Woodbury C of E Primary School

GDPR - Data Protection

On 25th May 2018, the UK’s Data Protection Act 1998 was replaced by a new law called the GDPR (the EU General Data Protection Regulation 2016).

This law governs how we collect, use and share people’s information and provides greater rights to individuals and control over how their information is handled by organisations, including schools.

We have a number of documents below which explain how we handle pupil information, what rights parents have and how to exercise them, our policies to ensure we comply with GDPR and our current records retention schedule.

If you would like to make a Subject Access Request you should contact the Data Protection Officer in writing or by email.

If you would like to know more about the GDPR, please visit the UK’s data protection regulator, the Information Commissioner’s Office at www.ico.gov.uk

Should you have any queries regarding the GDPR and our school, please email the Data Protection Officer, Rachael Saim at woodburyadmin@cedartreefederation.org

Data Protection Policy 21-23

Privacy Notice for Pupils

WPS Record Retention Schedule