We are committed to safeguarding the privacy of our website visitors; this policy sets out how we will treat your personal information. 

We collect certain information or data about you when you use our website.

This includes:

• questions, queries or feedback you leave, including your IP address and browser version if you send a message via a form on our website
• your IP address from which you access our website, and details of which version of web browser and operating system you used
• the date and time of your visit
• Google Analytics data, which is information on how you use our website, using cookies and page tagging techniques to help us improve our website
• the website address of the website from which you accessed our website
• The approximate location from which you viewed our website

 

This helps us to:

• improve our website by monitoring how you use it
• respond to any feedback you send us, if you’ve asked us to
• Unless you voluntarily submit personal information to us (for example, by sending us an e-mail or completing the contact form), we can’t personally identify you using your data.

 

Where your data is stored

• We store your data on secure servers in the UK.
• Your data can only be viewed by our staff or our suppliers, E4Education.
• By submitting your personal data, you agree to this.

 

Keeping your data secure and disclosing your information

• Transmitting information over the Internet is generally not completely secure, and we can’t guarantee the security of your data.
• Any data you transmit to us is at your own risk.
• We have procedures and security features in place to try and keep your data secure once we receive it.
• We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites. We may pass on your personal information if we have a legal obligation to do so, or if we have to enforce or apply our terms of use and other agreements.

 

Links to other websites

• Our website contains links to and from other websites. This privacy policy only applies to our website.

Following a link to another website

• If you go to another website from this one, including any websites that we link to, you should read the privacy policy on that website to find out what it does with your information.

Following a link to our website from another website

• If you come to our website from another website, we may receive personal information about you from the other website. You should read the privacy policy of the website you came from to find out more about this.

 

Policy amendments
We may update this privacy policy from time-to-time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes. 

Who processes your information?

Stepney Park Primary School is the data controller of the personal information you provide to us. This means the school will determine the purposes for which, and the manner in which, any personal data relating to pupils and their families is to be processed.

There may be times when it is necessary to share your personal data with a third party, this will only be done with your explicit consent, unless there is a legal requirement for the school to share your personal data.

Why do we collect and use your information?

Stepney Park Primary School has the legal right to collect and use personal data relating to pupils and their families, and we may also receive information regarding them from their previous school, your LA (Local Authority) or the DfE (Department for Education)

We collect and use personal data in order to meet our legal requirements and legitimate interests as set out in the GDPR (General Data Protection Regulations) and UK law, including the following:

Article 6 and Article 9 of the GDPR

Education Act 1996

Regulation 5 of The Education (Information About Individual Pupils) (England) Regulations 2013

In accordance with the above, the personal data of pupils and their families is collected and used for the following reasons:

To support pupil learning

To monitor and report on pupil progress

To provide appropriate pastoral care

To assess the quality of our service

To comply with the law regarding data sharing

To safeguard pupils

Which data is collected?

The categories of pupil information that the school collects, holds and shares include the following:

Personal information – e.g. names, pupil numbers and addresses

Characteristics – e.g. ethnicity, language, nationality, country of birth and free school meal eligibility

Attendance information – e.g. number of absences and absence reasons

Assessment information – e.g. national curriculum assessment results

Relevant medical information

Information relating to SEND

Behavioural information – e.g. number of temporary exclusions

Video images recorded during 1-2-1 remote learning sessions that take place during the Covid 19 pandemic

Whilst the majority of the personal data you provide to the school is mandatory, there may be some data that is provided on a voluntary basis. When we collect data from you we will inform you whether there is a mandatory requirement for you to provide this or whether your consent is required. When consent is required, the school will provide you detailed information with regards to the reasons the data is being collected and how the data will be used. 

How long is your data stored for?

Personal data relating to pupils at Stepney Park Primary School and their families is stored in line with the school’s GDPR Policy.

In accordance with the GDPR, the school does not store personal data indefinitely; data is only stored for as long as is necessary to complete the task for which it was originally collected.

In the case online sessions recorded during the Covid pandemic, these are automatically deleted 1 month after recording.

Will my information be shared?

The school is required to share pupils’ data with the Department for Education (DfE)  the Department of Health ( NHS, GP Care, School Nurses etc) and your Local Authority ( LA) on a statutory basis.

The National Pupil Database (NPD) is managed by the DfE and contains information about pupils in schools in England. The school is required by law to provide information about our pupils to the DfE as part of statutory data collections, such as the school census; some of this information is then stored in the NPD. The DfE may share information about our pupils from the NDP with third parties who promote the education or wellbeing of children in England by:

Conducting research or analysis.

Producing statistics.

Providing information, advice or guidance.

The DfE has robust processes in place to ensure the confidentiality of any data shared from the NDP is maintained.

Stepney Park Primary School will not share your personal information with any third parties without your consent, unless the law allows us to do so. The school routinely shares pupils’ information with:

Pupils’ destinations upon leaving the school

Your LA

The NHS

The DfE

There may be occasions where the Stepney Park Primary School needs to share personal information about students and their families with professional third parties. These professional third parties include

Advisers (Health, Complaint Resolution Services Legal Departments, Insurance Services, and Accountants) with whom the school has a contract for services

Contractors with whom the school has a contract to provide services directly to students or families on the school’s behalf. These include catering services, IT providers, student and family support

Formal Government Departments (HMRC, DfE, Police or LA)

Regulatory Departments (OFSTED or the Information Commissioners Office (ICO).

Personal Information may also be shared with third parties who process data on behalf of the school

Web based IT services,

Website developers

Cloud storage providers.

Any information shared with third parties is subject to contractual arrangements and appropriate GDPR compliance of the relevant organisation

Sharing information with third parties is lawful because one of the following reasons applies:

●         There is a legal obligation that Stepney Park Primary School is subject to, for example our legal duty to safeguard pupils

●         The disclosure is necessary to protect the vital interests of others, i.e. to protect pupils from harm

●         The disclosure is necessary for the performance of our education function which is a function in the public interest.

What are your rights?

Parents and pupils have the following rights in relation to the processing of their personal data.

You have the right to:

• Be informed about how the school uses your personal data.

• Request access to the personal data that Stepney Park Primary School holds.

• Request that your personal data is amended if it is inaccurate or incomplete.

• Request that your personal data is erased where there is no compelling reason for its continued processing.

• Request that the processing of your data is restricted.

• Object to your personal data being processed.

Where the processing of your data is based on your consent, you have the right to withdraw this consent at any time.

If you have a concern about the way Stepney Park Primary School is collecting or using your personal data, you can raise a concern the Data Protection Officer by contacting them at IG@Connetix.co.uk, and if you remain dissatisfied you can contact the Information Commissioner’s Office (ICO). The ICO can be contacted on 0303 123 1113, Monday-Friday 9am-5pm.

Where can you find out more information?

The School’s Data Protection Officer can be contacted on 0203 8138704 or IG@Connetix.co.uk

All schools have an obligation to respond to the Government’s advice on the Coronavirus and the development of the NHS ‘Track and Trace’ scheme is a key part of the Government’s plan to manage Coronavirus.

As our schools begin to re-open it has been our priority to ensure that the wellbeing and the health and safety of our children, staff and their families is at the heart of our planning in order to ensure that our schools are safe places to return.

Our responsibility extends beyond the school gates and we have a duty to respond to the Government’s guidance. We hold a lot of data and it may be necessary for us to share this data, when requested to do so, with the Public Health NHS (National Health Service) Track and Trace Workers.

We expect that we will be asked to provide details, including contact details, of any cases of Coronavirus (or a suspected case) that may arise within any of our schools within Transform Trust.  We have an obligation to share this, and any other health data, as part of our Public Duty as set out below.

We will endeavour to contact any and all individuals directly so that we can manage the information  and  sharing  of  their  data.  However,  in  some cases we may be required to provide this to the new Public Health NHS Track and Trace system. Any information we share, we will keep a record of what has been shared.

This  Privacy  Notice  should  be  read  alongside  other  General Data Protection Regulation (GDPR) and Data Protection information on our website.

NHS Test and Trace – the Law

The law on protecting personally identifiable information, known as the GDPR allows Public Health England to use personal information collected by NHS Test and Trace. The section of the GDPR applies is:

Article 6(1)(e): “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”.

 

As information about health is a special category of personal information, a further section of the GDPR applies:

Article 9(2)(i): “processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare”.

 

Public Health England also has special permission from the Secretary of State for Health and Social Care to use personally identifiable information without people’s consent where this is in the public interest. This is known as ‘Section 251’ approval and includes the use of the information collected by NHS Test and Trace to help protect the public from Coronavirus. The part of the law that applies here is Section 251 of the National Health Service Act 2006 and the associated Health Service (Control of Patient Information) Regulations 2002.

 

The Right of Access to Personal Data

Employees and children have the right to request access to their personal data that we hold. Details of how to make a request, along with how to object, rectify, restrict the processing of or transfer personal data is given in our Data Protection Policy.

To  make  a  request  to  access  personal  data  or  to  exercise  any  of  the  above rights, an individual should first contact the School Office.

The law does not oblige the School to comply with all requests. If the School does not intend to comply with the request, then the individual will be notified in writing of the reasons why.

Concerns

If you are concerned about how we are use personal data, please contact the School Office. 

To contact the School Data Protection Officer:  IG@Connetix.co.uk

An individual may also contact the Information Commissioner’s Office:

 https://ico.org.uk/concerns.

Who processes your information? 

Stepney Park Primary School is the data controller of the personal information you provide to us. This means the school  will determine the purposes for which, and the manner in which, any personal data relating to Visitors is to be processed. 

There may be times when it is necessary to share your personal data with a third party, this will only be done with your explicit consent, unless there is a legal requirement for the school to share your personal data.

Why do we collect and use your information? 

Stepney Park Primary School collects your personal data is to comply with legal requirements in relation to Health and Safety, Fire Regulations and Safeguarding.

Which data is collected? 

The categories of Visitor information that the school collects, holds and shares include the following: 

• Name
• Employer details
• Times of visits to school premises
• Vehicle details

How long is your data stored for? 

Personal data relating to Visitors at Stepney Park Primary School is stored in line with the school’s GDPR  Policy. 

In accordance with the GDPR, the school does not store personal data indefinitely; data is only stored for as long as is necessary to complete the task for which it was originally collected. 

Will my information be shared? 

Stepney Park Primary School will not share information about you with any third party without your consent unless the law and our policies allow us to do so.

Where it is legally required, or necessary (and it complies with Data Protection law) we may share personal information about you with:

• Your employer
• Suppliers and service providers – to enable them to provide the service we have contracted them for
• Police forces, courts

What are your rights? 

Visitors have the following rights in relation to the processing of their personal data. 

You have the right to: 

• Be informed about how the school  uses your personal data. 
• Request access to the personal data that Seven Mills Primary School holds. 
• Request that your personal data is amended if it is inaccurate or incomplete. 
• Request that your personal data is erased where there is no compelling reason for its continued processing. 
• Request that the processing of your data is restricted. 
• Object to your personal data being processed. 

 

Where the processing of your data is based on your consent, you have the right to withdraw this consent at any time. 

If you have a concern about the way Stepney Park Primary School is collecting or using your personal data, you can raise a concern with the Information Commissioner’s Office (ICO). The ICO can be contacted on 0303 123 1113, Monday-Friday 9am-5pm. 

Where can you find out more information? 

The School’s Data Protection Officer can be contacted on 0203 8138704 or IG@Connetix.co.uk.

Who processes your information? 

Stepney Park Primary School process personal data relating to those we employ to work at, or otherwise engage to work at, our school. This is for employment purposes to assist in the running of the school and / or to enable individuals to be paid. 

How we use your information 

This personal data includes identifiers such as names and national insurance numbers, employment contracts and remuneration details, qualifications and absence information. It will also include sensitive personal data such as ethnic group, medical information and trade union membership (if you choose to supply this information to us).

During the recruitment process we may receive information about you from a previous employer or an educational establishment which you have previously attended. You will know about this because you will have supplied us with the relevant contact details.

Collecting and using your information in this way is lawful because:

• The processing is necessary for the performance of your employment contract 
• The processing is necessary for the performance of a legal obligation to which Stepney Park Primary School is subject, for example our legal duty to safeguard pupils
• The processing is necessary to protect the vital interests of others, i.e. to protect pupils from harm
• The processing is necessary for the performance of our education function which is a function in the public interest.

When we collect personal information on our forms, we will make it clear whether there is a legal requirement for you to provide it, and whether there is a legal requirement on the school to collect it. If there is no legal requirement then we will explain why we need it and what the consequences are if it is not provided.

How we share your information with third parties

Stepney Park Primary School will not share information about you with third parties without your consent unless the law allows us to. 

We are required, by law, to pass on some of the personal data which we collect to:

• our local authority
• the Department for Education (DfE)

The collection of this information will benefit both national and local users by:

• improving the management of workforce data across the sector
• enabling development of a comprehensive picture of the workforce and how it is deployed
• informing the development of recruitment and retention policies
• allowing better financial modelling and planning
• enabling ethnicity and disability monitoring; and
• supporting the work of the School Teachers’ Review Body

We disclose personal data about you to the Disclosure and Barring Service for the purposes of carrying out checks on your suitability for work with children.

We disclose details about you including national insurance number and absence information to our payroll provider to enable you to be paid.

We disclose details about you to our HR provider for the purposes of HR management.

We share your identity and pay information with HMRC in conjunction with your legal obligation to pay income tax and make national insurance contributions.

Where you have decided to become part of a salary sacrifice scheme such as that for child care vouchers, we share your details with the provider to the extent necessary for them to provide the vouchers to you.

We share your details with your pension provider in order to make sure that you pay the correct amount and maintain your entitlement to a pension upon your retirement. For teachers the scheme is the TPS, for support staff the scheme is LGPS 

There may be occasions where Stepney Park Primary School needs to share personal information about staff with professional third parties. These professional third parties include 

Advisers (Health, Complaint Resolution Services, Legal Departments, Insurance Services, and Accountants) with whom the school has a contract for services 

 Contractors with whom the school has a contract to provide services directly on the school’s behalf. These include Catering Services and IT providers, 

Formal Government Departments (HMRC, DfE, Police or LA)

Regulatory Departments (OFSTED or the Information Commissioners Office (ICO). 

Personal Information may also be shared with third parties who process data on behalf of the school

• Web based IT services, 
• Website developers 
• Cloud storage providers. 

Any information shared with third parties is subject to contractual arrangements and appropriate GDPR compliance of the relevant organisation

Our disclosures to third parties are lawful because one of the following reasons applies:

• The disclosure is necessary for the performance of your employment contract 
• The disclosure is necessary for the performance of a legal obligation to which the school is subject, for example our legal duty to safeguard pupils
• The disclosure is necessary to protect the vital interests of others, i.e. to protect pupils from harm
• The disclosure is necessary for the performance of our education function which is a function in the public interest.

How long we keep your personal information

Stepney Park Primary School only keep your information for as long as we need it or for as long as we are required by law to keep it. Full details are given in our records retention policy.

Your rights

You have the right to:

• Ask for access to your personal information
• Ask for rectification of the information we hold about you
• Ask for the erasure of information about you
• Ask for our processing of your personal information to be restricted
• Data portability
• Object to us processing your information.

If you want to use your rights, for example, by requesting a copy of the information which we hold about you, please contact the school office in the first instance. 

If at any time you are not happy with how we are processing your personal information then you may raise the issue with the Data Protection Officer who can be contacted at 0203 8138704 or IG@Connetix.co.uk and if you are not happy with the outcome you may raise a complaint with the Information Commissioner’s Office:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.