Data Protection and GDPR

The General Data Protection Regulation (GDPR) ensures a balance between an individual’s rights to privacy and the lawful processing of personal data undertaken by organisations in the course of their business. It aims to protect the rights of individuals about whom data is obtained, stored, processed or supplied and requires that organisations take appropriate security measures against unauthorised access, alteration, disclosure or destruction of personal data. You will find full details of our Data Protection and File Retention Policies along with our Privacy Notice by clicking on the links below

Castlebar is committed to protecting the privacy and security of personal information. Our privacy notice describes how we collect and use personal information about pupils, in accordance with the General Data Protection Regulation (GDPR), section 537A of the Education Act 1996 and section 83 of the Children Act 1989.

With your permission we may take photographs of the children at our school. We use these images as part of our school displays and sometimes in other printed publications such as the school newsletter. We may also use them on our school website.

For further details please refer to our Pupil & Parents Privacy Notice and to the Parental Permissions information Sheet. Photos will usually be updated on the school website termly, the longest time we would use photos for is 2 years. You can withdraw permission for photos to be used at any time by contacting the school office.

• To ensure your child’s privacy, we will not disclose information over the telephone unless we are sure that we are talking to you – the parent/carer. Information will not be shared with anyone else this is provided for under the Castlebar data sharing agreement. For further information please see our Pupil and Parents Privacy notice.
• You have a right to see your child’s records if you wish. Please ask at the school’s office if you would like further details. There is usually no fee payable.
• If you would like to discuss anything within the privacy notice or have a concern about the way we are collecting or using your personal data, we request that you raise your concern with the School Business Manager, Sharon Fida, in the first instance.
• We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection and this privacy notice. If you have any questions about how we handle your personal information which cannot be resolve by the School Business Manager or Headteacher, then you can contact the DPO on the details below:-

Data Protection Officer: Craig Stilwell
Address: Judicium Consulting Ltd, 72 Cannon Street, London, EC4N 6AE
Email: dataservices@judicium.com
Telephone: 0203 326 9174