Data Protection
Our Data Protection Policy lays out the school's approach to data protection. We recognise the importance of protecting the personal data we are entrusted with, and this policy sets out how we comply with relevant legislation.
Privacy Notices
Gildredge House collects and uses personal information about staff, students, parents and other individuals who come into contact with the school. This information is gathered in order to enable the school to provide education and other related services. There is also a legal requirement for schools to collect and use information to ensure that the school complies with its statutory obligations. Our Privacy Notices can be found here:
Privacy notice for data sharing with the DfE
As part of the Department For Education (DfE) work to identify the causes of poor school attendance and to support local authorities, multi-academy trusts and schools to improve attendance levels, the DfE would like to make it easier to access more timely student level attendance data by these parties. The DfE's ambition is for this to help schools identify issues and challenges relating to absence and safeguarding in a quicker and simpler way. As part of this project, the DfE will also conduct research with schools, LAs and MATs to better understand how best to share the data and they will seek ongoing feedback to help deliver improvements to the data sharing activity. Please find a copy of the DfE Privacy Notice below.
Privacy Notice for Examination Candidates aged 13+
Access arrangements allow students with special educational needs, disabilities or temporary injuries to access an assessment without changing the demands of the assessment. For example, readers, scribes and Braille question papers. Before applying online for access arrangements in relation to a specific student, the school’s Examinations Manager will provide the student with a JCQ Data Protection Notice. This document includes a Privacy Notice that outlines how the student’s personal information will be used when it is shared with awarding bodies, including the JCQ, for the purpose of organising access arrangements. Students are asked to complete and sign the Personal Data Consent Form within the JCQ Data Protection Notice to agree to the school applying for access arrangements on the student’s behalf and to use and share information about them, as described in the Privacy Notice, for the purposes of the application. The student is provided with a copy of the JCQ Data Protection Notice for sharing with their parent(s).
Special Category Data
Our Special Category Data Policy outlines the school’s obligations under Data Protection legislation with regard to the processing of Special Category Personal Data. This policy should be read alongside our Data Protection Policy, and our Privacy Notices.
Data Protection Officer
The school's external Data Protection Officer is Education Data Hub, Derbyshire County Council. They can be contacted on 01629 532888 or on dpforschools@derbyshire.gov.uk.
Subject Access Requests
Individuals have the right to access the personal data and supplementary information the school holds about them. This right applies to everyone whose personal data the school holds, including staff, Governors, volunteers, parents and students.
The school has a specific Subject Access Request Template Letter that is available for individuals to use if they wish. The completed Subject Access Request Template Letter can be handed into the School Office or emailed to dataprotection@gildredgehouse.org.uk. Our Subject Access Request Template Letter can be accessed here:
Data Protection Complaints
Under data protection law, individuals have the right to raise a complaint if they believe that their personal data has not been handled in accordance with the UK General Data Protection Regulation (UK GDPR) or the Data Protection Act 2018. This includes concerns about how personal data has been collected, used, shared, or stored.
We are committed to protecting your personal data and handling any concerns fairly and transparently. Please use this form to raise a data protection complaint.