The Iona School and Iona Day Nursery

Privacy Notice

Why do we collect, share and hold pupil information

Why do we collect and use pupil information?  We collect and use pupil information under the Education Act 1996. The EU general data protection regulation 2016/679 (GDPR) takes effect in May 25 2018

In particular article 6 and 9 of the GDPR

Article 6 GDPR;

Processing is necessary for compliance with a legal duty to which the controller is subjected

Article 9 GDPR ;

for substantial public interest on a legal basis

https://www.gov.uk/education/data-collection-and-censuses-for-School/Nurserys

We use the pupil data:

  • to support pupil learning
  • to monitor and report on pupil progress
  • to provide appropriate pastoral care
  • to assess the quality of our services
  • to comply with the law regarding data sharing

The categories of pupil information that we collect, hold and share include:

  • Personal information (such as name and address)
  • Any relevant medical information
  • Special educational needs
  • Exclusions and behavioural information
  • Assessment information
  • Characteristics (such as ethnicity, language, nationality, country of birth)
  •  Attendance information (such as sessions attended, number of absences and absence reasons)

Collecting pupil information

Whilst the majority of pupil information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain pupil information to us or if you have a choice in this.

Storing pupil data

We hold pupil data for until they reach 25years of age.

Who do we share pupil information with?

We routinely share pupil information with:

  • School/Nurserys that the pupil’s attend after leaving us
  • our local authority
  • the Department for Education (DfE)

Why we share pupil information

We do not share information about our pupils with anyone without consent unless the law and our policies allow us to do so. We are required to share safeguarding information with the LA and a School/Nursery the child moves on to.

We are required to share information about our pupils with the (DfE) under regulation 5 of The Education (Information About Individual Pupils) (England) Regulations 2013. 

The School/Nursery must also comply with an additional condition where it processes special categories of personal information. These special categories are as follows: personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health information, and information about sex life or orientation.

Substantial public interest

The processing is necessary for reasons of substantial public interest.

Vital interests:

To protect the vital interests of any person where that person cannot give consent, for example, if they are seriously hurt and are unconscious.

Legal claims:

The processing is necessary for the establishment, exercise or defence of legal claims. This allows us to share information with our legal advisors and insurers.

Medical purposes

This includes medical treatment and the management of healthcare services.

We may ask for your consent to use your information in certain ways. If we ask for your consent to use your personal information you can take back this consent at any time. Any use of your information before you withdraw your consent remains valid.

Requesting access to your personal data

Under data protection legislation, parents have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s educational record, contact the School/Nursery manager

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means
  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
  • claim compensation for damages caused by a breach of the Data Protection regulations

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with the School/Nursery manager in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/

Our legal grounds for using your information

This section contains information about the legal basis that we are relying on when handling your information.

Legitimate interests

This means that the processing is necessary for legitimate interests except where the processing is unfair to you. The School/Nursery relies on legitimate interests for most of the ways in which it uses your information.

Specifically, the School/Nursery has a legitimate interest in:

  • Providing educational services to your child;
  • Safeguarding and promoting the welfare of your child (and other children);
  • Promoting the objects and interests of the School/Nursery. This includes fundraising. It also includes making sure that we are able to enforce our rights against you, for example, so that we can contact you if unpaid School/Nursery fees are due;
  • Facilitating the efficient operation of the School/Nursery; and
  • Ensuring that all relevant legal obligations of the School/Nursery are complied with.

In addition your personal information may be processed for the legitimate interests of others. For example another School/Nursery will have a legitimate interest in knowing if you have not paid School/Nursery fees that are due to us.

If you object to us using your information where we are relying on our legitimate interests as explained above please speak to the School/Nursery manager

Necessary for a contract

We will need to use your information in order to perform our obligations under our contract with you. For example, we need your name and contact details so that we can update you on your child’s progress and so that we can contact you if there is a concern.

Legal obligation

Where the School/Nursery needs to use your information in order to comply with a legal obligation, for example to report a concern to Children’s Services. We may also have to disclose your information to third parties such as the courts, the local authority or the police where legally obliged to do so.

Vital interests

For example, to prevent someone from being seriously harmed or killed.

 Public interest

The School/Nursery considers that it is acting in the public interest when providing education.