New  General Data Protection Regulations (GDPR) came into force on 25th May 2018.

GDPR will replace the Data Protection Act 1998 and is designed to strengthen the safety and security of all data held within an organisation, and make sure processing and storage procedures are consistent.

It is important that you understand your rights under the GDPR; you have the right to:

  • Be informed about how we use your personal data.
  • Request access to the personal data that the school holds.
  • Request that your personal data is amended if it is inaccurate or incomplete.
  • Request that your personal data is erased where there is no compelling reason for its continued processing.
  • Request that the processing of your data is restricted.
  • Object to your personal data being processed.


GDPR & DATA Protection Policy 2018

Parents GDPR Privacy Notice

Child friendly GDPR Privacy Notice

Staff GDPR Privacy Notice

Procedure for Access to Personal Information

Parent Subject Access Request form

Staff Subject Access Request form

Derbyshire County Councils summary guidelines of record retention periods for schools

Data Breach Procedure

Records Management Policy (Data Retention)

Digital Continuity Statement

Image Use Policy

Derbyshire County Councils Image use Guidance