Privacy Policy

NextArc Learning, a North Carolina nonprofit corporation (501(c)(3) status pending) (“NextArc,” “we,” “us,” or “our”) operates the NextArc STEM Learning website at nextarclearning.com. This policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information.

What we collect

When you enroll a student, join a waitlist, or send us a message through the website, we collect the information you provide on the form: parent or guardian name, parent email address, optional parent phone number, student first and last name, student grade level, and any message text or referral information you choose to include. NextArc does not collect payment information; all programs are free of charge.

How we use it

We use the information you submit to confirm enrollment, communicate program details, send daily parent updates during the program, respond to your questions, and improve the NextArc experience. We do not sell your data, and we do not share it with third parties for advertising or marketing purposes.

Cookies and local storage

NextArc does not set tracking cookies and does not use third-party analytics or advertising trackers. We use your browser’s local storage for one limited purpose: to remember your light/dark theme preference. You can clear this data at any time through your browser’s site-data controls; doing so will reset your theme preference.

Service providers we use

We rely on a small set of service providers to operate the site. Each receives only the information necessary to perform its function.

• Netlify: hosts the website and processes form submissions on our behalf. Form submissions are transmitted to Netlify over HTTPS and forwarded to our team email.
• Google reCAPTCHA: protects our forms from automated abuse. reCAPTCHA receives your IP address and limited browser metadata to score whether a submission is automated.
• Google Fonts, jsDelivr, unpkg: serve fonts and front-end libraries used by the site. These providers see your IP address when their content is requested.

Children’s privacy and parental consent

NextArc programs are directed at K-12 students (grades K through 12). We design our enrollment process so that personal information is collected only from a parent or legal guardian, not directly from a student. When you submit any enrollment, waitlist, or contact form, you confirm by checking the parental-attestation box that you are a parent or legal guardian and that you are at least 18 years old.

We comply with the U.S. Children’s Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected personal information from a child under 13 without verifiable parental consent, please contact us at contact@nextarclearning.com and we will delete that information promptly.

Educational records (FERPA)

When NextArc partners with a school or school district, any student information we receive from the school is handled as a “school official” under the federal Family Educational Rights and Privacy Act (FERPA), used only for the educational purpose for which it was shared, and not redisclosed without the school’s authorization or as required by law. NextArc does not maintain education records on its own behalf; records belong to the school or to the family.

Data security

Form submissions are transmitted over HTTPS. We rely on Netlify’s production security controls for the website and form-handling layer, and we limit internal access to enrollment data to team members who need it to operate the program. No system is perfectly secure; in the unlikely event of a security incident that affects your personal information, we will notify affected individuals as required by applicable state law.

Retention and deletion

We retain enrollment records for up to two years after program completion, and we retain waitlist and contact-form submissions for up to one year. You can request access to, correction of, or deletion of your information at any time by emailing contact@nextarclearning.com. We will respond within 30 days, or within the shorter period required by your state of residence.

Your rights under state law

Depending on where you live, you may have one or more of the following rights with respect to the personal information NextArc holds about you and your student:

• The right to know what categories of personal information we collect and how we use them.
• The right to access a copy of the personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to delete your personal information, subject to limited exceptions (e.g., to complete a transaction or comply with law).
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. NextArc does not sell or share personal information for these purposes, so this opt-out applies by default.
• The right to limit our use of sensitive personal information. We do not use sensitive personal information for any purpose other than performing the services you requested.
• The right not to be discriminated against for exercising any of these rights.

These rights are recognized in some form by the privacy laws of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Florida (FDBR), Montana (MTCDPA), Delaware (DPDPA), Iowa (ICDPA), Indiana (INCDPA), Tennessee (TIPA), New Jersey (NJDPA), New Hampshire (NHPA), Kentucky (KCDPA), Minnesota (MCDPA), Maryland (MODPA), Nebraska (NDPA), and Rhode Island (RIDTPPA). The specific scope of each right depends on your state and your relationship to NextArc. To exercise any of these rights, email contact@nextarclearning.com. We may need to verify your identity before responding. You may designate an authorized agent to submit a request on your behalf; we will require written authorization signed by you.

North Carolina residents

NextArc is based in North Carolina, and our privacy practices comply with North Carolina law, including the Identity Theft Protection Act (N.C.G.S. § 75-60 et seq.). In the event of a security breach involving your unencrypted personal information, we will notify affected individuals in accordance with N.C.G.S. § 75-65 and will notify the North Carolina Attorney General’s Consumer Protection Division when required by law. North Carolina residents may contact us at contact@nextarclearning.com to access, correct, or request deletion of their information.

Do Not Sell or Share My Personal Information

NextArc does not sell personal information and does not share personal information for cross-context behavioral advertising. There is therefore no opt-out mechanism to enable; the opt-out applies by default. We do not respond to Global Privacy Control signals at this time because the underlying practice (no sale, no sharing) is already aligned with the signal’s purpose.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, when appropriate, notify enrolled families by email. Earlier versions of this policy are available on request.

• September 27, 2026: removed sections about the retired online study tool; local storage is now used only for the theme preference.
• June 10, 2026: updated to reflect nonprofit status; removed payment processor references (enrollment is now free); updated entity name from LLC to North Carolina nonprofit corporation.
• May 26, 2026: added cookie/local-storage disclosure, enumerated service providers, expanded children’s-privacy section with explicit parental-consent flow, added multi-state rights section, added FERPA disclosure, moved policy to a canonical URL.
• May 1, 2026: initial publication.

Contact

Questions about this policy, or want to exercise any of the rights described above? Email contact@nextarclearning.com. We aim to respond within two business days.

NextArc Learning, a North Carolina nonprofit corporation (501(c)(3) status pending) · Charlotte, NC