Data Protection and Privacy

All data held by the school is compliant with the Data Protection Act of 2018.

The UK GDPR (UK General Data Protection Regulation) increases the importance of data protection and emphasises accountability. As a school we employ a ‘privacy by design’ approach – thinking about how we use and manage data securely in everything we do. The emphasis on accountability means that as a school we have increased the amount of documentation we use to record procedures and issues.

All personal data, electronic and paper copies, are stored on our secure server or in locked cabinets in locked rooms with access restricted on a 'need to know' basis.

The Information Commissioners Office (ICO) is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

We do not store or process any biometric data.

The GDPR provides the following rights for individuals:

The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling.

Please click here to read our GDPR- Data Protection Policy on our policies page.

Please click here to read our Privacy Notices. (Currently being reviewed- Spring 2024)

Subject Access Requests (SARs) and Data Breach Procedures- Please see our GDPR policy.

List of Third Parties- Please click here.

Photo consent form- Please click here.

Photo consent withdrawal form- Please click here.