This notice relates to the Data Protection Act 1998 and General Data Protection Regulations (GDPR) which come into force on 25 May 2018.
1.THE INFORMATION THAT WE COLLECT
We collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE). We use this personal data to;
- support our pupils’ learning
- monitor and report on their progress
- provide appropriate pastoral care; and
- assess the quality of our service
- to comply with the law regarding data sharing
The categories of pupil information that we collect, hold and share include:
- Personal information (such as name, unique pupil number and address)
- Characteristics (such as ethnicity, language, nationality, country of birth and free school meal eligibility)
- Attendance information (such as sessions attended, number of absences and absence reasons)
- Assessment Information
- Relevant medical information
- Special educational needs information
- Behavioural information
- Post 16 learning information
We may also obtain information about your family circumstances which might affect your welfare or happiness. This may include any court orders or criminal petitions which relate to you. This is so that we can safeguard your welfare and wellbeing at the School. We use CCTV to make sure the school site is safe. CCTV is not used in private areas such as toilets. We may take photographs or videos of you at School events to use on social media and on the School website. This is to show prospective parents and pupils what we do here and to advertise the School. We may continue to use these photographs and videos after your child has left the School. We may send you information to keep you up to date with what is happening at the School. For example, by sending you information about events and activities taking place (including fundraising events). We may keep details of your address when you leave the School.
We will process financial information about you in relation to the payment of school dinner money or contributions you make to the school.
2. SHARING PERSONAL INFORMATION WITH THIRD PARTIES
- In accordance with our legal obligations, we may share information with local authorities, and the Department for Education, for example, the School Census and where we have any safeguarding concerns.
- On occasion, we may need to share information with the police. We may also need to share information with our legal advisers for the purpose of obtaining legal advice.
- Occasionally we may use consultants, experts and other advisors to assist the School in fulfilling its obligations and to help run the School properly. We might need to share your information with them if this is relevant to their work.
- If you are not not of British nationality we have to make sure that you have the right to study in the UK.
- We may share some information with our insurance company, for example, where there is a serious incident at the School.
- If your child leaves us to attend another school we may need to provide that school with information about you.
- We may need to share your information also with the Local Authority on your family circumstances for safeguarding reasons.
- We may need to share information if there is an emergency, for example, if you are hurt whilst on School premises.
3. LEGAL GROUNDS FOR USING YOUR INFORMATION
a) Legitimate interests - This means that the processing is necessary for legitimate interests except where the processing is unfair to you. The School relies on legitimate interests for most of the ways in which it uses your information. Specifically, the School has a legitimate interest in:
- Providing you with educational services
- Safeguarding and promoting your welfare
- Promoting the objects and interests of the School. This includes fundraising. It also includes making sure that we are able to enforce our rights against you, for example, so that we can contact you if unpaid dinner money is outstanding.
- Facilitating the efficient operation of the School; and
- Ensuring that all relevant legal obligations of the School are complied with. We may also have to disclose your information to third parties such as the courts, the local authority or the police where legally obliged to do so.
b) Vital interests - For example, to prevent someone from being seriously harmed.
c) Public interest - The School considers that it is acting in the public interest when providing education.
The School must also comply with an additional condition where it processes special categories of personal information. These special categories are as follows: personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health information, and information about sex life or orientation.d) Substantial public interest - The processing is necessary for reasons of substantial public interest.
- Legal claims - The processing is necessary for the establishment, exercise or defence of legal claims. This allows us to share information with our legal advisors and insurers.
- Medical purposes -This includes medical treatment and the management of healthcare services.
4. CONSENT TO USE YOUR INFORMATION
We may ask for your consent to use your information in certain ways. If we ask for your consent to use your personal information you can take back this consent at any time. Any use of your information before you withdraw your consent remains valid.
We store information on computer servers based at the school
Recently, we also store information in the ‘Cloud’ which is maintained in the UK by the Microsoft Corporation
The European Commission has produced a list of countries which have adequate data protection rules. The list can be found here: http://ec.europa.eu/justice/data-protection/internationaltransfers/adequacy/index_en.htm. However, it is unlikely that we will need to send your data to any of these countries.
5. HOW LONG DO WE KEEP YOUR INFORMATION
We keep your information for as long as we need to in order to educate and look after you. We will keep some information after you have left the School, for example, so that we can find out what happened if you make a complaint. In exceptional circumstances we may keep your information for a longer time than usual but we would only do so if we had a good reason and only if we are allowed to do so under data protection law. We can keep information about you for a very long time or even indefinitely if we need this for historical, research or statistical purposes. What decisions can you make about your information? From May 2018 data protection legislation gives you a number of rights regarding your information. Some of these are new rights whilst others build on your existing rights. Your rights are as follows:
- if information is incorrect you can ask us to correct it;
- you can also ask what information we hold about you and be provided with a copy. We will also give you extra information, such as why we use this information about you, where it came from and what types of people we have sent it to;
- you can ask us to delete the information that we hold about you in certain circumstances. For example, where we no longer need the information;
- you can ask us to send you, or another organisation, certain types of information about you in a format that can be read by computer;
- our use of information about you may be restricted in some cases. For example, if you tell us that the information is inaccurate we can only use it for limited purposes while we check its accuracy;
FURTHER INFORMATION AND GUIDANCE
The Data Processomg Officer is the person responsible at our school for managing how we look after personal information and deciding how it is shared. We need to keep your information safe, up to date, only use it for what we said we would, destroy it when we no longer need it and most importantly - treat the information we get fairly. This notice is to explain how we use your personal information. If you object to us using your information for marketing purposes e.g. to send you information about school events such as charitable events where your contribution is requested, then we will stop using your information for marketing purposes if you tell us not to. If you would like us to update the information we hold about you; or you would prefer that certain information is kept confidential you can inform the Data Processing Officer. If you consider that we have not acted properly when using your personal information you can contact Oretta Gayle, School Business Manager, in the first instance, or the Information Commissioner's Office - ico.org.uk.
The named Data Protection Officer is Fiona AldermanLondon Borough of Redbridge
8th Floor Rear, Lynton House
255-259 High Road,
Ilford, IG1 1N
Every computer connected to the Internet is provided with a domain name and an IP Address. When a visitor requests a web page from within the Little Heath School website, our servers automatically identify and log the HTTP request that is made.
This information reveals nothing personal about you. In fact, the only information that we automatically gather and log is as follows: the IP address of the site that may have referred you; your IP address; the web page that you may have linked to us from, if any; the product identifier for version and make of browser (e.g. Internet Explorer 9); the operating system platform that you may be running (e.g. Windows); search words or terms that are passed from a search engine (e.g. Google or Yahoo).
Little Heath School has found it advantageous to examine visitor traffic so that we can ensure maximum compatibility for the various browsers and operating systems that visit our site. By analysing visitation patterns, referring URLs and search engine terms, we can strategically enhance our exposure across the Internet.
Cookies and log information
This website does issue 'cookies' (these are small files of information which websites use to identify its users), however, these do not contain personal information. Little Heath School does not share this data with third parties. You can disable cookies by altering the settings of your browser and the website will still function.
What other information does Little Heath School request?
We may also request your email address or mailing address for the purposes of conducting a survey or to add you to our mailing list, or by your request to have someone contact you for additional information. Whenever we request the identity of a visitor, we will clearly indicate the purpose of the inquiry before the information is requested.
We enforce a strict 'Anti-Spam' policy that means we do not intend to sell, rent, or otherwise give your e-mail address to a third-party without your consent.
In addition, Little Heath School will not send you email that you have not agreed to receive. If you are a member of our mailing list, you may be contacted with announcements, news, portfolio additions, and new products or services.
With each email sent, you have the option of 'unsubscribing' from our mailing list at any time, thereby disabling any further such email communication from being sent. If you wish to have specific communications with a member of the Little Heath School staff, you will be required to provide specific information that will be routed to the appropriate contact within the school.
Little Heath School will disclose your personal information or any of its log file information when required by law or in the good-faith belief that such actions are necessary.
Little Heath School uses all reasonable precautions to keep the information disclosed to us secure. Furthermore, we are not responsible for any breach of security or for any actions of any third parties that receive the information.