Introduction

This summary is to help you understand how and why we collect personal information and what we do with that information when you enquire about a place at Heathfield School (“the School”) for your daughter. If you have any questions about this notice, please contact the Admissions Department: registrar@heathfieldschool.net

This summary is intended to provide information about how we will use (or “process”) personal information about prospective pupils (“pupils”) and their parents, carers or guardians (“parents”). This information is provided in accordance with the rights of individuals under Data Protection Law to understand how your personal information is used. You are encouraged to read the full Privacy Notices for Parents and Pupils and understand our obligations to you. We have also produced a pupil-friendly summary document of the privacy notice for pupils to read – available on request.

This summary applies when collecting information via our online enquiry form on the website, via e-mail, telephone enquiries and/or any paper form. Anyone who works for, or acts on behalf of, the School (including staff, volunteers, governing council members and service providers) are made aware of and should comply with our Privacy Notice and our data protection procedures.

What is “personal information”?

Personal information is information that the School collects about you. This includes information such as your name, date of birth and address as well as things like exam results, medical details and behaviour records. The School may also record your religion or ethnic group. CCTV, photos and video recordings of you are also personal information.

Why does the School collect personal information?

Our primary reason for using personal information is to provide education services and to respond to requests for information about joining the School. We therefore have a legitimate interest for processing basic personal information and sensitive information. We will hold the minimum that is required to form and maintain the contact between us.

We may ask for your consent to use your information in certain ways. If we ask for your consent to use your personal information in relation to an enquiry for a place at Heathfield School you can take back this consent at any time. Any use of your information before you withdraw your consent remains valid.

Please contact the Admissions Department if you would like to withdraw any consent given: registrar@heathfieldschoool.net

How long we keep personal information

We will keep personal information securely. The table below gives an example:

*Subject to safeguarding considerations: any material which may be relevant to potential claims should be kept for the lifetime of the pupil.

If you have any queries about how our retention policy is applied, or wish to request that personal information that you no longer believe to be relevant is considered for erasure, please contact the Admissions Department.

A limited and reasonable amount of information will be kept for archiving purposes. For example, where you have requested we no longer keep in touch with you, we will need to keep a record of the fact in order to fulfil your wishes (called a “suppression record”).

Consent

If we are relying on your consent as a means to process personal information, you may withdraw that consent at any time. What decisions can you make about your information?

  • if information is incorrect you can ask us to correct it
  • you can also ask what information we hold about you and be provided with a copy
  • you can ask us to delete the information that we hold about you in certain circumstances, for example, where we no longer need the information
  • our use of information about you may be restricted in some cases, for example, if you tell us that the information is inaccurate, we can only use it for limited purposes while we check its accuracy

There is no automated decision-making or profiling involved in your enquiry process.

Queries and Complaints

The Director of IT is the person responsible at Heathfield School for managing how we look after personal information and deciding how it is shared. Like other organisations we need to keep your information safe, up to date, only use it for what we said we would, destroy it when we no longer need it and most importantly, treat the information we get fairly.

Any comments or queries on this policy should be directed to the Director of IT: systems@heathfieldschool.net

If you believe that we have not complied with this policy or acted otherwise than in accordance with Data Protection Law, you can make a referral to or lodge a complaint with the Information Commissioner’s Office (ICO), although the ICO recommends that steps are taken to resolve the matter with the School before involving the regulator.

Related Policies

  • Confidentiality Policy
  • Data Protection Policy
  • IT Acceptable Use Policy
  • Privacy notice for parents
  • Privacy notice for pupils
  • Record Keeping Policy