GDPR Notice
The school collects, holds and uses a great deal of information about individuals, particularly pupils and adults connected with the school. Under the Regulation (EU) 2016/679 (General Data Protection Regulation), data about living individuals is known as personal data. The regulation puts in place numerous safeguards for the use of data about individuals.
Under the GDPR, the data protection principles set out the main responsibilities for organisations: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/principles/
Sibsey Free Primary School has a statutory duty to comply with the requirements of the GDPR as it collects data about students and adults associated with the school for school business. The school is also required to produce a privacy notice explaining how information is collected and processed. A copy of the school’s privacy notice is available further down this page. Our data protection policy is available on the website under the policies tab.
Information about your rights under GDPR can be found on the Information Commissioner’s website.
All of the information we hold on individuals follows the six key principles:
Fair, lawful and transparent
Collected for specified, explicit and legitimate purposes
Adequate, relevant and limited to what is necessary
Accurate, and where necessary, kept up to date
Kept in a form which permits identification for no longer than is necessary
Processed in a manner that ensures appropriate security
Data Protection Officers (DPO) for the school are Michelle Malkinson and Claire Felipes (administrators).
Privacy Notice for pupils
Please click the link below for access to this
Privacy Notice for parents/carers
Please click the link below for access to this
Please click the link below for access to this