Data Protection

Yardley Primary School is committed to protecting the privacy and security of personal information. We are the ‘data controller’ for the purposes of data protection law. We collect and use personal information, in accordance with the General Data Protection Regulation (GDPR), section 537A of the Education Act 1996 and section 83 of the Children Act 1989.

The personal data we hold is used to support your child's learning, monitor and report on pupil progress, provide appropriate pastoral care, safeguard pupils and families, protect pupil welfare, administer admissions waiting lists, carry out research and comply with the law regarding data sharing.

How we process, use and store personal data

Data Protection Policy

This policy is intended to ensure the safety and security of any material of a personal or sensitive nature we collect and store.

Read our data protection policy

Data Breach Policy

This policy ensures that we deal with any data breaches that may occur quickly and effectively.

Read our data breach policy

Data Retention Policy

This policy ensures that we maintain our records and record keeping systems and store data for the appropriate amount of time.

Read our data retention policy

Privacy Notice

Under data protection law, individuals have a right to be informed about how the school uses any personal data that we hold about them. We comply with this right by providing a privacy notice to individuals where we are processing their personal data.

Read our privacy notice

Freedom of information

Freedom Of Information Policy

This policy is intended to ensure we provide appropriate information to the public and respond to requests where necessary.

Read our freedom of information policy

ICO Model Publication Scheme

All public authorities, including schools, are required under the Freedom of Information Act to adopt a publication scheme that has been approved by the Information Commissioner. There is currently one approved model publication scheme, which has been produced by the Information Commissioner’s Office (ICO). Schools must adopt the ICO’s model scheme and make it publicly available.

Read the ICO's Model Publication Scheme

Our Publication Scheme

Alongside the model publication scheme, schools should publish their own publication scheme.

Read our publication scheme

Subject access requests

Subject Access Request Policy

Individuals have a general right to find out whether the School hold or process personal data about them, to access that data, and to be given supplementary information. This is known as the right of access, or the right to make a data subject access request (SAR). The purpose of the right is to enable the individual to be aware of, and verify, the lawfulness of the processing of personal data that the School are undertaking. This policy outlines how to make a subject access request and how school handles them.

Read our subject access request policy

Downloads