This Privacy Notice has been written to inform parents and pupils of Ingleton Primary School about what we do with your personal information. This Notice may be subject to change as the Data Protection Bill progresses.
Ingleton Primary School is a ‘Data Controller’ as defined by Article 4 (7) of GDPR. This means that we determine the purposes for which, and the manner in which, your personal data is processed. We have a responsibility to you and your personal data and will only collect and use this in ways which are compliant with data protection legislation.
The school has appointed Veritau Ltd to be its Data Protection Officer (DPO). The role of the DPO is to ensure that the school is compliant with GDPR and to oversee data protection procedures.
Veritau’s contact details are:
Information Governance
Veritau Ltd
County Hall
Racecourse Lane
Northallerton
DL7 8AL
[email protected]
01609 53 2526
The categories of information that we collect, hold and share include the following:
We will also process certain ‘special category’ data about our pupils including:
We use the information we collect:
Any personal data that we process about our pupils and parents is done so in accordance with Article 6 and Article 9 of GDPR:
Our legal basis for processing your personal data, in line with Article 6(1)(c) include:
We also process information in accordance with Article 6(e) and Article 9(2)(g) as part of the official authority vested in us as Data Controller and for reasons of substantial public interest. Such processing, which is not mandatory but is considered to be in our pupils’ interests, include:
Whilst the majority of pupil information you provide to us is mandatory, some of it is provided to us on a voluntary basis. When we do process this additional information we will ensure that we ask for your consent to process this.
Much of the information we process will be obtained directly from you (pupils and parents). We will also process information received from:
We routinely share pupil information with:
For more information on information sharing with the DfE (including the National
Pupil Database and Census), please go to: https://www.gov.uk/government/publications/national-pupil-database-user-guide-and-supporting-information
We will not share any information about you outside the school without your consent unless we have a lawful basis for doing so.
A parent or guardian can request that only their child’s name, address and date of birth is passed to their local authority or provider of youth support services by informing us. This right is transferred to the child / pupil once he/she reaches the age 16.
For more information regarding services for young people please visit our Local Authority’s website.
Ingleton Primary School will keep your data in line with our Information Policy. Most of the information we process about you will be retained as determined by statutory obligations. Any personal information which we are not required by law to retain will only be kept for as long as is necessary to fulfil our organisational needs.
Under GDPR parents and pupils have the following rights in relation to the processing of their personal data:
If you have any concerns about the way we have handled your personal data or would like any further information, then please contact our DPO on the address provided above.
If we cannot resolve your concerns you may also complain to the Information Commissioner’s Office (the Data Protection Regulator) about the way in which the school has handled your personal data.
You can do so by contacting:
First Contact Team
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow Cheshire
SK9 5AF
[email protected] // 03031 231113
