Security and Data Protection Details

Looking for GDPR information? View our GDPR Compliance Statement

As the market leaders for online room booking and parents' meetings software for schools, with millions of bookings added to date, we take all necessary steps to ensure your data is handled and processed securely. 


We are fully registered in accordance with the Data Protection Act under reference number ZA009035. We're also Cyber Essentials certified. 

Data we store

We only store data relevant to providing online parents' evening booking:
  • Student Data: first name, surname, registration class, date of birth, year group, MIS ID
  • Contact Data: title, first name, surname, relationship to student, parental responsibility to student, contact priority to student, email address, MIS ID
  • Teacher Data: title, first name, surname, email address, MIS ID
  • Class Data: subject or class, teacher, student
  • Group Data: group name, teacher, student

Uptime

Uptime is of critical importance to us. We use load balanced servers, with automatic failover, operating at below half capacity. In addition all servers are behind redundant hardware firewalls. This means even if one of our servers was to completely fail, another would seamlessly take over. Therefore your data is synced in real time over two live servers.

Security

Our selected UK data centre (AWS) is ISO 27001 & ISO 9001 accredited and ranks amongst the very best in the industry. Security staff 24/7, extensive CCTV covering the building and each aisle, intruder alarms, proximity card readers and perimeter prison fencing maintain a physical security layer to our servers. 
We apply the latest patches to our servers keeping your data safe and secure with multiple levels of password protection - the servers themselves and the database each are password protected. The managed hosting provider performs annual penetration testing, monitors our firewalls for any unauthorised activity, and would immediately inform us should anything happen - information we would in turn pass onto our customers. This has not happened to date.

Our employees have access to the data - we're a dedicated team that's been providing hosted software to schools for many years. As we use managed hosting providers, the qualified engineers also have access to the data and they pass the advanced CRB check.

Backups

We take hourly offsite backups of your data to another EU based data centre in the event of a catastrophic (and very unlikely) data centre failure. These are encrypted using the AES 256 bit algorithm which is the same level used by governments. If you chose to remove your data from the system, this would be removed from the live database but would exist in our backups until they've fully rolled over. We maintain around 2 months worth of backups.