GDPR

What is GDPR? 

The UK General Data Protection Regulation (UK GDPR) works with the Data Protection Act 2018 to form the UK's data protection framework. The UK GDPR sets out how people’s personal data is processed and kept safe, and the legal rights individuals have over their own data. 

Who does it apply to?

The UK GDPR applies to ‘data controllers’ and ‘data processors’. As a school, we are the data controller because we decide why and how data is processed. We are responsible for making sure that 'data processors' who process personal data on your behalf (for example, school club providers) follow data protection laws. 'Processing' is anything we do with personal data, including: collecting, recording, storing, and sharing. When we destroy data, it also counts as processing.

For further information on what our school uses information for and how we keep it safe, please read the below policies and information.