GDPR (Data Protection)
As a school, we are required and need to gather data on the pupils who attend our school as they progress through the years, both to fulfil the legal obligations we have to the government and our local authority, and also to ensure that we are able to track the progress of pupils in order to identify any specific needs that they might have and then provide them with the necessary level of support they require. We also hold a certain amount of data on parents and carers to ensure that we are able to communicate with them effectively and in a timely manner.
Much of the data we hold is sensitive and we take very seriously our responsibilities under both EU and UK data protection legislation to protect that data and keep it secure. Current legislation requires us to ensure that all individuals on whom we hold data are informed of the data we hold, the legal basis on which we hold it and their individual rights. Much of this information is contained within the ‘Privacy Notices’ that we are also legally required to send out. The full text of the respective privacy notices for pupils and parents and visitors can be found by clicking on the links below:
Data on Students and Parents
Data on Visitors
In addition, we also have policies and procedures in place to ensure that we store and transmit all data in a secure way to protect the rights and privacy of individuals. For more detailed information, please download a copy of the Trust's Data Protection Policy. Alternatively, you can obtain a hard copy on request at the school office.
Under data protection legislation, individuals have the right to request access to the information we hold about them (together with other legal rights), all of which are outlined in our policy, along with information on how to go about requesting access to that data.
As with all other organisations and companies that hold data on individuals, we are required to register with the Information Commissioner’s Office (ICO), the body responsible for ensuring compliance with legislation and investigating any complaints or data breaches.
Should you have any concerns about the way we are collecting or using your personal data, we would ask that you raise them directly with the school office in the first instance.
The appointed DPO for Lavington School is I-West and they can be contacted at the following email address: firstname.lastname@example.org.
Subject Access Requests
If you would like to make a request for personal data we hold about a data subject please complete the form below. The data subject is the individual whose personal data you are requesting. If you are the data subject you will need to complete this section and the data requested section. If you are not the data subject you will also be required to complete the "requester details" section.
Your request will normally be processed within one calendar month upon receipt of a fully completed form and proof of identity.
Please be aware that, unless you indicate otherwise, we always intend to provide our response by email to the email address you have indicated. If you would like to request our response to be provided by post then do detail this in the "data requested" section of the form.