Introduction
Brindleford School is committed to protecting the personal data of pupils, parents, staff, and visitors in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what information we collect, why we collect it, and how we keep it safe. The school is the data controller for the purposes of data protection law.
What Data We Collect
- Pupil names, dates of birth, and contact details
- Parent and guardian contact details and emergency contacts
- Medical information and details of special educational needs
- Academic records, reports, and assessment data
- Attendance and behavioural records
- Photographs and video footage for school use
How We Use Your Data
Personal data is used to support pupils' education, monitor progress, and ensure their welfare and safeguarding. We also use data to meet our statutory obligations, communicate with families, administer admissions and fees, and manage our staff. Data is processed on the basis of legal obligation, legitimate interest, or where appropriate, with your consent.
Data Sharing
We do not share personal data with third parties unless required or permitted by law. Data may be shared with the Department for Education (DfE), the local authority, and Ofsted for statutory purposes such as school census returns, safeguarding referrals, and inspections. We will only share data with other organisations where we have your explicit consent or where there is a lawful basis to do so.
Your Rights
Under data protection law, you have the following rights:
- The right of access to your personal data
- The right to rectification of inaccurate data
- The right to erasure of your data in certain circumstances
- The right to restrict processing
- The right to data portability
- The right to object to processing
Contact
If you have any questions about how we handle personal data, or wish to exercise any of your rights, please contact us at office@brindleford.school.