How CoNest uses and protects personal information.

CoNest, trading as CoNest. Geographical and correspondence address: Bournemouth, Dorset, United Kingdom.

CoNest is the data controller where it decides why and how personal information is used. Privacy and data-rights enquiries can be sent to info@conest.org.uk. Customer-service enquiries can be sent to customerservice@conest.org.uk.

Depending on the features used, we may process:

• Identity and account details, including name, email address, sign-in method, role, country and account settings.
• Connected-space membership, invitations, permissions, communication mode and family relationships entered by users.
• Information about children, including names, dates of birth, routines, schedules, education, health, care and welfare information.
• Messages, structured requests, calls, calendar entries, handovers, expenses, notes, activity history and uploaded documents or images.
• Safeguarding, court-related, allegation or incident information, which may include special-category or criminal-offence information depending on what users add.
• Payment and subscription records, including Stripe customer, checkout, invoice, refund, dispute and subscription identifiers. We do not receive or store full payment-card numbers or CVCs.
• Customer-support correspondence, complaints, safety reports, cancellation and refund requests, and data-rights requests.
• Device, browser, approximate location derived from IP, IP address, sign-in, diagnostic, fraud-prevention, security and audit information.
• Where optional website analytics is accepted, a browser visitor identifier, session identifier, page journey, referrer/source, campaign parameters and related device/browser telemetry.
• Marketing and product-update preferences, consent records, unsubscribe status and campaign-delivery information where you choose to receive those communications.

We may receive information directly from you, another authorised member of a connected space, an identity provider, Stripe, an app store, our security providers or a lawful third party.

CoNest is designed around family organisation, so adults may add information about children. Children merit specific protection. We apply privacy-by-design, access controls and data minimisation, and we expect adults to consider the child’s best interests before adding information.

Health information and some other records may be special-category personal data. Allegations, incident reports and court-related records may also contain criminal-offence information. We only process this information where an Article 6 lawful basis and, where required, an applicable Article 9 condition or Data Protection Act 2018 Schedule 1 condition are available. The condition depends on the purpose and circumstances, and may include explicit consent or the establishment, exercise or defence of legal claims. Users must not upload sensitive information unless it is necessary and they have authority and a lawful basis to do so.

CoNest accounts are intended for adults aged 18 or over. If we introduce a child-facing service, we will provide age-appropriate information and controls before doing so.

Website payments are processed by Stripe. Card details are entered into Stripe’s hosted services. Stripe sends CoNest verified event notifications about checkout, invoices, cancellations, refunds and payment disputes.

When Stripe confirms an immediate cancellation, successful refund or chargeback/payment dispute, CoNest automatically ends paid access and moves the connected space to the applicable Free plan. This is an automated contractual and security action arising from the payment status, not profiling. A customer can ask Customer Support to review an incorrect access change.

Stripe processes information under its own privacy arrangements. See the Stripe Privacy Policy.

We may share information with:

• Authorised members of the relevant connected CoNest space, according to their permissions.
• Supabase and other hosting, database, authentication, storage, monitoring and security providers.
• Resend and other communications providers used to deliver transactional or consented marketing emails, including processing delivery, bounce, complaint and unsubscribe information.
• Stripe, app stores, banks and payment providers for billing, fraud prevention, refunds and disputes.
• Professional advisers, insurers, auditors and specialist contractors where reasonably necessary.
• Courts, regulators, law-enforcement bodies or other recipients where disclosure is legally required or permitted.
• A purchaser or successor if the CoNest business is reorganised or transferred, subject to appropriate safeguards.

We do not sell private co-parenting content or personal information to advertisers.

Some suppliers may process information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we use an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism, together with appropriate technical and organisational safeguards.

We keep information only for as long as it is needed for the relevant purpose. Our normal approach is:

• Active account and connected-space content: while the account or space remains active, then deletion, anonymisation or restricted retention according to the account-closure process and legal needs.
• Contracts, subscription, invoice, refund and dispute records: normally up to six years after the relevant contract or financial period where needed for tax, accounting, complaints or legal claims.
• Checkout consent and subscription-event audit records: normally up to six years so we can evidence the contract, cancellation and access decision.
• Customer-support and complaint records: normally up to 24 months after closure, or longer where a continuing dispute or legal duty requires it.
• Ordinary security activity containing IP and device information: normally 90 days, unless preserved for an active investigation, legal claim or lawful request.
• Optional website analytics event records: normally up to 180 days. Browser visitor/session identifiers are hashed before they are stored in the Owner analytics dataset, and raw IP addresses are not stored in that dataset. Browser-side analytics identifiers are removed when analytics is withdrawn.
• Marketing consent and campaign-delivery records: while the consent remains active and afterwards for a proportionate period where needed to evidence compliance.
• Marketing suppression records: a minimal email and opt-out record may be retained for as long as reasonably necessary to ensure we continue to respect an unsubscribe, objection, complaint or suppression request.

Backups may retain deleted information for a limited period before secure rotation. We may retain a minimal suppression or fraud-prevention record where lawful and necessary. When retention ends, information is deleted, anonymised or placed beyond ordinary use.

CoNest marketing emails are separate from essential account, security, safeguarding, payment and service messages. Selecting marketing emails during registration or in account preferences is optional. We do not make access to the core service conditional on agreeing to receive marketing.

Where an authorised Owner imports a contact list, CoNest requires the source and consent evidence to be recorded before an imported address can become eligible for a campaign. Imported contacts without adequate evidence remain pending and cannot be emailed. Addresses that have unsubscribed, complained, bounced or been suppressed are blocked from reactivation through a spreadsheet import.

Every marketing email includes an unsubscribe facility. Unsubscribing from marketing does not stop essential service communications. You may also object to direct marketing at any time by contacting info@conest.org.uk.

CoNest uses cookies, local storage, session storage and similar technologies for authentication, security, requested checkout state and other essential service functions. We also operate an optional first-party visitor analytics system that can create a persistent browser visitor identifier and associate it with page activity, traffic source, device/browser information and coarse location. Consented events may be stored in a restricted Owner analytics dashboard; browser visitor/session identifiers are hashed for that analytics store and raw IP addresses are not stored in it.

That optional visitor tracking remains off until the visitor accepts analytics. If analytics is rejected or later withdrawn, CoNest stops new visitor telemetry from that browser and removes its visitor/session analytics identifiers. Essential sign-in, security, payment and requested service features remain available. Choices can be changed at any time through the website Cookie settings control. See our Cookie Policy for the technologies and data fields involved.

We use role-based access, authentication, encryption in transit, restricted administrative access, audit logging, supplier controls and incident procedures. No online service can guarantee absolute security. Users must protect their credentials and report suspected unauthorised access promptly.

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection and portability, and rights relating to solely automated decisions. Where we rely on consent, you may withdraw it. These rights can be limited by exemptions or the rights of others.

Submit a request through Data and Information Requests or email info@conest.org.uk. We may need to verify identity, authority and scope. We normally respond within one month, subject to lawful extensions.

You may complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

We may update this notice when the service, suppliers, law or our processing changes. We will make material changes clear and provide additional notice where required. The date at the top identifies the current version.