Website Security
Locking down a site that carries children's photographs and parent enquiries, without buying products you do not need.
Read about website security
Your website is read by a parent who is nervous. They are deciding whether to leave a two year old with strangers, and everything on the page is read as evidence that you are careful. So web hosting for daycare centers starts with the photographs you publish of other people's children.
Most business websites are read casually. Yours is not. A parent looking at a daycare website is usually doing it late in the evening, on a phone, with a return-to-work date approaching, and they are looking for reasons to rule you out. That is not pessimism. It is how anyone shortlists something they are frightened of getting wrong.
So the questions they arrive with are narrow and specific. Are you licensed, and can I see that in writing. What ages do you take. Do you have a space, and if not, how long is the wait. What does it cost. Who are the people in the room. Where exactly are you, and can I get there before work.
Almost every daycare website answers three of those and leaves the rest to a phone call. The parent does not make the phone call. They go to the next centre on the list, because the next centre answered.
None of that is a hosting feature. It is what the hosting is carrying. But it decides whether the site does anything for you, so it comes first.
Send us your daycare site and we will tell you which of those six answers a parent cannot find on it, from the licence number to whether you have openings. Fixing that is usually an afternoon, not a rebuild.
This is the part of a daycare website that can genuinely hurt somebody, and it is worth being blunt about it.
A photograph of a happy room is the most persuasive thing you can put on the page. It is also a photograph of a specific child, published on the open internet, on a page that says exactly where that child is between seven and six, five days a week. Those two facts sit on top of each other. A family photo on a fridge is private. The same photo on your website is a location.
Most of the time nothing comes of it. The case that does come of it is a custody dispute, or a parent who moved away from someone, and your smiling group shot is how they were found. That is the failure to design around, because you will not know which family it applies to. Parents in that situation very often do not tell you.
Removing a photo from your website does not remove it from search engine caches, from a scraper, or from whoever downloaded it. Assume a published photo is permanent. That is the reason the decision happens before you upload, not after a complaint.
It is also worth deciding who is allowed to publish. A staff member posting from their own phone at nap time is how the policy gets bypassed, and no hosting arrangement can prevent that. One person with the login, and one place photographs go through, is the whole control.
Licensed childcare is inspected, and in most states inspection findings are published in a searchable public register. Parents do look them up. Not all of them, but the organised ones do, and those are the ones who fill your spaces and tell other parents about you.
This means the honest position is the strong one. Put your licence number on the site and link to your own listing in the state register. A centre that points parents at its own inspection record reads as confident. A centre that says nothing invites the parent to go and find the record without your framing, which they will.
If you have had a finding against you, and most centres eventually do, saying so in one calm sentence with what you changed is far better than leaving a parent to discover it cold. Requirements and how records are published vary by state, so check the specifics with your own licensing consultant or attorney rather than taking a web page's word for it.
Do not fabricate accreditations or reproduce a state seal you have not been given permission to use. Regulators take an interest, and a parent who spots one wrong claim stops believing the rest of the page.
Daycare is unusual in that demand often exceeds supply. That tempts owners into treating the website as optional. It is the opposite. When you are full, the website's job changes from selling to capturing, and capture is where the money is, because the parent who joins your list in March is your September income.
The failure here is quiet. A parent finds you, sees no openings, and leaves without telling you they existed. You never learn how much demand you turned away, so you never plan capacity around it.
Write whether you have space, for which age bands, and when you expect the next openings. A page that says infant room full, toddler openings in August, is more useful than a form that promises somebody will be in touch.
Ask for the child's date of birth, the care start date the family needs, the days they want and one contact method. That is enough to sort the list. Anything more and people abandon it at nine at night, which is when they are filling it in.
The most common broken thing on a daycare website is a form that quietly stops sending. Send a copy to a second address, and test it yourself once a month. An enquiry form at your own domain, on business email you control, is far more reliable than one forwarding to a free personal address that may filter it as spam.
The centre that answers first usually wins the place. A short reply that confirms the position and gives a rough timeline holds a family for months.
A note every couple of months to everyone waiting costs you nothing and prevents the awkward call where a family has already gone elsewhere and you have a gap.
Because the form collects a child's name, date of birth and a parent's contact details, the site needs an SSL certificate so that submission is encrypted in transit. That is standard on any current hosting plan and there is no reason to be without it.
We will check that your enrolment form actually arrives, move it onto an address at your own domain, and settle the photograph policy before anything goes up. If your current plan already covers it, we will tell you that instead.
Most centres now run daily reports, nappy and nap logs, photos to parents and invoicing through a childcare management app. That is sensible, and it is not something to rebuild on your own site.
The clean division is this. Your website is public and its audience is families who are not yet yours. The app is private and its audience is families who already are. Trying to blur the two is where daycare websites go wrong, usually by putting a parent login on the homepage that nobody uses because the app has its own.
As far as hosting goes this is good news. A public daycare site is a small number of mostly unchanging pages. That is one of the lightest things you can put on a server, and shared hosting covers it comfortably.
If you are a registered home childminder caring for a handful of children, you very probably need a single page and nothing more.
Your name, your registration, the ages you take, roughly where you are, your hours and one way to contact you. That page can sit on the smallest plan available and it will do the entire job, because your enrolment is filled by word of mouth and a local parents group, not by search. Money spent on a multi-page site with a blog and a gallery is money you will not get back.
Spending more starts to make sense at a different scale. Several sites under one brand, a genuine enrolment funnel with a form and a waiting list you manage, staff pages you update as people join and leave, or a site carrying tuition information that changes each year. Those are real reasons to have something bigger. Number of children in the building is not one on its own.
One thing worth paying for at any size: knowing that the site can be put back. If your only copy of the site is the live one and it breaks, you are rebuilding from memory. Website backups are the cheapest insurance on this list.
AldoMedia has built and looked after websites for Western New York businesses since 1999. We are an independent authorised reseller rather than the operator of the underlying platform, which means we will tell you when the plan you already pay for is the right one, and we would rather say that than sell you a tier you cannot use.
For a daycare centre the useful work is rarely the hosting itself. It is getting the licence details on the page, making the enquiry form actually arrive, and getting the photograph policy settled before somebody uploads something that cannot be taken back. If you want the site locked down properly at the same time, the practical version of that is on the website security page.
Call 716-771-2536 or tell us what your site runs on.
Only with written consent from each family, and treat website consent separately from social media consent. Remember what a photo on your site means: it is a named building with an address and opening hours, so it publishes where that child is every weekday. That matters most for families in custody disputes or who have moved away from someone, and those parents very often do not tell you. Photographs of the room, of activities, of hands and backs of heads sell the space without identifying anybody.
Yes, and linking to your own listing in the state register is stronger than staying quiet. Organised parents look the record up anyway, and it is better that they arrive there from your page with your explanation than find it cold. If you have had a finding, one calm sentence saying what changed does more good than silence. How records are published varies by state, so check the details with your own licensing consultant.
It matters more when you are full, not less. A parent who finds you, sees no space and leaves without telling you is demand you never learn about. Say plainly which rooms are full and when you expect openings, then give them a short waiting list form asking for the child's date of birth, the start date they need and one contact method. That list is next year's enrolment.
No. Keep the two separate. Your website is public and speaks to families who are not yours yet. The app is private and speaks to the ones who are. A single obvious link to the app is all the site needs, and duplicating newsletters and daily notices in both places just means one of them goes stale. The exception is closures and weather days, which belong on the public site too because parents check it first thing in the morning.
Almost certainly not. A single page with your name, registration, ages taken, hours, general area and a way to contact you does the whole job, on the smallest plan available. Give the neighbourhood rather than your exact home address and share the number once you have spoken to a family. Skip the gallery, because the photograph risk does not get smaller just because you are.
It is the most common broken thing on a daycare site, and the damage is invisible because nobody complains about an email they never sent. Send every submission to a second address, use an address at your own domain rather than a free personal one that may filter it as spam, and put a monthly test in the same routine as your other checks. Also make sure enquiries reach more than one person, so a week of holiday does not become a week of lost enrolments.
Locking down a site that carries children's photographs and parent enquiries, without buying products you do not need.
Read about website securityThe plan type nearly every daycare site belongs on, and what the higher tiers actually change.
Read about shared hostingWhy enrolment enquiries should arrive at your own domain rather than a free personal address.
Read about business emailEvery trade we cover is listed on hosting by industry.
Hero image: perpetual.fostering, CC BY 2.0, via Wikimedia Commons. Cropped.
Tell us what your daycare site runs on and we will check the enrolment form, the licence details and the photograph handling. If the plan you are paying for is already right, we will say so.
Get Your Web Hosting Plan Get help choosing
Or call 716-771-2536 and tell us what the site has to do. If the plan you are already on is the right one, we will say so.