The type of personal information we collect
We currently collect and process the following information:
- Personal identifiers, contacts and characteristics (for example, name and contact details)
- Email address
All education settings and local authorities are data controllers and data processors in their own right and, as such, they have a duty to inform pupils, staff and parents how they process the data that is within their control.
- Data controller – The organisation who (either alone or in common with other people) determine the purpose for which, and the manner in which data are processed.
- Data Processor – A person or organisation who process data on behalf of and on the orders of a controller
How we get the personal information and why we have it
Most of the personal information we process, is provided to us directly by you for one of the following reasons:
- Pupil data collection sheets
- Emails from parents
- Calls from parents
- Medical care plans
We also receive personal information indirectly, from the following sources in the following scenarios:
- Previous Schools
- Local Authority
- Care Services
We use the information that you have given us in order to best look after students on site.
We may share this information with Worcester Children’s First (Local Authority, Law Enforcement and Further Education Institutes.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
- Your consent. You are able to remove your consent at any time. You can do this by contacting email@example.com
How we store your personal information
Your information is securely stored securely on site.
We keep information listed above, both digitally and hard copy based, for a minimum time-period as stated by ICO. We will then dispose of your information by securely erasing drives or shredding.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
How to complain
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to our Operations Manager by e-mail to firstname.lastname@example.org.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk