Skip to content

Data Protection

GDPR (General Data Protection Regulations)

With effect from 25 May 2018 organisations, including schools, have to comply with General Data Protection Regulations with a view to safeguarding people’s personal information.  This placed extra duties on schools and other institutions, which handle personal data.  It means we must only collect information which is needed to perform our duties, and we must take steps to keep information safe and secure, only keeping hold of data as long as is necessary and disposing of information properly. Following the United Kingdom’s departure from the European Union the legislation is now called the United Kingdom General Data Protection Regulation (UK GDPR).

Horncastle Primary School is part of Wellspring Academy Trust. For the purposes of UK GDPR, the Trust is the data controller in respect of the personal  data that we process. If you would like to know more about how the Trust processes your data as well as the details for the Trust Data Protection Officer (DPO) please follow this link to access our privacy notices.

All staff at Horncastle Primary School take the Data Protection obligations very seriously and understand that it is important that we only store personal information in a secure way with access limited to those individuals who have a business need to access. All our staff receive regular GDPR & Cyber Security training to ensure that we remain assured with the provision of GDPR