Security & Data Protection

01Our approach

Security isn’t a feature we added — it’s the foundation the whole platform sits on.

Nursery in a Box was built by people who have owned and run nurseries, so we understand exactly how sensitive this information is and how much it matters that it stays safe. We take a considered, layered approach: strong technical protection, clear internal practices, and UK-based hosting — so your data stays private, available and firmly under your control.

02Where your data lives

• Hosted in the UK. Your data is stored on secure, enterprise-grade infrastructure located in the United Kingdom.
• Encrypted in transit and at rest. Information is protected with strong encryption as it travels and while it’s stored, so it stays private end to end.
• Backed up automatically. Regular, encrypted backups mean your records are always safe and recoverable.
• Resilient by design. Our infrastructure is built for high availability, so the platform is there whenever your nursery needs it.

03Keeping information private

Only the right people see the right information.

• Role-based access. Owners, managers, staff and parents each see only what’s relevant to them — nothing more.
• Secure sign-in. Every account is protected by secure authentication, with additional protection available for administrator accounts.
• Full audit trail. Key actions are logged, so there’s always a clear, reliable record of who did what and when.
• Least-privilege internally. Our own team can only access data where it’s genuinely needed to support you, and that access is controlled and monitored.

04Safeguarding & children’s data

Because we work exclusively with nurseries, protecting children’s information is at the heart of everything we do. Safeguarding records, staff DBS details, training and policies are held securely with role-based access and a complete audit trail — organised, private, and ready when you need them. We handle children’s and families’ data in line with UK data-protection law and the expectations of the EYFS.

05Data protection & UK GDPR

We’re fully committed to the UK GDPR and the Data Protection Act 2018.

When you use Nursery in a Box, you remain the data controller for your nursery’s information, and we act as your data processor — handling that information only on your instructions and only for the purposes of providing the service.

• A clear legal basis. We process personal data lawfully, fairly and transparently, in line with the UK GDPR principles.
• Data Processing Agreement. A DPA is available to every customer, setting out exactly how we protect your data as your processor.
• Your rights, supported. We help you meet requests from parents and staff — access, correction and erasure — quickly and correctly.
• Data minimisation. We only collect and keep the information needed to run the service, for as long as it’s needed.
• Clear retention & deletion. When data is no longer required, it’s securely deleted in line with agreed retention periods.

06The partners we work with

We work with a small number of trusted, carefully vetted providers to deliver the service — each held to the same high standard we hold ourselves.

Those providers support areas such as secure cloud hosting and storage (United Kingdom), transactional email and notifications, and payment and direct-debit processing.

A current list of our sub-processors — including provider names and processing locations — is available on request, and forms part of our Data Processing Agreement.

07Talk to us about security

If you have a security or data-protection question — or you’d like a copy of our Data Processing Agreement — we’re glad to help.

Please use our contact form and choose Security question or Privacy request or complaint. Those enquiries are routed to enquiries@nurseryinabox.com. There is no separate security or data-protection email address at this stage.

Nursery in a Box is a trading name of Early Years Technology Ltd, registered in England and Wales under company number 17102595. Registered office: 1 Hardman Street, Spinningfields, Manchester, England, M3 3HF.