This Privacy Notice explains how [School Name] collects, uses, stores and shares personal information about pupils, parents/carers, staff, governors, volunteers and visitors. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant Department for Education (DfE) requirements.
Our school processes personal data relating to parents, students, staff, governors, visitors and others, and therefore is a data controller.
The school has paid its data protection fee to the ICO, as legally required.
Data Protection Officer (DPO): Luke Boardman, Trafford Council Data Protection Team
DPO Email: data.protection@trafford.gov.uk
We may collect and process the following categories of information:
Students
Name, date of birth, gender
Contact details
Assessment and attainment data
Attendance and behaviour information
Safeguarding information
Medical and dietary information
Special educational needs (SEN) data
Photographs and school-related media
CCTV footage (if applicable)
Parents/Carers
Contact details
Relationship to pupil
Eligibility for funding or support (e.g., Free School Meals)
Staff, Governors & Volunteers
Employment details
Qualifications and training
Payroll and financial information
DBS checks
Photographs and CCTV (if applicable)
Website Visitors
IP address
Browser type
Cookie preferences
Interaction with embedded services (e.g., Google Maps, YouTube)
We process personal data to:
Support teaching, learning and pupil progress
Provide pastoral care and safeguarding
Meet statutory duties (e.g., census returns)
Manage school operations (e.g., staffing, finance, communication)
Keep pupils safe
Comply with legal obligations
Communicate with parents/carers
Maintain school security (e.g., CCTV)
We rely on the following lawful bases under UK GDPR:
Public task – processing necessary to perform our official functions
Legal obligation – required by law
Vital interests – to protect life
Contract – for staff and suppliers
Consent – for optional activities such as photographs, website media, or marketing
Where consent is used, you may withdraw it at any time.
Personal data is stored securely on school systems, cloud-based platforms approved by the DfE, and locked physical storage. We retain data only for as long as necessary, following the Information and Records Management Society (IRMS) Retention Schedule set by Trafford Council and the Department for Education.
We may share data with:
The Department for Education (DfE)
Local Authority
NHS and school nursing teams
Examination boards
Other schools (e.g., during transition)
Approved software providers
External safeguarding or support agencies
Police or social services (where legally required)
We do not share personal data for marketing purposes.
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion (in certain circumstances)
Restrict or object to processing
Request data portability
Withdraw consent (where used)
To exercise your rights, contact the school office or DPO.
If you have questions about this Privacy Notice or how we use your data, contact the school office or Data Protection Officer above.
If you are not satisfied, you may contact: Information Commissioner’s Office (ICO) www.ico.org.uk Telephone: 0303 123 1113
We may update this Privacy Notice from time to time. The latest version will always be available on our website.
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.
You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
This cookie is used to determine whether the user allows cookies or not.
This cookie references the level of consent you have given for cookies, and is used when you update your consent settings.
If set, this cookie ensures the website is displayed in high visibility mode.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.
They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Most Google users will have a preferences cookie called 'NID' in their browsers. A browser sends this cookie with requests to Google's sites. The NID cookie contains a unique ID Google uses to remember your preferences and other information.
This cookie is set by the YouTube video service and aims to limit repeat advertising and deliver more relevant advertising to you.