GDPR
At Charlton-on-Otmoor CE Primary School, we take the privacy and security of personal and confidential information very seriously. We are committed to ensuring that all personal data collected about pupils, parents, staff, governors, and visitors is processed and stored in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
How We Store Confidential Information
We implement robust technical and organizational security measures to protect confidential data against unauthorized access, accidental loss, destruction, or damage:
- Secure Electronic Storage: Digital records and personal data are stored on secure, password-protected servers and UK GDPR-compliant cloud management systems (such as [e.g., Arbor]). Access is strictly limited to authorized personnel on a "need-to-know" basis aligned with their professional role.
- Physical Security: Any confidential paper-based records are kept in secure, locked filing cabinets within restricted areas of the school.
- Data Minimization & Retention: We only collect information that is genuinely necessary for the operational running of the school, safeguarding, and statutory reporting. Data is never kept for longer than is necessary. It is retained and securely destroyed in accordance with our Data Retention Schedule, which follows local authority and Department for Education (DfE) guidelines.
Your Rights & More Information
Under data protection law, individuals have specific rights regarding their personal data, including the right to make a Subject Access Request (SAR). For full details on the types of data we collect, why we hold it, who we share it with, and how long it is kept, please review our policies and procedures.
If you have any questions or wish to exercise your rights, please contact our Data Protection Officer (DPO), Helen Pool, via the school office. You can also find out more about your rights on the Information Commissioner’s Office (ICO) website
