GDPR

POLICES

Privacy notices from the school relating to pupil information in regard to the GDPR regulations that came into force at the end of May 2018 and can be found below.

How we use children in need and children looked after information (May 2018)

How we use pupil information (May 2018)

DataSubjectAccessRequest_Policy

Employee privacy notice

Data protection HR policy

Record Retention Policy

       

 

SUBJECT ACCESS REQUEST

Under the Data Protection Act 1998, all stakeholders have a right to request access to information the school holds about them. This is known as a subject access request.

Subject access requests must be submitted in writing, either by letter, email or fax. Requests should include:

  • The subject’s name
  • A correspondence address
  • A contact number and email address
  • Details about the information requested

Alternatively, a request can be made verbally in person or over the phone. If over the phone, verification of identity will still be required.

The school will not reveal the following information in response to subject access requests:

  • Information that might cause serious harm to the physical or mental health of the pupil or
  • another individual
  • Information that would reveal that the child is at risk of abuse, where disclosure of that
  • information would not be in the child’s best interests
  • Information contained in adoption and parental order records
  • Certain information given to a court in proceedings concerning the child

 
Subject access requests for all or part of the pupil’s educational record will be provided within 15 school days. The school may need to make a charge in connection with the cost of delivering said papers. If a subject access request does not relate to the educational record, we will respond within 30 calendar days.
If you are unable to make this request in writing, please call the school on 01603454199 and ask to speak to the Business Manager.
Proof of your identification will be needed for the subject access request to be actioned.

Pro-Forms (Resource Track UK Ltd)

An online data capture service we use for reporting issues with school technology and premises faults. We have worked in closely with Sheringham Woodfields School who has been heavily involved in creating and tailoring to meet the needs of many schools. 

More information about their privacy policies can be found here: https://www.pro-forms.co.uk/assets/EULA_v1.3_web_signup.pdf

The school has a separate processing agreement in place which covers UK data sovereignty

ScholarPack

This is the Management Information System used by the school to support with statutory returns such as School Census, Workforce Census and Assessment returns. Many Norfolk (and indeed UK based) Schools use this online platform.

More information about their compliance with GDPR can be found here: https://support.scholarpack.com/hc/en-gb/articles/360002132132-ScholarPack-GDPR-Guide