This privacy statement was last updated on 11/07/2020 and applies to citizens of the United Kingdom.
In this privacy statement, we explain what we do with the data we obtain about you via our website https://www.abbeyfield.wilts.sch.uk. We also have a more general Privacy Notice for Students and Parents, which describes the processing of data in the day to day running of our school. We recommend that you read the privacy statement and policy carefully.
In our processing of data we comply with the Data Protection Act 2018 and General Data Protection Regulation (GDPR) privacy legislation. This means, among other things, that:
- we clearly state the purposes for which we process personal data;
- we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
- we first request your explicit consent to process your personal data in cases requiring your consent;
- we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
- we respect your right to access your personal data or have it corrected or deleted, at your request.
If you have any questions, or want to know exactly what data we keep about you, please contact us using the details at the bottom of this page.
1. Purpose, data and retention period
1.1 We use your data for the following purpose:
Contact via phone, mail, email and/or webforms.
For this purpose we use the following data:
- Your name
- Email address
- Your message
Your message is likely to also include other personal data, e.g. the name of your child, sickness or medical information, updated personal details, etc.
The basis on which we may process this data is:
Performance of the actions arising from the contact, e.g. recording a sickness, answering an query, updating our records, investigating an incident.
We retain this data upon completion of the action for a period of 24 months.
2. Sharing with other parties
Depending on the nature of the contact, we may need to share or disclose the data provided to the parties below:
- Wiltshire County Council (our Local Authority), who oversee our educational provision;
- The Department for Education, who track pupil attainment in the National Pupil Database;
- Parties needed to fulfil an action requested by you, e.g. sending a reference to a higher education or apprenticeship provider;
- Agencies needed to protect the property, rights or safety of our pupils, staff or others.
The above list is not exhaustive, but we will never share data about you or our pupils with third parties without consent unless we are required to do so by law.
We keep track of anonymised statistics to gain insight into how often and in what way visitors use our website. This is used to block the IP addresses of malicious visitors attempting to compromise the integrity of our website.
We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
6. Third party websites
This privacy statement does not apply to third party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.
7. Amendments to this privacy statement
We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.
8. Accessing and modifying your data
If you have any questions or want to know what personal data we hold about you, please contact us using the information at the bottom of this page. As well as your right to request your personal data, you also have the right to:
- know why your personal data is needed, what will happen to it, and how long it will be retained for;
- supplement, correct, have deleted or block your personal data whenever you wish;
- revoke the consent you have given for us to process your personal data and to have your personal data deleted;
- request all your personal data from us and transfer it in its entirety to another controller.
- object to the processing of your personal data
We comply with requests unless there are justified grounds for not doing so, our legal duties as an education provider meaning that we need to hold and process enroled student details for example.
Please make sure to clearly state who you are, so that we can be certain that we do not modify or delete the data of the wrong person.
9. Submitting a complaint
If you are not satisfied with the way in which we handle a complaint about the processing of your personal data, you have the right to submit a complaint to the Information Commissioner’s Office:
10. Contact details
The name of our Data Protection Officer is i-West, who can be contacted via email on firstname.lastname@example.org