Privacy Notice

[PLACEHOLDER: Privacy notice required under UK GDPR. Must cover: what data is collected, why, how long it is kept, pupils’ and parents’ rights.]

Who we are

Baslow St Anne’s C of E Primary School is the data controller for the personal data we hold about pupils, parents, carers, and staff. Our registered address is [PLACEHOLDER: school address].

Our Data Protection Officer

[PLACEHOLDER: Name and contact details of the Data Protection Officer — this may be the local authority’s DPO if the school uses the LA’s service.]

What personal data we collect

We hold a range of personal data about pupils and their families, including:

  • Names, addresses, and contact details
  • Date of birth and gender
  • Attendance records
  • Academic records and assessments
  • Special educational needs information
  • Medical and health information
  • Free School Meals eligibility
  • Photographs (where consent has been given)

[PLACEHOLDER: Add any additional categories of data collected by this school.]

Why we collect and use this data

We use pupil data to:

  • Support pupil learning and pastoral care
  • Monitor and report on pupil progress
  • Provide appropriate pastoral care
  • Protect pupil welfare
  • Assess the quality of our services
  • Administer admissions
  • Fulfil our statutory duties

We process personal data under the following legal bases:

  • Legal obligation — to comply with our statutory duties as a maintained school
  • Legitimate interests — for purposes that support the running of the school
  • Consent — where we have asked for and received your consent (e.g. for photographs)

[PLACEHOLDER: Review and specify the legal basis for each category of processing.]

Sharing your data

We may share personal data with:

  • Derbyshire County Council (our local authority)
  • The Department for Education (DfE)
  • The school’s governing body
  • Health and social care professionals where there is a safeguarding concern
  • External agencies providing services to pupils (e.g. educational psychologists, speech therapists)

We do not sell personal data or share it for commercial purposes.

How long we keep data

We keep personal data for as long as is necessary and in accordance with the Information and Records Management Society (IRMS) toolkit for schools.

[PLACEHOLDER: Add specific retention periods for key categories of data.]

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase data in certain circumstances
  • Restrict processing in certain circumstances
  • Object to processing based on legitimate interests
  • Data portability in certain circumstances
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact the school office.

Complaints

If you have a concern about how we handle your data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to this notice

We review this privacy notice annually. It was last updated January 2026.

← All policies