On the 25th May 2018, the General Data Protection Regulation (GDPR) came into force in the UK.

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU).

The GDPR require public authorities and businesses to identify the lawful basis for storing personal data, audit information we already hold and take a ‘data protection by design and default’ approach to personal data.

Shurdington CE Primary School takes data protection very seriously. In line with GDPR requirements, we have appointed a Data Protection Officer through the GCC to oversee our approach to data management and protection.

In order to ensure that we fully comply with the new regulations, we have reviwed our current policies and practices, updated our privacy notices in line with the new requirements and revised Data Protection Policy.

	Data Protection Policy	[pdf 2MB]
	Parent and Carer Privacy Notice 2024	[pdf 289KB]
	Pupil Privacy Notice 2024	[pdf 272KB]
	School Governors and Volunteers Privacy Notice	[pdf 285KB]
	Retention Schedule and Guidance	[pdf 678KB]
	Staff Privacy Notice	[pdf 122KB]