At Lumley Infant and Nursery School we take the privacy of our staff, governors, parents/guardians and pupils very seriously and work to the highest standard to keep your data safe. You may have already heard about the changes to data protection regulations, and the introduction of the General Data Protection Regulation (GDPR), which came into force on the 25th May 2018.
We are committed to compliance in respect of personal data, and the protection of the rights and freedoms of individuals whose information we collect and process in accordance with the General Data Protection Regulation (GDPR).
Who is responsible for Personal Data?
As a school, we are a Data Controller under these regulations and as such define how and why personal data is collected, stored, and used. We also utilise Data Processors – third parties that process the data we control on our behalf. As a Data Controller, we comply with the regulation as well as ensuring that all of our Data Processors are compliant.
At Lumley Infant and Nursery School, we will achieve compliance by ensuring personal data is processed lawfully, transparently, and for a specific purpose. Once the purpose is fulfilled and the data is no longer required, it will be deleted, as stipulated within our Data Retention Policy.
We are currently registered with the Information Commissioner’s Office as Data Processor. We utilise a wide range of both physical and technical security measures in line with the recommendations provided by ICO (Information Commissioner’s Office)
We implement additional security measures including advanced firewalls, enhanced virus protection across our entire school estate, regular data backup and multi-factor authentication to control access, automatic suspicious activity detection and logging etc.
We provide regular data protection training to all teaching and support staff as well as our governing body.
We carry out due-diligence with all third party data processors.
We will continue to share the specific details of personal data collected in our Privacy notices which have been created for our staff, governing body, parents and pupils. The revised notices are publicly available on our website.
We have also completed a comprehensive data mapping audit of the data that we process and store. We have also reviewed our data breach incident response procedure.
How can you help us comply with GDPR?
Parents/guardians can assist us with GDPR by ensuring that we have the most up to date address, telephone number, emergency contact details and email address on file.
Useful Documents
Adobe Reader
You may need a product like Adobe Reader (free download) to view our PDF documents on our website.
