{"id":926,"date":"2018-05-23T12:22:43","date_gmt":"2018-05-23T12:22:43","guid":{"rendered":"http:\/\/beechhillschool.co.uk\/bhps\/?page_id=926"},"modified":"2025-06-23T13:20:22","modified_gmt":"2025-06-23T13:20:22","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/beechhillschool.co.uk\/bhps\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p><strong>Privacy Notice<\/strong><br \/>\nUnder data protection law, individuals have a right to be informed about how the school uses any personal data that we hold about them. We comply with this right by providing \u2018privacy notices\u2019 (sometimes called \u2018information notices\u2019) to individuals.<\/p>\n<p>In line with Government guidelines we may need to keep records of staff and pupils that have tested positive for COVID-19. This information is stored securely and is not shared with any parties it does not concern.<\/p>\n<p><strong>Introduction<\/strong><br \/>\nThe General Data Protection Regulation (GDPR) 2018 and Data Protection Act 2018 (DPA) sets out the law relating to data protection and this privacy notice and the way we handle your personal data is all carried out in accordance with that law.<\/p>\n<p>Under the GDPR and DPA anyone who holds and controls the way in which data is used is known as a data controller. We, Beech Hill School, are a \u2018data controller\u2019 for the purposes of the data protection law.<\/p>\n<p>This privacy notice sets out the following information:<\/p>\n<ul>\n<li>The personal data we hold<\/li>\n<li>Why we use this data<\/li>\n<li>Special Category Data<\/li>\n<li>Our legal basis for using this data<\/li>\n<li>Collecting this personal data<\/li>\n<li>How long we store this data<\/li>\n<li>Data Sharing &#8211; Who we share any personal data with and why<\/li>\n<li>Transferring her data internationally<\/li>\n<li>Parents and Pupils\u2019 rights regarding personal data<\/li>\n<li>Other Rights<\/li>\n<li>Complaints<\/li>\n<li>Data Protection Officer<\/li>\n<li>How Government uses your data<\/li>\n<li>The personal data we hold<\/li>\n<\/ul>\n<p>Personal data that we may collect, use, store and share (when appropriate) about pupils includes, but is not restricted to:<\/p>\n<ul>\n<li>Name, address, date of birth<\/li>\n<li>Contact details, contact preferences, identification documents<\/li>\n<li>Emergency contact details<\/li>\n<li>Characteristics, such as ethnic background, religious beliefs, eligibility for free school meals, or special educational needs<\/li>\n<li>Details of any medical conditions, including physical and mental health conditions<\/li>\n<li>Results of internal assessments and externally set tests<\/li>\n<li>Pupil and curricular records<\/li>\n<li>Exclusion information<\/li>\n<li>Attendance information<\/li>\n<li>Safeguarding information<\/li>\n<li>Details of any support received, including care packages, plans and support providers<\/li>\n<li>Photographs<\/li>\n<li>CCTV<\/li>\n<li>Recordings of telephone calls<\/li>\n<\/ul>\n<p>We may also hold data about pupils that we have received from other organisations, including other schools, local authorities and the Department for Education.<\/p>\n<p>Why we use this data: We use this data to:<\/p>\n<ul>\n<li>Support pupil learning<\/li>\n<li>Monitor and report on pupil progress<\/li>\n<li>Provide appropriate pastoral care<\/li>\n<li>Protect pupil welfare<\/li>\n<li>Assess the quality of our services<\/li>\n<li>Administer admissions waiting lists<\/li>\n<li>Carry out research<\/li>\n<li>Comply with the law regarding data sharing<\/li>\n<li>Safeguarding<\/li>\n<\/ul>\n<p>The personal information is initially used to create the pupil record then information will be taken from that record to create attendance records, class lists and reading groups. The personal information is used to track attainment and performance and put any support in place for your child throughout their time in school.<\/p>\n<p>Some personal information may be input into communication based apps to allow school to communicate with you about important matters relating to your child and school events, consent will be sought for this separately.<\/p>\n<p>Some information, mainly your child\u2019s name, may be used in software\/applications which your children will use as resources to facilitate their learning. A Data Protection Impact Assessment (DPIA) will be conducted before the school uses any new software or applications and your child will be supervised in line with ICT acceptable use policy whilst using the software\/application in school. Where necessary, we will obtain your consent before using software.<\/p>\n<p><strong>Special Category Data<\/strong><\/p>\n<p>The School collects and processes some personal information that is classed as Special Category data under the DPA and GDPR. Special category data is personal data that is classed as more sensitive than other personal information and therefore requires greater protection.<br \/>\nThe special category data which school may process includes race, ethnic origin, religion and health information.<br \/>\nIn order to lawfully process special category data, school must have a lawful basis under Article 8 GDPR and a separate condition for processing the data under Article 9 GDPR.<br \/>\nUnder Article 6 GDPR, the lawful basis for processing health information is that there is a legal obligation on the school to hold, process and, in some instances, share this information in order to safeguard your child. Article 9(2)(b) is the separate condition for processing the health and medical information of your child for safeguarding purposes.<br \/>\nThe school may ask you for information about your child\u2019s race, ethnic origin and religion but in most instances this is optional and therefore by providing this information you are giving your consent for the information being processed by the school. In the majority of instances the only use for this information is that school provide this to the Department for Education on the annual census in order to understand the demographic of children within the school\/local authority area. Further information about personal data that is shared with the DfE and how they use it is set out at the end of this privacy notice.<br \/>\nThe legal basis for processing your child\u2019s race, religion and\/or religion is consent and the separate condition for processing under Article 9(2)(a) is consent.<br \/>\nExtra care will be taken when collecting, processing or sharing special category data and, unless there is a legal reason why we can\u2019t, you will be informed before we share the data with any external organisations.<\/p>\n<p><strong>Our legal basis for using this data<\/strong><br \/>\n.<br \/>\nWe only collect and use pupils\u2019 personal data when the law allows us to. Most commonly, we process it where:<\/p>\n<ul>\n<li>We need to comply with a legal obligation<\/li>\n<li>We have obtained your consent to use it in a certain way<\/li>\n<\/ul>\n<p>Less commonly, we may also process pupils\u2019 personal data in situations where:<\/p>\n<ul>\n<li>We need it to perform an official task in the public interest<\/li>\n<li>Where we have obtained consent to use pupils\u2019 personal data, this consent can be withdrawn at any time. We will make this clear when we ask for consent, and explain how consent can be withdrawn.<\/li>\n<li>Some of the reasons listed above for collecting and using pupils\u2019 personal data overlap, and there may be several grounds which justify our use of this data.<\/li>\n<li>This legal basis for collecting and using personal data is set out in Article 6 and Article 9 of the GDPR.<br \/>\nBack to the top<\/li>\n<\/ul>\n<p><strong>Collecting this information<\/strong><\/p>\n<p>We collect pupil information via the admissions form we ask you to complete before your child starts with us at school or on a Common Transfer File (CTF) from your child\u2019s previous school.<\/p>\n<p>Pupil data is essential for the schools\u2019 operational use. Whilst the majority of pupil information you provide to us is mandatory, some of it requested on a voluntary basis. In order to comply with the data protection legislation, we will inform you at the point of collection, whether you are required to provide certain pupil information to us or if you have a choice in this and we will tell you what you need to do if you do not want to share this information with us.<br \/>\nWe do not use cookies (data files that can track users) on our website.<\/p>\n<p>How long we store this data<br \/>\nWe keep personal information about pupils while they are attending our school. We may also keep it beyond their attendance at our school if this is necessary in order to comply with our legal obligations. The schedule set out in the Information and Records Management Society\u2019s toolkit for schools sets out how long we keep information about pupils, what we retain and what we dispose of and when. We also have our Records Management and Retention Policy which sets out more information about how long we keep personal information, how we store your information whilst we are processing it and how we dispose of the information when we no longer need it.<\/p>\n<p>Data sharing \u2013 who we share any personal data with and why<br \/>\nWe do not share information about pupils with any third party without consent unless the law and our policies allow us to do so.<br \/>\nWhere it is legally required, or necessary (and it complies with data protection law) we may share personal information about pupils with:<\/p>\n<ul>\n<li>Our local authority \u2013 to meet our legal obligations to share certain information with it, such as safeguarding concerns and exclusions<\/li>\n<li>The Department for Education \u2013 to meet our legal obligation to provide census information (see further information below) and information on attainment and progress.<\/li>\n<li>The pupil\u2019s family and representatives \u2013 in order to provide the child\u2019s parents\/carers with information about performance, attainment, attendance and behaviour.<\/li>\n<li>Educators and examining bodies \u2013 externally marked test papers contain pupil names and dates of birth.<\/li>\n<li>Our regulator e.g. Ofsted \u2013 requires data to analyse performance of the school. On visiting the school the inspector will ask to see staff applications\/references, pupil information, reports and referrals.<\/li>\n<li>Suppliers and service providers \u2013 to enable them to provide the service we have contracted them for such as online digital learning environments and our online tracking system.<\/li>\n<li>Financial organisations \u2013 such as moneyless payment systems, giving parents the facility to pay for dinner money and school trips digitally<\/li>\n<li>Central and local government &#8211; termly census data.<\/li>\n<li>Our auditors \u2013 financial auditors who inspect our school every 3 years.<\/li>\n<li>Survey and research organisations \u2013 publishing companies and local universities, carrying out case studies on the performance of our pupils.<\/li>\n<li>Health authorities \u2013 school nursing team, national NHS data collection of heights and weights initiative for Reception and Year 6 children.<\/li>\n<li>Children\u2019s Social Care<\/li>\n<li>Security organisations<\/li>\n<li>Health and social welfare organisations \u2013 if there is a medical need or arrangement for a particular child or if it is in the interests of safeguarding of the child.<\/li>\n<li>Professional advisers and consultants \u2013 e.g. &#8211; Writing moderators for Standards and Testing Agency \u2013 who select pupils work to moderate<\/li>\n<li>Police forces, courts, tribunals \u2013 these services require access to data should an incident occur to one of our pupils, staff or families.<\/li>\n<\/ul>\n<p><strong>Transferring data internationally<\/strong><\/p>\n<p>Where we transfer personal data to a country or territory outside the European Economic Area, we will do so in accordance with data protection law and ensure that the organization outside the EEA is compliant with the GDPR. We do not currently transfer personal data to a country outside the EEA and don\u2019t propose to in the future but will liaise directly with any individuals who may move to a country outside the EEA.<\/p>\n<p><strong>Parents and pupils\u2019 rights regarding personal data<\/strong><\/p>\n<p>Individuals have a right to make a \u2018subject access request\u2019 to gain access to personal information that the school holds about them.<br \/>\nParents\/carers can make a request with respect to their child\u2019s data where the child is not considered mature enough to understand their rights over their own data (usually under the age of 12), or where the child has provided consent.<br \/>\nParents also have the right to make a subject access request with respect to any personal data the school holds about them.<br \/>\nIf you make a subject access request, and if we do hold information about you or your child, we will:<\/p>\n<ul>\n<li>Give you a description of it<\/li>\n<li>Tell you why we are holding and processing it, and how long we will keep it for<\/li>\n<li>Explain where we got it from, if not from you or your child<\/li>\n<li>Tell you who it has been, or will be, shared with<\/li>\n<li>Let you know whether any automated decision-making is being applied to the data, and any consequences of this<\/li>\n<\/ul>\n<p>Give you a copy of the information in an intelligible form Individuals also have the right for their personal information to be transmitted electronically to another organisation in certain circumstances.<\/p>\n<p>If you would like to make a request please contact our data protection officer (see details below under the \u2018Data Protection Officer\u2019 section).<br \/>\nParents\/carers also have a legal right to access to their child\u2019s educational record. To request access, please contact .<\/p>\n<p><strong>Other rights<\/strong><\/p>\n<p>Under data protection law, individuals have certain rights regarding how their personal data is used and kept safe, including the right to:<\/p>\n<ul>\n<li>Object to the use of personal data if it would cause, or is causing, damage or distress<\/li>\n<li>Prevent it being used to send direct marketing<\/li>\n<li>Object to decisions being taken by automated means (by a computer or machine, rather than by a person)<\/li>\n<li>In certain circumstances, have inaccurate personal data corrected, deleted or destroyed, or restrict processing<\/li>\n<li>Claim compensation for damages caused by a breach of the data protection regulations<\/li>\n<\/ul>\n<p>To exercise any of these rights, please contact our data protection officer.<\/p>\n<p><strong>Telephone Call Recording<\/strong><\/p>\n<p><strong>Which calls does this refer to?<br \/>\n<\/strong>This could include any incoming or outgoing telephone calls that are handled by the Academy<\/p>\n<p><strong>Why are calls recorded?<br \/>\n<\/strong>It has become common practice to record calls due to the growth of business conducted by telephone. Recording conversations allows organisations to assess customer satisfaction, train and develop staff, review call quality, and have access to a verbal record of what is said in the event of a subsequent complaint. It also hopefully means employees feel more protected knowing that any threatening behaviour can be evidenced and acted upon where necessary.<\/p>\n<p><strong>How will call recordings be used?<\/strong><\/p>\n<ul>\n<li>Quality monitoring.<\/li>\n<li>Training and Development.<\/li>\n<li>Complaints and disputes.<\/li>\n<\/ul>\n<p><strong>How have we informed our customers that we record calls?<br \/>\n<\/strong>There is a recorded message before the call options when calling the school<\/p>\n<p><strong>Can I request a copy of my call recording?<br \/>\n<\/strong>Call recordings are deleted automatically after 30 days. If the recording is available, you can request a copy of your conversation by contacting the Academy<\/p>\n<p>This will be provided to you in accordance with the terms of the Data Protection Act 2018<br \/>\nand treated as a Subject Access Request.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Complaints<br \/>\n<\/strong><br \/>\nWe take any complaints about our collection and use of personal information very seriously.<br \/>\nIf you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance.<br \/>\nTo make a complaint, please contact our data protection officer.<br \/>\nAlternatively, you can make a complaint to the Information Commissioner\u2019s Office:<\/p>\n<ul>\n<li>Report a concern online at https:\/\/ico.org.uk\/concerns\/<\/li>\n<li>Call 0303 123 1113<\/li>\n<li>Or write to: Information Commissioner\u2019s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF<\/li>\n<\/ul>\n<p><strong>Data Protection Officer<br \/>\n<\/strong><br \/>\nIf you have any questions, concerns or would like more information about anything mentioned in this privacy notice, please contact our data protection officer:<\/p>\n<p>Richard Hodgson<br \/>\nrhodgson@beechhillschool.co.uk<\/p>\n<p><strong>How Government uses your data<\/strong><\/p>\n<p>The pupil data that we lawfully share with the DfE through data collections:<\/p>\n<ul>\n<li>underpins school funding, which is calculated based upon the numbers of children and their characteristics in each school.<\/li>\n<li>informs \u2018short term\u2019 education policy monitoring and school accountability and intervention (for example, school GCSE results or Pupil Progress measures).<\/li>\n<li>supports \u2018longer term\u2019 research and monitoring of educational policy (for example how certain subject choices go on to affect education or earnings beyond school)<\/li>\n<li>Data collection requirements<\/li>\n<\/ul>\n<p>To find out more about the data collection requirements placed on us by the Department for Education (for example; via the school census) go to https:\/\/www.gov.uk\/education\/data-collection-and-censuses-for-schools<\/p>\n<p><strong>The National Pupil Database (NPD)<\/strong><\/p>\n<p>Much of the data about pupils in England goes on to be held in the National Pupil Database (NPD).<br \/>\nThe NPD is owned and managed by the Department for Education and contains information about pupils in schools in England. It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the department.<br \/>\nIt is held in electronic format for statistical purposes. This information is securely collected from a range of sources including schools, local authorities and awarding bodies.<br \/>\nTo find out more about the NPD, go to https:\/\/www.gov.uk\/government\/publications\/national-pupil-database-user-guide-and-supporting-information<\/p>\n<p><strong>Sharing by the Department<\/strong><\/p>\n<p>The law allows the Department to share pupils\u2019 personal data with certain third parties, including:<\/p>\n<ul>\n<li>Schools<\/li>\n<li>Local authorities<\/li>\n<li>Researchers<\/li>\n<li>Organisations connected with promoting the education or wellbeing of children in England<\/li>\n<li>Other government departments and agencies<\/li>\n<li>Organisations fighting or identifying crime<\/li>\n<\/ul>\n<p>For more information about the Department\u2019s NPD data sharing process, please visit:<br \/>\nhttps:\/\/www.gov.uk\/data-protection-how-we-collect-and-share-research-data<\/p>\n<p>Organisations fighting or identifying crime may use their legal powers to contact DfE to request access to individual level information relevant to detecting that crime. Whilst numbers fluctuate slightly over time, DfE typically supplies data on around 600 pupils per year to the Home Office and roughly 1 per year to the Police.<br \/>\nFor information about which organisations the Department has provided pupil information, (and for which project) or to access a monthly breakdown of data share volumes with Home Office and the Police please visit the following website: https:\/\/www.gov.uk\/government\/publications\/dfe-external-data-shares<\/p>\n<p>How to find out what personal information DfE hold about you<br \/>\nUnder the terms of the Data Protection Act 2018, you are entitled to ask the Department:<\/p>\n<ul>\n<li>If they are processing your personal data<\/li>\n<li>For a description of the data they hold about you<\/li>\n<li>The reasons they\u2019re holding it and any recipient it may be disclosed to<\/li>\n<li>For a copy of your personal data and any details of its source<\/li>\n<\/ul>\n<p>If you want to see the personal data held about you by the Department, you should make a \u2018subject access request\u2019. Further information on how to do this can be found within the Department\u2019s personal information charter that is published at the address below:<\/p>\n<p>https:\/\/www.gov.uk\/government\/organisations\/department-for-education\/about\/personal-information-charter<\/p>\n<p>To contact DfE: https:\/\/www.gov.uk\/contact-dfe<\/p>\n<p>This notice is based on the Department for Education\u2019s model privacy notice for pupils, amended for parents and to reflect the way we use data in this school.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Notice Under data protection law, individuals have a right to be informed about how the school uses any personal data that we hold about them. We comply with this right by providing \u2018privacy notices\u2019 (sometimes called \u2018information notices\u2019) to individuals. In line with Government guidelines we may need to keep records of staff and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"templates\/template-full.php","meta":{"footnotes":""},"class_list":["post-926","page","type-page","status-publish","hentry","post"],"_links":{"self":[{"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/pages\/926","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/comments?post=926"}],"version-history":[{"count":4,"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/pages\/926\/revisions"}],"predecessor-version":[{"id":5627,"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/pages\/926\/revisions\/5627"}],"wp:attachment":[{"href":"https:\/\/beechhillschool.co.uk\/bhps\/wp-json\/wp\/v2\/media?parent=926"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}