GDPR Data Protection Policy

Our school is committed to protecting the rights and freedom of all individuals in relation to the processing of their personal data.
Scope of this policy
The school needs to comply with the Data Protection Act 2018 and EU General Data Protection Regulations. This policy has been developed to ensure all staff, contractors and partners understand their obligations when processing personal and special category data.
This policy and the legislation apply to all personal data, both that held in paper files and electronically. So long as the processing of the data is carried out for school purposes, it applies regardless of where data is held.
‘Processing’ data is widely defined and includes obtaining, recording, keeping, or using it in any way; sharing or disclosing it; erasing and destroying it.