Privacy notices and data protection
Find out how and why we collect information about you, what we collect and who we share it with. Be aware of your rights, how to correct things that are wrong, and how to object to us using the data.
What we collect
We collect your personal data in a variety of ways, for example, when you create an online customer account, fill in a form (online or paper), speak to us on the phone or face to face.
When we no longer require your personal data, it is deleted according to our retention guidelines.
The data we collect can include the following:
- Name and contact details: we may collect your name, address, email address, phone number and similar contact details to help provide you with services and to contact you in relation to those services. we will never use these details for marketing purposes.
- Medical Information: we may collect your medical information (or medical information about your child) if they are attending any sessions/events at which no school staff or family members are in attendance. This information is collected purely for health and safety reasons.
How we use it
- providing services to you:
- communicating with you: this includes replying to requests you make, explaining how your services work,
- legal requirements: eg for the prevention and detection of crime
We will not direct market to you.
How long we keep it
Retention guidelines are an essential tool for records management. They list how long we keep your records and when we can destroy them. This provides a brief overview of the retention guidelines and it is designed to help you have a general understanding.
Legal Requirements Some overarching legislation requires that records are kept for a certain amount of time and this applies to all services and sections of the County Council. These include: The Data Protection Act 1998 Principle 5 states that “Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.”
The Data Protection Act 2018. The General Data Protection Regulation requires that information is:
- processed lawfully, fairly and in a transparent manner;
- collected only for specified, explicit and legitimate purposes;
- retained only if relevant and limited to what is necessary for the purpose for which it is collected;
- accurate and kept up to date;
- kept no longer than is necessary; and
- kept securely.
We will delete all personal data as soon as it is no longer needed for the purpose it was collected for.
Find out what information we hold about you
You have the right to access the personal data we hold about you.
Our Privacy notices and data protection information outlines how and why we collect information about you, what we collect, who we share it with and your rights in relation to this information.
If you want to access the personal data we hold about you, or you feel that something has gone wrong with your personal information, you can submit an Information Rights Request by emailing firstname.lastname@example.org .
You have the right to:
- ask us to make changes if you believe the data we hold about you is wrong.
- request a copy of the data we hold about you.
- ask us to delete or stop processing data that we hold on you. However, please note that we can only do this if it is not required for further processing – in general, we erase your data as soon as we no longer require it, in line with our retention guidelines or after six years by default.
- If you do not feel that we have not correctly handled your data, you can complain to the Information Commissioner.
How to contact us
We will update this privacy information as required. If there are significant changes we will notify you either directly sending you a notification.
If you want to get in touch with us about anything on this page, please contact us.