@lightweight Why does it need to be hosted by some NZ company instead of hosted by the school?

Just because a company is local doesn't necessarily mean it's not malicious.

I'm sure the school has an internet connection and has enough space to put a single server in, which would have no problem hosting a perl CGI script that shows the consent HTML page with a tickbox and a submit button (sure you can use some other CGI language if you want a worse and less reliable experience).