Data Protection and GDPR

At Worth Primary, we take data protection seriously. We collect and use information about pupils, parents and carers in order to run the school, support learning and wellbeing, and meet our legal responsibilities. This includes information used for day-to-day administration, attendance, safeguarding, and communication with families.

Our approach follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only use personal data where there is a lawful basis, such as performing tasks in the public interest, fulfilling legal obligations, or where consent is required. We keep data accurate, relevant and secure, and we do not keep it for longer than necessary. Where we share information, we do so carefully and only with organisations that have appropriate safeguards in place.

Parents and carers have rights regarding their child’s personal information, including the right to be informed, to access certain records, and to request corrections where appropriate. If you have a concern about how we handle personal data, you can raise it with the school in the first instance. You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK’s independent regulator for data protection.