We collect only the information required to run library services — nothing more. Varisley is built on data minimization: no unnecessary personal data, no data sales, ever.
event_available Effective & Last Updated: July 17, 2026We only ever request and store the data required to perform core library functions — nothing extra, nothing speculative.
Patron and client data is never sold, rented, or traded to third parties for marketing or advertising purposes. Full stop.
Circulation and account records are treated as confidential, consistent with library professional ethics and applicable confidentiality law.
Patrons and library clients can request access to, correction of, or deletion of their information at any time.
This Privacy Policy explains how Varisley ("we," "us," "our") handles personal information in connection with NestILS, our library management system (ILS), and the libraries, consortia, staff, patrons, and other clients who use it (collectively, "you"). It covers both the NestILS software platform used by library staff and patrons, and this marketing website.
Because NestILS is deployed for libraries, schools, and consortia, the library or institution that licenses NestILS is typically the data controller for patron records, and Varisley acts as its data processor/service provider. This policy describes the privacy-protective standards we build into the platform and hold ourselves to as that processor.
We intentionally keep the data footprint of NestILS as small as possible. We only collect and store the information necessary to perform library functions such as issuing a library card, checking out and returning items, placing holds, managing fines, and delivering the services a patron or client has requested.
If a library enables an optional feature that would collect additional information, that field is clearly labeled as optional in the interface and is never required to hold a library card or borrow materials.
We deliberately avoid requesting information that isn't necessary to run a library. NestILS is designed so that:
We also do not retain detailed reading or search history linked to your identity any longer than is needed to fulfill a hold or loan — see Data Retention & Deletion.
Every field NestILS stores maps to a specific library function:
We do not use patron or client data to build advertising profiles, and we do not use it for purposes unrelated to library operations without separate, explicit consent.
Library circulation and patron records are treated as confidential in keeping with professional library ethics (including the principles reflected in the ALA Code of Ethics and Library Bill of Rights) and any applicable state, provincial, or national library-records confidentiality law that governs the licensing library. Access within NestILS is role-based: only staff with a legitimate operational need can view a patron's account, and every access is logged in an audit trail.
We share personal data only in the following limited circumstances:
We do not share data with third parties for their own independent marketing purposes.
Varisley does not sell, rent, or trade personal data belonging to patrons, library staff, or clients to any third party, under any circumstances, and has not done so in the preceding 12 months. This applies to circulation history, account details, and any other information collected through NestILS or this website.
Subject to the policies of the library or institution that holds your record, you generally have the right to:
To exercise any of these rights, contact your library directly, or reach Varisley using the details in Contact Us below and we will route your request appropriately.
Many libraries serve young patrons. Juvenile accounts collect the same minimal information as adult accounts and no more, are subject to any additional protections the library's policy requires (such as guardian association), and are never used to build advertising profiles or shared with third parties for marketing.
This marketing website uses only essential and functional cookies needed for the site to operate (for example, remembering that a form was submitted). We do not use third-party advertising trackers on this site. If you submit the demo request or contact form, the information you enter is sent to our form provider solely to route your inquiry to our team and is not used for advertising.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last Updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to licensed libraries in advance of taking effect.
Questions about this policy or a request regarding your data can be sent to our team, and we will respond promptly.
Reach out to Varisley's team about this policy, or a specific request regarding your data.