GDPR

Information that we hold in relation to individuals is known as their “personal data”.

Data that we collect may include names, addresses, pupil number, dates of birth, passport information, telephone numbers, medical details, photographs, CCTV, and other personal details.

The General Data Protection Regulation (GDPR) applies to personal data and how that data is collected and processed.
We follow the six data protection principles that require that personal data shall be:

• Processed fairly, lawfully and transparently.
• Obtained only for one or more specified and lawful purposes and shall not be further processed in any manner incompatible with that purpose(s).
• Adequate, relevant and not excessive in relation to the purpose(s) for which it is processed.
• Accurate and, where necessary, kept up to date.
• Not kept for longer than is necessary for that purpose(s).
• Kept secure, i.e. protected by an appropriate degree of security.