General Data Protection Regulation (GDPR)

On the 25th May 2018, the General Data Protection Regulation (GDPR) will come into force and the current Data Protection Act (DPA) will be updated by a new Act giving effect to its provisions. Before that time the DPA will continue to apply.

Like all schools, All Saints CE Primary School collects and uses personal information about staff, students, parents or carers and other individuals who come into contact with the school. This information is gathered in order to enable it to provide education and other associated functions. In addition, there may be a legal requirement to collect and use information to ensure that the school complies with its statutory obligations.

All Saints CE Primary School is a data controller and must therefore comply with the Data Protection Principles in the processing of personal data, including the way in which the data is obtained, stored, used, disclosed and destroyed.

More information can be found on our website including the new Privacy Notice regarding Pupil data processed and held by the school.

Details of the school's purpose for holding and processing data can be viewed on the Data Protection Register: https://ico.org.uk/esdwebpages/search

The Schools registration number is Z3045988

The Privacy Notice for pupils can be found here

The privacy notice for recruitment and volunteers can be found here

Data Protection Act 1998

How we use pupil information

We collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE).

We use this personal data to:

support our pupils’ learning
monitor and report on their progress
provide appropriate pastoral care; and
assess the quality of our services

This information will include their contact details, national curriculum assessment results, attendance information, any exclusion information, where they go after they leave us and personal characteristics such as their ethnic group, any special educational needs they may have as well as relevant medical information.

For pupils enrolling for post 14 qualifications, the Learning Records Service will give us the unique learner number (ULN) and may also give us details about your learning or qualifications. We will not give information about our pupils to anyone without your consent unless the law and our policies allow us to do so.

If you want to receive a copy of the information about your son/daughter that we hold, please contact the School Business Manager at sbm@allsaintshorsham.school

We are required, by law, to pass certain information about our pupils to our local authority (LA) and the Department for Education (DfE). The DfE may also share pupil level personal data that we supply to them, with third parties. This will only take place where legislation allows it to do so and it is in compliance with the Data Protection Act 1998. Decisions on whether DfE releases this personal data to third parties are subject to a robust approval process and are based on a detailed assessment of who is requesting the data, the purpose for which it is required, the level and sensitivity of data requested and the arrangements in place to store and handle the data.

To be granted access to pupil level data, requestors must comply with strict terms and conditions covering the confidentiality and handling of data, security arrangements and retention and use of the data.

For more information on how this sharing process works, please visit: https://www.gov.uk/guidance/national-pupil-database-apply-for-a-data-extract

For information on which third party organisations (and for which project) pupil level data has been provided to, please visit: DfE external data shares - GOV.UK (www.gov.uk)

If you need more information about how our local authority and/or DfE collect and use your information, please visit:

our local authority at http://www.westsussex.gov.uk or
the DfE website at How DfE share personal data - GOV.UK (www.gov.uk)