Privacy Policy

Who we are

NurseryDesk is a software service for UK nursery owners. We help nursery businesses manage parent enquiries, compliance tracking, and operational tasks. When we say “we”, “us” or “NurseryDesk”, we mean the operator of this service.

What data we collect

Nursery owners (our customers): Email address, name, phone number, nursery name, Ofsted number, and any data you enter into the platform such as room details, compliance dates, and operational reminders.

Parents (via intake forms): When a parent submits an enquiry through a nursery's intake form, we collect: parent name, email, phone number, child's name, date of birth, postcode, requested start date, days per week, and any additional notes they provide.

Automatically collected: We use essential cookies for authentication only. We do not use tracking cookies, analytics pixels, or third-party advertising tools.

How we use your data

We use data to provide and improve the NurseryDesk service. Specifically:

• To create and manage your account
• To deliver parent enquiries to the correct nursery
• To send automated follow-up emails on your behalf to parents
• To send you morning briefs and compliance alerts (which you can disable)
• To match children to age-appropriate rooms
• To calculate pipeline revenue based on your room rates

Legal basis (GDPR)

For nursery owners: We process your data based on our contractual relationship — you sign up and we provide the service.

For parents: Parent data is processed based on the legitimate interest of the nursery in managing their enquiry pipeline. The nursery owner is the data controller for parent data; NurseryDesk acts as a data processor. Parents can request data deletion by contacting the nursery directly, or by emailing us at hello@nurserydesk.ai.

Where we store data

All data is stored on Supabase infrastructure within the EU (Ireland, eu-west-1). Emails are sent via Resend, which processes data in accordance with GDPR. We do not transfer data outside the EEA without appropriate safeguards.

Data retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your data within 30 days unless required to retain it for legal reasons. Parent enquiry data is retained for the lifetime of the nursery's account to support their records.

Your rights

Under GDPR you have the right to:

• Access a copy of your personal data
• Correct any inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability (receive your data in a portable format)
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email us at hello@nurserydesk.ai.

Third-party services

• Supabase — Database and authentication (EU region)
• Vercel — Hosting and deployment
• Resend — Transactional email delivery
• OpenAI — AI-generated morning briefs (no parent PII is sent)

Contact

For any privacy-related questions or requests, email us at hello@nurserydesk.ai.