Privacy Notice (How we use pupil information)
The categories of pupil information that we collect, hold and share include:
- personal identifiers and contacts (such as name, unique pupil number, contact details and address)
- characteristics (such as ethnicity, language, and free school meal eligibility)
- safeguarding information (such as court orders and professional involvement)
- special educational needs (including the needs and ranking)
- medical and administration (such as doctors information, child health, dental health, allergies, medication and dietary requirements)
- attendance (such as sessions attended, number of absences, absence reasons and any previous schools attended)
- assessment and attainment (such as key stage 1 and phonics results, post 16 courses enrolled for and any relevant results)
- behavioural information (such as exclusions and any relevant alternative provision put in place)
Why we collect and use pupil information:
- to support pupil learning
- to monitor and report on pupil attainment progress
- to provide appropriate pastoral care
- to assess the quality of our services
- to keep children safe (food allergies, or emergency contact details)
- to meet the statutory duties placed upon us for DfE data collections
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing pupil information are:
The lawful basis on which we use this information in relation to Article 6 and Article 9 of the General Data Protection Regulations (UK GDPR) is to comply with legal obligation and for the purposes of legitimate interests.
Collecting pupil information
We collect pupil information via registration forms at the start of the school year or Common Transfer File (CTF) and Admimsson Transfer Form (ATF) secruely from previous school.
Pupil data is essential for the schools’ operational use. Whilst the majority of pupil information you provide to us is mandatory, some of it requested on a voluntary basis. In order to comply with the data protection legislation, we will inform you at the point of collection, whether you are required to provide certain pupil information to us or if you have a choice in this.
Storing pupil data
We hold pupil data securely for the set amount of time shown in our data retention schedule.
Who we share pupil information with:
We routinely share pupil information with:
- schools that the pupils attend after leaving us
- our local authority
- youth support services (pupils aged 13+)
- the Department for Education (DfE)
Why we reguarly share pupil information
We only share information about pupils with others where the law and our policies allow us to, or where we have obtained any necessary consent. We will not share your data if you have advised us that you do not want it shared, unless it is the only way we can make sure you stay safe, or we are legally required to do so. Any data will be transferred securely.
Youth support services
Pupils aged 13+
Once our pupils reach the age of 13, we also pass pupil information to our local authority and / or provider of youth support services as they have responsibilities in relation to the education or training of 13-19 year olds under section 507B of the Education Act 1996.
This enables them to provide services as follows:
- youth support services
- careers advisers
The information shared is limited to the child’s name, address and date of birth. However where a parent or guardian provides their consent, other information relevant to the provision of youth support services will be shared. This right is transferred to the child / pupil once they reach the age 16.
Pupils aged 16+
We will also share certain information about pupils aged 16+ with our local authority and / or provider of youth support services as they have responsibilities in relation to the education or training of 13-19 year olds under section 507B of the Education Act 1996.
This enables them to provide services as follows:
post-16 education and training providers
youth support services
For more information about services for young people, please visit our local authority website.
The Department for Education (DfE) collects personal data from educational settings and local authorities via various statutory data collections. We are required to share information about our pupils with the Department for Education (DfE) either directly or via our local authority for the purpose of those data collections, under:
- Regulation 5 of The Education (Information About Individual Pupils) (England) Regulations 2013.
All data is transferred securely and held by DfE under a combination of software and hardware controls, which meet the current government security policy framework.
For more information, please see ‘How Government uses your data’ section.
Requesting access to your personal data
Under data protection legislation, parents and pupils have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s educational record, contact If you would like to discuss anything in this privacy notice, please contact our Data Protection Officer by emailing email@example.com
You also have the right to:
- to ask us for access to information about you that we hold
- to have your personal data rectified, if it is inaccurate or incomplete
- to request the deletion or removal of personal data where there is no compelling reason for its continued processing
- to restrict our processing of your personal data (i.e. permitting its storage but no further processing)
- to object to direct marketing (including profiling) and processing for the purposes of scientific/historical research and statistics
- not to be subject to decisions based purely on automated processing where it produces a legal or similarly significant effect on you
If you have a concern or complaint about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/.
For further information on how to request access to personal information held centrally by DfE, please see the ‘How Government uses your data’ section of this notice.
Withdrawal of consent and the right to lodge a complaint
Where we are processing your personal data with your consent, you have the right to withdraw that consent. If you change your mind, or you are unhappy with our use of your personal data, please let us know by contacting firstname.lastname@example.org
We may need to update this privacy notice periodically so we recommend that you revisit this information periodically.
If you would like to discuss anything in this privacy notice, please contact: The Piggott School, Twyford Road, Wargrave, Reading, Berkshire, RG10 8DS
Data Protection Officer - email@example.com