The Children and Young People’s Services (CYPS), within the Local Authority, has developed a service wide Privacy Notice which includes how personal information is processed by CYPS. This includes data from education settings.
The CYPS Privacy Notice contains details of what information is collected, how it will be used and with whom it will be shared. The aim is to make the Privacy Notice issued to children, young people and parent/carers general and constant. A copy of the Privacy Notice is available on the Local Authority website: https://www.cambridgeshire.gov.uk/data-protection-and-foi/information-and-data-sharing/sharing-information-on-children-and-young-people/ or is available here: CYPS_Privacy_Notice-v6.pdf
Privacy Notice for students and Parents/Carers
It is about how we use information about you and what we do with it. We call this information about you ‘personal data’ or ‘personal information.’
Who we are
You already know that your school is called Bassingbourn Village College and that it is part of the Academy Trust called Anglian Learning but we have to tell you that the Academy Trust is the organisation which is in charge of your personal information. This means the Academy Trust is called the Data Controller.
The postal address of the Academy Trust is:
Bottisham Village College
If you have queries regarding how we use your personal information you can contact our Data Protection Officer. This role is being undertaken by The ICT Service who can be contacted on 0300 300 0000 or firstname.lastname@example.org. Alternatively you can leave a letter at reception or send one by post to us which we will then forward.
How we use student information
Anglian Learning collect and hold personal information relating to our students and may also receive information about them from their previous school, local authority and / or the Department for Education (DfE). We use this personal data to:
- support your learning
- monitor and report on their progress
- provide appropriate care for you; and
- assess the quality of our services
- to comply with the law about sharing personal data
This information will include your contact details, national curriculum assessment results, attendance information, any exclusion information, where you go after you leave us and personal characteristics such as your ethnic group, any special educational needs you may have as well as relevant medical information. We will also use photographs or you. More details about this are in our photograph policy which is available on the Anglian Learning website. http://anglianlearning.org/governance/
For students enrolling for post 14 qualifications, the Learning Records Service will give us the unique learner number (ULN) and may also give us details about your learning or qualifications.
The use of your information for these purposes is lawful for the following reasons:
- The Academy Trust is under a legal obligation to collect the information or the information is necessary for us to meet legal requirements imposed upon us such as our duty to safeguard students.
- it is necessary for us to hold and use your information for the purposes of our functions in providing schooling and so we can look after our students. This is a function which is in the public interest because everybody needs to have an education. This means we have a real and proper reasons to use your information.
- We will not usually need your consent to use your information. However, if at any time it appears to us that we would like to use your personal data in a way which means that we would need your consent then we will explain to you what we want to do and ask you for consent. This is most likely to be we are involved in activities which are not really part of our job as an Academy Trust / School but we are involved because we think it would benefit our pupils. If you give your consent, you may change your mind at any time. If we think that you will not understand what we are asking then we will ask your parent or carer instead. Usually, we will involve your parents even if you can make your own decision.
When we collect personal information on our forms, we will make it clear whether there is a legal requirement for you / your parents to provide it, whether there is a legal requirement on the school / academy trust to collect it. If there is no legal requirement then we will explain why we need it and what the consequences are if it is not provided.
When we give your information to others
Once our students reach the age of 13, the law requires us to pass on certain information to to providers of Youth Support Services in your area who have responsibilities in relation to the education or training of 13-19 year olds. We may also share certain personal data relating to children aged 16 and over with post-16 education and training providers in order to secure appropriate services for them. A parent / guardian can request that only their child’s name, address and date of birth be passed to the support service by informing Mrs S Smith by email email@example.com. This right is transferred to the child once he / she reaches the age 16. For more information about services for young people, please go to the National Careers website https://nationalcareersservice.direct.gov.uk.
We will not give information about our students to anyone without your consent unless the law and our policies allow us to do so. If you want to receive a copy of the information about you that we hold, please contact:
Mrs S Smith in writing by post or email firstname.lastname@example.org
We are required, by law (under regulation 5 of the Education (Information about Individual Pupils) England Regulations 2013, to pass some information about our students to the Department for Education (DfE). This is the part of the Government which is responsible for schools. This information may, in turn, then be made available for use by the Local Authority.
The DfE may also share information about students that we give to them, with other people or organisations. This will only take place where the law, including the law about data protection allows it.
The National Pupil Database (NPD)
The NPD is owned and managed by the Department for Education and contains information about students in schools in England. It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the Department. It is held in electronic format for statistical purposes. This information is securely collected from a range of sources including schools, local authorities and awarding bodies.
We are required by law, to provide information about our students to the DfE as part of statutory data collections such as the school census and early years’ census. Some of this information is then stored in the NPD. The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013.
To find out more about the student information we share with the department, for the purpose of data collections, go to https://www.gov.uk/education/data-collection-and-censuses-for-schools.
To find out more about the NPD, go to National pupil database: user guide and supporting information – GOV.UK.
The department may share information about our students from the NPD with third parties who promote the education or well-being of children in England by:
- conducting research or analysis
- producing statistics
- providing information, advice or guidance
The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data. Decisions on whether DfE releases data to third parties are subject to a strict approval process and based on a detailed assessment of:
- who is requesting the data
- the purpose for which it is required
- the level and sensitivity of data requested: and
- the arrangements in place to store and handle the data
To be granted access to student information, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.
For more information about the department’s data sharing process, please visit:
For information about which organisations the department has provided student information, (and for which project), please visit the following website: https://www.gov.uk/government/publications/national-pupil-database-requests-received
To contact DfE: https://www.gov.uk/contact-dfe
We will also normally give information about you to your parents or your main carer. Where appropriate, we will listen to your views first. We will also take family circumstances into account, in particular where a Court has decided what information a parent is allowed to have.
The information disclosed to these people / services will include sensitive personal information about you. Usually this means information about your health and any special educational needs or disabilities which you have. We do this because these people need the information so that they can support you.
Our disclosure of your personal data is lawful for the following reasons:
- The Academy Trust is under a legal obligation to disclose the information or disclosing the information is necessary for us to meet legal requirements imposed upon us such as our duty to look after our students and protect them from harm.
- It is necessary for us to disclose your information for the purposes of our functions in providing schooling. This is a function which is in the public interest.
- We have a legitimate interest in disclosing your information because it is necessary in order to provide our students with education and pastoral care and connected purposes as outlined above.
- We will not usually need consent to disclose your information. However, if at any time it appears to us that we would need consent then this will be sought before a disclosure is made.
- It is in your vital interests for your personal information to be passed to these people or services.
We will ask you for consent once we think that you can understand what we are asking. This is because the law requires us to ask you if you can understand. Normally, we involve your parents too. By law we won’t need their consent if you can give it but parents like to be involved because it is part of looking after you. Before you are old enough to understand we will ask your parents to consent for you.
We do not normally transfer your information to a different country which is outside the European Economic Area. This would only happen if one of your parents lives abroad or if you move to a new school abroad. If this happens we will be very careful to make sure that it is safe to transfer your information. We will look at whether that other country has good data protection laws for example. If we cannot be sure that it is safe then we will talk to you and your parents about it and make sure that you are happy for us to send your information. As this is not something we normally do and we don’t know which country we might need to send your information to, we cannot tell you more about it now but if we want to transfer your data to a different country then we will tell you whether or not we think it is safe and why we have decided that.
We may make use of limited personal data (such as contact details) relating to students, and their parents or guardians for fundraising, marketing or promotional purposes and to maintain relationships with students of the Trust, but only where consent has been provided to this.
We also may transfer information to any association society or club set up for the purpose of maintaining contact with students or for fundraising, marketing or promotional purposes relating to the Trust but only where consent has been obtained first.
How long we keep your information
We only keep your information for as long as we need to or for as long as the law requires us to. Most of the information we have about you will be in our student files. We usually keep these until your 25th birthday unless you move to another school in which case we send your file to your new school. We have a policy which explains how long we keep information. It is called a Records Retention Policy and you can find it here http://anglianlearning.org/governance/ or ask for a copy at student support.
You have these rights:
- You can ask us for a copy of the information we have about you
- You can ask us to correct any information we have about you if you think it is wrong
- You can ask us to erase information about you (although we may have good reasons why we cannot do this)
- You can ask us to limit what we are doing with your information
- You can object to what we are doing with your information
- You can ask us to transfer your information to another organisation in a format that makes it easy for them to use.
There is more information in our Data Protection Policy which is available on the Anglian Learning website http://anglianlearning.org/governance/
A list of all third parties that we share or that process data on our behalf is also available on the Anglian Learning website.
You can complain about what we do with your personal information. If you are not happy with our answer to your complaint then you can complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Privacy Notice for Contractors May 2018
Privacy Notice for PFA May 2018 – Parents and Friends Association
Privacy Notice for Staff May 2018