Privacy Policy

Version 2026-10-24.

This policy is provided under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Zoyra is the trading name of Nurayi Ltd. Zoyra is operated by Nurayi Ltd, a company registered in England and Wales under company number 17287462. Nurayi Ltd is the data controller for personal data processed through Zoyra. Nurayi Ltd is registered with the Information Commissioner’s Office under registration number ZC202254.

You can contact our privacy team at hello@zoyra.co.

2. What Zoyra is (and is not)

Zoyra is an educational fertility planning tool. Zoyra is not a healthcare provider, fertility clinic, bank, payment institution or financial adviser.

3. Information we collect

Account information, including your name, email address and sign-in details.
Assessment information, including fertility goals, timeline, age band, situation, budget and any medical or reproductive health information you choose to share.
Savings figures you enter so you can track your personal goal.
Employer benefit code, if you enter one.
Workplace benefit enquiries sent from our calculator pages: first and last name, company name, work email, whether you are an employee or HR, company size, an optional HR contact email, language, the page you sent it from and the date and time.
Clinic search and comparison inputs, such as city, postcode or selected clinics.
Messages you send to a clinic through Zoyra.
Employer benefit usage amounts linked to your account, if your employer offers a benefit.
Contact form details: name, email, optional phone number, your message and how you found us.
Sign-up attribution: how you arrived at Zoyra (source, medium, campaign and referring page), stored on your profile.
Support, privacy and enquiry messages.
Consent records: user ID, date and time, exact wording, consent version and privacy policy version.
Cookie choices and technical data needed to run the service securely.

Calculator tools can be used without an account. In that case your inputs and results are stored only on your own device (in your browser's local storage) and are not sent to us.

4. Short privacy notices

Registration: We use your details to create and manage your Zoyra account. Zoyra is operated by Nurayi Ltd. Learn more in this Privacy Policy.

Assessment: Your answers may reveal information about your fertility goals and reproductive health. Nurayi Ltd uses this information to create your personalised educational fertility plan.

Savings: We store the figures you enter so you can track your personal goal. Zoyra does not hold or transfer the underlying funds.

Workplace benefit enquiries: We use these details to respond to your enquiry and to assess potential employer interest. If you are an employee, you may optionally give us the business email address of an HR representative. This is third-party business contact data: it is not treated as marketing consent, we never email that person automatically and we never add them to newsletters. Any direct outreach would only follow a separate human review under UK GDPR and PECR, and that person can exercise their data protection rights, including the right to object to direct marketing. We never tell your employer who made the suggestion, and we never share your fertility or health information or your calculator results with your employer. The legal basis is our legitimate interest in responding to your request. These enquiries are kept in line with the retention periods set out in this policy, and you can ask us to delete them at any time.

5. How we use your information

To create and manage your Zoyra account.
To generate your personalised educational fertility plan.
To let you compare clinics and track savings goals.
To respond to support requests.
To keep the service safe, secure and legally compliant.
With your separate opt-in, to send marketing emails.

6. Consent

Before saving reproductive health interests, users must actively select an unticked checkbox with this wording: “I explicitly consent to Nurayi Ltd processing my selected reproductive health interests to personalise my Zoyra experience. These may reveal health information and are not shared with my employer. I can withdraw this consent or delete these interests from my profile.”

Before completing the fertility assessment, users must actively select an unticked checkbox with this wording: “I explicitly consent to Nurayi Ltd processing these fertility assessment answers to create my educational plan. My employer will not receive my answers.”

We store the user ID, date and time, exact consent wording, consent version and privacy policy version for audit purposes.

Marketing consent is separate, optional and unticked. The marketing wording is: “Send me occasional Zoyra tips and updates.”

7. Legal bases (UK GDPR and Data Protection Act 2018)

Contract - to provide the service you asked for.
Explicit consent - for health-related data collected in the assessment and for marketing communications.
Legitimate interests - to keep Zoyra secure and improve it, balanced against your rights.
Legal obligation - for records we must keep by law.

8. Sharing

We use trusted processors to host, secure and operate the service. We do not sell personal data. Clinic listings are informational; we do not share your assessment answers with clinics unless you specifically request an introduction.

9. Cookies and analytics

Essential cookies are used to run Zoyra. Analytics and other non-essential tracking are not loaded before consent. We do not currently use marketing pixels. Fonts are self-hosted, so no font requests are sent to third parties. You can change your cookie choices at any time through Manage Cookies.

10. Retention

We keep your data while your account is active. When you delete your account, we erase personal data linked to you, keeping only what we must retain by law (for example, minimum consent audit records).

11. Your rights

Under the UK GDPR you can, where applicable: ask for confirmation of whether we hold personal data about you, access your data, have inaccurate data corrected, ask for your data to be deleted, ask for processing to be restricted, object to certain processing, receive your data in a structured, machine-readable format where portability applies, and withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Use the tools in the Privacy and data section of your Profile, or email hello@zoyra.co. We respond within the time limits set by the UK GDPR.

12. Complaints

If you believe the processing of your personal data breaches the applicable rules, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). You can find information and how to complain on the ICO's official website at ico.org.uk.

13. Automated decisions

Zoyra uses the information you enter to personalise content, calculations, suggestions and the plan shown to you. Unless stated otherwise, Zoyra does not make decisions based solely on automated processing that produce legal effects on you or similarly significantly affect you, within the meaning of Article 22 UK GDPR.

The results of Zoyra's tools are informational and do not constitute medical decisions.

14. Security

We adopt appropriate technical and organisational measures to protect personal data, taking into account the nature of the data, the risk to users, the state of the art and how the data is processed. These measures include:

row-level access controls in the database, so each account can only read and change its own data
authentication and role-based access for administrative functions
server-side validation and rate limiting on public forms
encryption of connections to the service (HTTPS)
records of the consents given, kept for audit purposes
limiting access to particularly sensitive data

No computer system can be considered completely free of risk.

15. Minors

Zoyra is intended primarily for adults. Features relating to fertility planning and the entry of health-related information are not intended for minors unless a different arrangement compliant with the applicable rules is expressly provided.

16. International transfers

Where data is transferred outside the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses.

17. Changes

We will notify you of material changes and record the version of this policy that applied when you gave consent.