Privacy Notice - GDPR

Information about pupils in Church Langley Primary School

General Data Protection Regulation 2018: How we use pupil information

We highly value and protect all data relating to our pupils, parents and staff and have reviewed practice in light of the General Data Protection Regulation 2018. For further information about GDPR please visit the ICO website. We have appointed a Data Protection Officer (DPO) to oversee the way the school handles data and ensure that requests for data are dealt with in accordance with GDPR. Any subject access requests (SAR), Freedom of Information requests (FOI) and queries you have about the way in which your data is handled please contact our DPO.

David Huxter - dhuxter@churchlangley.essex.sch.uk 

It is important that parents understand their rights under the GDPR; they have the right to:

  • Be informed about how we use personal data.
  • Request access to personal data that the school holds.
  • Request that personal data is amended if it is inaccurate or incomplete.
  • Request that personal data is erased where there is no compelling reason for its continued processing.
  • Request that the processing of data is restricted.
  • Object to personal data being processed.
  • Complain to the Information Commissioner’s Officer (ICO).

Parental consent is needed for children up to the age of 13, at which point, the child may be able to consent for themselves.

We collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE). We may be required to share information about our pupils with our Local authority and Department for Education.

We use this personal data to:

  • support our pupils’ learning
  • monitor and report on their progress
  • provide appropriate pastoral care; and
  • assess the quality of our services
  • comply with the law regarding data sharing

The categories of pupil information that we collect, hold and share include:

  • Personal information (such as name, unique pupil number and address)
  • characteristics (such as their ethnic group, language, nationality, country of birth, free school meal eligibility, special educational needs information, exclusions as well as relevant medical information)
  • Attendance information (such as sessions attended, number of absences and absence reasons)
  • We will not give information about our pupils to anyone without your consent unless the law and our policies allow us to do so. If you want to receive a copy of the information about your son/daughter that we hold, please contact the office manager.

Decisions on whether DfE releases this personal data to third parties are subject to a robust approval process and are based on a detailed assessment of who is requesting the data, the purpose for which it is required, the level and sensitivity of data requested and the arrangements in place to store and handle the data. To be granted access to pupil level data, requestors must comply with strict terms and conditions covering the confidentiality and handling of data, security arrangements and retention and use of the data.

For more information on how this sharing process works, please visit: https://www.gov.uk/guidance/national-pupil-database-apply-for-a-data-extract

For information on which third party organisations (and for which project) pupil level data has been provided to, please visit:https://www.gov.uk/government/publications/national-pupil-database-requests-received

If you need more information about how our local authority and/or DfE collect and use your information, please visit: 

If you have any questions about GDPR, you can contact the ICO on 0303 123 1113 or by using their live chat, or you can visit their Guide to the General Data Protection Regulation webpage.

Subject Access Requests or other GDPR concerns, please email the school's Data Protection Officer.