en/home

Address: Lintulahdenkuja 4, 00530 Helsinki, Finland

Postal address: P.O. Box 800, FI-00521 Helsinki, Finland

Telephone: +358 29 566 6700

You may contact the supervisory authority without first contacting us.

14. Third-party websites

Our website may contain links to third-party websites, social media platforms or external booking and payment services.

These third parties have their own privacy policies and practices. We are not responsible for the privacy practices of external websites that we do not control.

We encourage you to review the privacy information provided by those services before submitting personal data to them.

15. Children’s personal data

Our services and website are primarily intended for adults, expectant parents and families.

We do not knowingly collect children’s personal data through the website unless it is necessary for a specific service and there is an appropriate legal basis and any required authorisation.

Where information about a child is necessary for a service, we take particular care to protect the child’s privacy and process only the information needed for the stated purpose.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website technologies or legal requirements.

The latest version will be published on https://thenest.fi/, together with the date of the most recent update.

If a change materially affects how we process personal data, we will provide additional information where required by law.

17. Contact us

If you have questions about this Privacy Policy or how we process your personal data, please contact:

The Nest Doulas

Email: info@thenest.fi

Website: https://thenest.fi/