General Data Protection Regulation (GDPR)
As a school we need to hold personal information about your child on our computer system and in paper records to help us with their educational needs. The Headteacher is responsible for their accuracy and safe-keeping. Please to keep your child’s records up to date by informing us of any change of circumstances.
School staff have access to your child’s records to enable them to do their jobs. From time to time information may be shared with others involved in your child’s care, if it is necessary. Anyone with access to your child’s records is properly trained in confidentiality issues and is governed by a legal duty to keep their details secure, accurate and up to date.
All information about your child is held securely and appropriate safeguards are in place to prevent accidental loss.
In some circumstances we may be required by law to release your child’s details to statutory or other official bodies, for example if a court order is presented, or in the case of public educational issues. In other circumstances you may be required to give written consent before information is released – such as the educational reports for insurance, solicitors etc.
To ensure your child’s privacy, we will not disclose information over the telephone or fax unless we are sure that we are talking to you – the parent/carer. Information will not be disclosed to family and friends unless we have prior written consent and we do not leave messages with others.
You have a right to see your child’s records if you wish. Please ask at the school’s office if you would like further details. An appointment will be required. There is usually no charge for this.
Mrs Annie Kinder is the school's GDPR Data Protection Officer (DPO) and Mr P McQuillen Strong the school's lead for Data Compliance.
Please contact Mr McQuillen Strong via e-mail at email@example.com should a data breach and/or subject access request need to be managed during a school holiday.
GDPR Compliance Policies and Procedures