The General Data Protection Regulation (GDPR)
1. Why We Collect or Use Personal Data
We use personal data for the following purposes?
- Pupil enrolment;
- Pupil registration;
- School administration;
- Attendance & disciplinary records;
- Child welfare (including medical welfare);
- Contacting parent(s)/guardian(s) about school or pupil matters;
- Staff administration;
- Raising awareness of the school;
- Ensuring safety and security on the school grounds;
- Fund raising for the school.
2. How We Use Pupil Information
We collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE). We use this personal data to:
- 1. support our pupils’ learning
- 2. monitor and report on their progress
- 3. provide appropriate pastoral care; and
- 4. assess the quality of our services
This information will include their contact details, national curriculum assessment results, attendance information, any exclusion information, where they go after they leave us and personal characteristics such as their ethnic group, any special educational needs they may have as well as relevant medical information.
The school routinely shares pupils’ information with:
- Pupils’ destinations upon leaving the school;
- The LA;
- The NHS;
- The DfE
We will not give information about our pupils to anyone without your consent unless the law and our policies allow us to do so. If you want to receive a copy of the information about your son/daughter that we hold, please contact firstname.lastname@example.org.
We are required, by law, to pass certain information about our pupils to our local authority (LA) and the Department for Education (DfE).
DfE may also share pupil level personal data that we supply to them, with third parties. This will only take place where legislation allows it to do so and it is in compliance with the General Data Protection Regulation (GDPR).
Decisions on whether DfE releases this personal data to third parties are subject to a robust approval process and are based on a detailed assessment of who is requesting the data, the purpose for which it is required, the level and sensitivity of data requested and the arrangements in place to store and handle the data. To be granted access to pupil level data, requestors must comply with strict terms and conditions covering the confidentiality and handling of data, security arrangements and retention and use of the data.
For more information on how this sharing process works, please visit: https://www.gov.uk/guidance/national-pupil-database-apply-for-a-data-extract
For information on which third party organisations (and for which project) pupil level data has been provided to, please visit: https://www.gov.uk/government/publications/national-pupil-database-requests-received
If you need more information about how our local authority and/or DfE collect and use your information, please visit the DfE website at https://www.gov.uk/data-protection-how-we-collect-and-share-research-data.
We may also collect data about parents for the purpose of verifying claims for free school meals or nursery places, informing you about your child’s activities, providing emergency contact details and other uses. You will be informed what the data collected is for and if required when it will be disposed of.
Our CCTV cameras operate for the purpose of security on site.
In accordance with the GDPR, the school does not store personal data indefinitely; it is only stored for as long as necessary to complete the task for which it was originally collected.