Data Protection & GDPR
At Pitsford, we hold and process personal information on each pupil, and limited information on parents, in order to provide a rounded education and a safe environment for each child.
The legal basis for processing personal data under the General Data Protection Regulations May 2018 is to complete a PUBLIC TASK (that of provision of an education).
The school complies with the General Data Protection Regulations May 2018 and this is demonstrated by our Data Protection Policy and linked documents such as Privacy Notice, Internet Safety Policy and ICT Acceptable Use Policy. These are all available from our policies page. Please note that some are in draft form while the school waits for final clarification of the requirements under the GDPR. We commit to train our staff and volunteers to understand the importance of handling data securely and fully understand that privacy is important to you and your child.
Where the data stored and processed is to enhance the educational provision, but is not a key element of providing an education, we will seek consent from a parent.
Photos, images and videos to be displayed in school, on Twitter and on the school website. These images will be removed and deleted 1 year after Year 6, unless specific consent is obtained for marketing purposes.
Images are stored on the school's secure network and are appropriate. If a child objects to a photo it will be removed.
Pitsford’s Privacy Notice
Please click HERE for the school's Privacy Notice for Pupils and HERE for Parents. Staff members, volunteers, additional emergency contacts and contractors may wish to view the Privacy Notice for Staff or the Privacy Notice for Governors and Volunteers.
The school has a Data Protection Officer provided through the LGSS; his name is Paul Stratford and he can be contacted through the school at firstname.lastname@example.org.
The school asks all parents, carers and visitors to our school to ask permission before taking photos and video and to agree such files are used for personal use only and are not shared with social media sights or other agencies.
The school will only publish images on this website if parental permission has been provided.
Parents and pupils have the right to access the information we hold about them; this is known as a Subject Access Request and should be made in writing.
The school must supply the information requested within one school month or provide a reason for an extension of up to two months.
Where you are unhappy with how your data has been handled by the school you can make a complaint to the Data Protection Officer Paul Stratford, at email@example.com or if this does not provide satisfaction direct to the Information Commissioner at ico.org.uk.
Separate from the GDPR, the Department for Education regulations provide a pupil's parents (regardless of the age of the pupil) with the right to view, or to have a copy of, their child's educational record at the school. If you wish to exercise this right you should write to the school firstname.lastname@example.org.