Face coverings are now optional, outside, within the school grounds. We would still ask you to wear one if having face to face conversations with staff.
School Logo

St Paul's Church of England Primary School

GDPR Policy

The General Data Protection Regulation (GDPR)


As you may be aware, the General Data Protection Regulation is coming into force later this week (May 25th) and we’ve now updated our privacy policy (to be approved by governors in June)


This is all part of our commitment to compliance and protecting your personal information. We want our school services to be safe and informative for all of our stakeholders.


What’s changed?


We’re not changing how we use or collect your information. Rather, our revised policy more clearly explains how, why, where and when we store and process your data, and also reflects your rights under the GDPR.


It does mean that we may have ask for consent again for things we already have your consent on – please bear with us during this time of policy change which is designed to protect the privacy of all individuals.


When obtaining, recording and managing consent we will make sure that:


  • Our request for consent is specific about why we want the data, what we will do with the data, if the data will be outsourced to a third party, and that the data subject (in this case you, as parent or carer) has the right to withdraw their consent at any time.
  • The request for consent will ask you to actively opt-in.
  • Wherever possible, we will give granular options to consent separately to different purposes and different types of processing e.g. If we ask for consent to use photographs we will ask for consent for each way we may wish to use photos.
  • Records are kept to evidence consent, including who consented, when, how, and what they were told.
  • It is easy for the data subject (you) to withdraw their consent at any time – ensure you are told how to withdraw.
  • Consents that have been obtained are kept under review and are refreshed if any of the processing reasons or activities change.

We have spent time reviewing our processes for obtaining, recording and managing consent to ensure we are compliant with the GDPR in time for May 25th.


Please see the website for our updated policy and privacy notices.

Privacy notices for children are also available for any older children who show the ability to understand them.


If you have any questions about this, please contact the head teacher via the school office.