At our school, we take the protection and responsible use of information very seriously. Information governance refers to how we collect, manage, store, and share personal and sensitive data in a safe, lawful, and transparent way.
We hold information about our pupils, parents and carers, staff, and visitors to help us provide the best possible education and support. This may include contact details, attendance records, assessment data, safeguarding information, and medical needs. All data is handled in accordance with relevant data protection laws and guidance.
We use personal data to:
We only collect the information we need and ensure it is accurate and kept up to date.
We have robust systems and procedures in place to keep information secure. This includes:
We may share information with trusted organisations when required, such as local authorities, health services, or the Department for Education. We only share data when it is necessary, lawful, and in the best interests of the child.
Parents, carers, and staff have rights under data protection law, including the right to:
Requests can be made by contacting the school office.
Details of the types of information we collect, who we share information with, and the basis of the laws under which we do this can be found in the privacy notices below. If you have any questions about how we manage information or wish to make a request, please contact the school office. We are committed to handling all information responsibly and transparently.
Please see below our Data Protection Policy and Privacy Notices, including a child friendly video that is shown to children to explain how we collect and use their data.
Privacy Notice - Governors and Volunteers
Privacy Notice - School Workforce
Privacy Notice - Hire of School Premises
A Data Protection Impact Assessment (formerly known as a Privacy Impact Assessment) is a process designed to help the school to systematically analyse, identify and minimise the data protection risks of a project or plan. It is a key part of the school’s accountability obligations under UK GDPR. Whilst it does not eradicate all risk it should help determine whether or not the level of risk is acceptable.
Data Protection Impact Assessments (DPIA) are an essential part of the school’s accountability obligations. Conducting a DPIA is a legal requirement for any type of processing, including certain types of processing, that is likely to result in a high risk to the rights and freedoms of individuals.
Below is a list of DPIAs school have completed.
Arbor
CCTV
ClassDojo
Complete PE
CPOMS
Iris ParentMail
Inventry
Provision Map
Juniper Education
MS Forms
PIMS
SAM
Tribepad
Wonde
Evolve
Governor Hub
Insight
Early Years Provider Portal
GL Assessment
School Food United