Kimpton Primary School, as a data controller, is committed to protecting the privacy and security of personal information. We collect a lot of data and information about our pupils and also collect data and information about the parents/carers of our pupils so that we can operate effectively as a school. This privacy notice explains how and why we collect pupils’ and parent/carer data, what we do with it, who we share it with and what rights parents have, in accordance with the UK General Data Protection Regulation (UK GDPR). It is important that you read this privacy notice together with our detailed parent/carer privacy notice which contains more detailed information about our data processing and can be accessed here: https://www.kimpton.herts.sch.uk/parents/privacy-notice

We have a legal obligation to submit pupil data to the Department for Education (DfE) and the Local Authority as well as other regulatory bodies. We also use pupil data to support our function of running a school and for safeguarding purposes. We process information about parents/carers as part of our legal obligation to provide an education to our pupils, to support our function of running a school and for safeguarding purposes. Where we process data not covered by these reasons, we will ask for your consent. This consent can be withdrawn at any time.

For pupils, this is a wide range of information from name, date of birth, ethnicity etc. to attendance, assessment, medical and safeguarding information. For parents/carers, this will include personal information such as name, name, address, telephone number and email address. It could also include information relating to your identity, marital status, employment status, religion, ethnicity, language, medical conditions and free school meal / pupil premium eligibility / entitlement to certain benefits, information about court orders in place affecting parenting arrangements for pupils. For more information on the types of data please see our detailed privacy notice at https://www.kimpton.herts.sch.uk/parents/privacy-notice.

We hold pupil data securely for specific periods, as recommended by both national and local guidelines. We will only retain parent/carer personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, insurance or reporting requirements, as recommended by both national and local guidelines. 2 Certain types of data may be held for longer, e.g. safeguarding. For more information on the recommended timescales please see our Records Retention Schedule at https://www.kimpton.herts.sch.uk/key-information/policies

We may share pupil information with the DfE, the Local Authority, and other bodies and organisations. We do not share information about pupils with anyone without consent unless the law or our policies allow us to do so. When we share personal data, we will provide the minimum amount necessary to fulfil the purpose for which it is required. We routinely share parent/carer information with schools that pupils attend after leaving us. We may share pupil information with the DfE, the Local Authority, and other bodies and organisations. We do not share information with anyone without consent unless the law or our policies allow us to do so. When we share personal data, we will provide the minimum amount necessary to fulfil the purpose for which it is required. In certain circumstances, we may transfer, store and process your personal data outside the UK or European Economic Area. For more details, please see the longer version of the privacy notice at https://www.kimpton.herts.sch.uk/parents/privacy-notice

Parents/carers have the right to request access to pupil information or information that we hold about them via a Subject Access Request (SAR). To make a request for your or your child’s personal data, contact the Data Protection Officer at dpo@kimpton.herts.sch.uk. The legal timescale for the school to respond to a Subject Access Request is one calendar month. As the school has limited staff resources outside of term time, we encourage you to submit Subject Access Requests during term time and to avoid sending a request during periods when the school is closed or is about to close for the holidays, if possible. This will assist us in responding to your request as promptly and fully as possible. For further information about how we handle Subject Access Requests, please see our policy at https://www.kimpton.herts.sch.uk/parents/privacy-notice

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/ If you have a concern about the way we are collecting or using your personal data, please raise with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/

The DPO Officer, School Consulting Ltd: dpo@kimpton.herts.sch.uk