Skip to content ↓

GDPR

General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) came into effect on 25 May 2018. It sets out how organisations, including schools, must collect, use and protect personal data.

Under GDPR, schools are required to:

  • Identify the lawful basis for storing personal data

  • Audit the information we hold

  • Adopt a data protection by design and by default approach

GDPR also introduced new rights for individuals, including the right to rectification and the right to erasure of personal data.

To meet these requirements, it is essential that the school holds accurate and up-to-date information about our pupils and their contact details. This is particularly important in the event of an emergency or when important school information needs to be shared.

We ask parents and carers to support us by informing the school office of any changes to personal details or by updating information via the Parent App.

For further information about GDPR, please visit the Information Commissioner’s Office (ICO) website.

What Information Does the School Hold About My Child?

The school may hold the following information about pupils:

  • Name and address

  • Contact telephone numbers

  • Photographs

  • Assessment and attainment data

  • Medical information

  • Ethnicity

  • Religion

  • Nationality

  • Attendance records

Why Does the School Need to Hold This Information?

  • Teachers use assessment data to support teaching and learning

  • Personal data is stored securely using ARBOR

  • Required data is shared with the Department for Education during census and assessment periods only

  • If a child moves school, relevant educational data is transferred securely to the new school

  • Medical information is not transferred automatically and must be provided by parents/carers

What Happens to My Child’s Data After They Leave the School?

In line with the school’s data retention schedule, pupil data is retained securely on ARBOR for the appropriate period. Where necessary, relevant information is transferred securely to the child’s next school.

What If I Want Certain Information Removed?

Parents and carers have the right to refuse or withdraw consent without detriment.

  • Any withdrawal of consent will be actioned within 48 hours

  • Requests should be submitted by email to:
    finance@hwjs.hants.sch.uk

Who Can I Contact for Further Information?

The school’s Data Protection Officer (DPO) is Mrs Caroline Ryan.

Any queries relating to data protection or personal information should be directed to the school office in the first instance.

👉

Privacy Notices and Policies

  • Pupil Privacy Notice (PDF) 

  • Data Protection Policy

  1. PUPIL - Privacy Notice pdf
  2. Data Protection Policy Sept 2024-27 pdf

Cookie Policy