Data Protection and GDPR
Our Principles
At Heage Primary School we take privacy very seriously and work to the highest standards to keep your data safe. This includes all forms of data; paper and digital. Our staff teams have regular Data Protection and Cyber Security Training.
We comply with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
We are committed to the protection of the rights and freedoms of indviduals whose information we collect and process in accordance with the GDPR. Ongoing compliance is embedded in all processes and policies throughout our school.
For Reference
Heage Primary School is registered with the Information Commissioners Office (ICO).
Registration reference: ZA651426
For further information please see the ICO website, or our school office, where our current certificate is on display.
Responsibilities
Under UK GDPR, Heage Primary School is the Data Controller, a Data Processor, or both. Our role differs depending on how we use the data collection and handling process. As a Data Controller we define how and why personal data is collected, stored and used. We also utilise data processors - third parties, that process the data we control on your behalf.
Heage Primary School achieves compliance by ensuring personal data is processed lawfully, transparently, and for a specific purpose. Once the purpose is fulfilled and the data is no longer required, it is then managed in line with our Records Retention Guidelines.
Further Information
Please see the Policies page of our school website, for our full suite of GDPR and Data Protection Policies.