Data Protection & Privacy

At Hollyfast Primary School, we take our responsibility for protecting personal information seriously.

We collect, hold and process personal information about our pupils, parents and carers to enable us to provide a safe, supportive and high-quality education, meet our legal obligations and carry out the day-to-day functions of the school.

UK GDPR & Data Protection

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 set out how organisations, including schools, must collect, use, store and protect personal information.

Hollyfast Primary School is committed to ensuring that personal information is:

• used fairly, lawfully and transparently

• collected for clear and specified purposes

• relevant and limited to what is necessary

• accurate and kept up to date

• retained only for as long as necessary

• stored and processed securely.

Our Privacy Notices provide further information about the personal data we collect, why we collect it, how it is used, who it may be shared with and the rights individuals have in relation to their personal information.

Photographs, Videos & Consent

There are some circumstances where we will ask parents and carers for consent before using their child's personal information.

This may include the use of photographs or video recordings for purposes such as:

• displays and celebrations within school

• the school website

• school social media accounts

• publicity or promotional materials.

Where consent is the appropriate lawful basis, parents and carers will be given a clear choice and can withdraw their consent at any time.

The school may also take and use photographs or recordings for other legitimate educational, safeguarding or administrative purposes where another lawful basis applies.

Data Protection Officer

Our Data Protection Officer (DPO) is SchoolPro TLC Limited.

The DPO provides independent advice and support to the school and monitors our compliance with data protection legislation.

For queries relating to data protection or the use of personal information, our DPO can be contacted at:

📧 DPO@SchoolPro.UK

You can also contact the school office if you have a question about how Hollyfast Primary School uses your or your child's personal information.

Information Commissioner's Office

Hollyfast Primary School is registered with the Information Commissioner's Office (ICO) as a Data Controller.

ICO Registration Number: Z7906298