Privacy notice

What this policy is for

This policy is intended to provide information about how the School will use (or "process") personal data about individuals including: its staff; its current, past and prospective pupils; and their parents, carers or guardians (referred to in this policy as "parents") and wider community.

Who to contact

This section contains details of who to contact for more information and our process for queries and complaints.

Why we collect

Why the School needs to collect and process personal data.

What we collect

Types of personal data processed by the School.

How the School collects data

The School primarily collects data from the individual or in the case of pupils their parents or their agents. However, in some cases personal data may be supplied by third parties such as another school, or other professionals or authorities working with that individual; or collected from publicly available resources.

Who has access to personal data and who we share it with / transfer it to

For the most part, personal data collected by the School will remain within the School, and will be processed by appropriate individuals only in accordance with access protocols (i.e. on a ‘need to know’ basis). Occasionally, the School will need to share personal information relating to its community with third parties, such as professional advisers (lawyers and accountants) or relevant authorities (HMRC, police or the local authority).

How long we keep personal data

The School will retain personal data securely and only in line with how long it is necessary to keep for a legitimate and lawful reason. Typically, the legal recommendation for how long to keep ordinary staff and pupil personnel files is up to 7 years following departure from the School. However, incident reports and safeguarding files will need to be kept much longer, in accordance with specific legal requirements.

Keeping in touch and supporting the School

The School will use the contact details of parents, pupils, alumni, benefactors and the wider community to keep them updated about the activities of the School, or alumni and parent events of interest, including by sending updates and newsletters, by email and by post. Unless the relevant individual objects.

Your rights

Individuals have various rights under Data Protection Law to access and understand personal data about them held by the School, and in some cases ask for it to be erased or amended or for the School to stop processing it, but subject to certain exemptions and limitations.

Pupil requests

Pupils can make subject access requests for their own personal data, provided that, in the reasonable opinion of the School, they have sufficient maturity to understand the request they are making. Indeed, while a person with parental responsibility will generally be entitled to make a subject access request on behalf of younger pupils, the information in question is always considered to be the child’s at law.

Consent

Where the School is relying on consent as a means to process personal data, any person may withdraw this consent at any time (subject to similar age considerations as above). Please be aware however that the School may have another lawful reason to process the personal data in question even without your consent.

Whose rights

The rights under Data Protection Law belong to the individual to whom the data relates. However, the School will often rely on parental consent to process personal data relating to pupils (if consent is required) unless, given the nature of the processing in question, and the pupil's age and understanding, it is more appropriate to rely on the pupil's consent.

Data accuracy and security

The School will endeavour to ensure that all personal data held in relation to an individual is as up to date and accurate as possible. Individuals must please notify the School of any significant changes to important information, such as contact details, held about them, please refer to the ‘Who to contact section’.

This policy

The School will update this Privacy Notice from time to time. Any substantial changes that affect your rights will be provided to you directly as far as is reasonably practicable.

Last updated 9 May 2018.

Haileybury Hertford SG13 7NU 01992 706200 Registered charity number 310013