Privacy policy

1. Who we are and our role

NESTI provides software that schools use to run the school day. When a school uses NESTI, the school decides what information is collected and why — the school is the “controller” of that data and NESTI processes it on the school's behalf and on its instructions. For this public website (for example, when you fill in our contact form), NESTI is responsible for the information you send us.

2. Information schools put into NESTI

• Students: name, class, attendance, homework and grades, bus route and boarding records, pickup arrangements and, where the school records them, health information such as allergies and action plans.
• Parents and guardians: name, contact details, relationship to the child, and messages, forms and payments made through NESTI.
• Staff: name, role, contact details and, where the school uses HR and payroll, employment records.
• Technical data: sign-in records, device and browser information, and an audit trail of actions taken in the system.

3. Information from this website

When you contact us, we collect what you type into the form — such as your name, email, phone number, school and message — so that we can reply. We do not use advertising trackers on this website.

4. How we protect it

• Each person only sees what their role needs (least access).
• Information is encrypted in transit, and especially sensitive fields are encrypted at rest.
• Office, health and finance staff use two-step sign-in.
• Viewing sensitive records and making changes is recorded in an audit trail the school can review.

5. Sharing

We never sell personal information. We share it only with service providers who help us run NESTI (such as hosting and email delivery), under contracts that require them to protect it, or when the law requires us to.

6. How long we keep it

We keep school data for as long as the school uses NESTI and as the school instructs. When a school leaves, it can export its data, and we delete it within the period set out in the school's agreement. Contact-form enquiries are kept for up to [period to be confirmed].

7. Where data is stored

[Hosting location to be confirmed.] Where a school needs its data kept in a particular country or region, this is agreed in writing with that school.

8. Your rights

Depending on where you live, you may have the right to see, correct or delete your information. If you are a parent, student or staff member, please contact your school first — they control your data in NESTI and we will help them respond. For anything about this website, email info@nesticampus.com.

9. Children

NESTI is used by schools to support children's education and safety. Children's accounts are created by their school, and we process children's data only on the school's instructions.

10. Changes

If we change this policy in a meaningful way, we will tell schools in advance and update the date at the top of this page.