What is GDPR?

General Data Protection Regulation

The General Data Protection Regulation (GDPR) is Europe’s framework for data protection laws which came into force on 25th May 2018. Even though the UK is no longer a member of the European Union, the GDPR will remain in force in the UK for the foreseeable future.

These regulations affect businesses, public sector organisations and schools and control how they handle the personal information of their customers, or in schools it’s parents, students and staff.

What are your rights?

Right to be informed – all schools must be transparent in how they are using personal data.

Right of access – you have the right to access and receive a copy of your personal data, commonly referred to as a subject access request.

Right of rectification – you have the right to request that we rectify any incorrect or incomplete personal data.

Right to erasure – often referred to as the right to be forgotten, in certain circumstances individuals can request their personal data is erased.

Right to restrict processing – in certain circumstances you have the right to request the restriction or suppression of your personal data.

Right to object – in some circumstances, individuals are entitled to object to their personal data being used.

Right to data portability – allows individuals to receive their personal data in a commonly used format and have it transferred to another school without hindrance.

Where we have been required to ask for your consent to use the data that we hold on your child, you have the right to withdraw that consent.

How is school data used?

The following documents outline important information for staff, students, parents and other stakeholders relating to how we use the personal data we collect.

Data Protection Policy February 2022

Privacy notice for students 

Pupil Privacy Notice February 2022

Privacy notice for parents

Parent Privacy Notice February 2022

Privacy notice for staff

Workforce Privacy Notice February 2022

Privacy notice for visitors

Visitor Privacy Notice February 2022

Privacy notice for individual contracts

Individuals Contracts Privacy Notice February 2022

The school has an appointed Data Protection Officer (DPO), HY Education, who can be contacted in writing at HY Education, 3 Reed House, Hunters Lane, Rochdale, OL16 1YL or by telephone on 0161 543 8884 or by email (DPO@wearehy.com). The DPO is responsible for dealing with data protection issues within the school and you can contact the DPO should you wish to discuss any issues or concerns that you have about data protection.