General Data Protection Regulation (GDPR)

 

Data Protection
Short Heath Federation is committed to protecting the personal information of our pupils, families, staff and visitors.
We process personal information in accordance with the UK GDPR, Data Protection Act 2018 and current data protection legislation. We only collect and use information where we have a lawful reason to do so, keep it securely, retain it only for as long as necessary and share it only where appropriate and lawful.
Everyone in school has a responsibility to protect personal data, with our Data Protection Officer (DPO) overseeing compliance. 
Privacy Notices
Further information about how we use personal data can be found in our:
  • Pupil & Parent Privacy Notice
  • Staff & Workforce Privacy Notice
  • Visitor Privacy Notice
  • Governor Privacy Notice
  • Data Protection Policy
Your Rights
You have rights over your personal information, including the right to request access to information we hold about you and, where applicable, to ask for information to be corrected or how it is used to be restricted.
 
Contact our Data Protection Officer
DPO Email: DPO@shortheathfederation.org.uk
Telephone: 01902368499
 
If you have concerns about how your information is handled, please contact our DPO. You also have the right to raise a concern with the Information Commissioner's Office (ICO).
Last reviewed: September 2026 | Next review: September 2027
 
To read more, please access the documents below:

Name
 data-protection-policy-2026.docxDownload
 full-privacy-notice-2026.docxDownload
 gdpr-related-policies-2026.docxDownload
 privacy-notice-summary-2026.docxDownload
 privary-notice-summary-2026 (1).docxDownload
 privary-notice-summary-2026.docxDownload
 sar-2026.docxDownload
 student-pupil-user-acceptance-policy-2026.docxDownload
 subject_access_request_form-v3-1-.docxDownload
 user-acceptance-policy-template-2026.docxDownload
Showing 1-10 of 11