St Ambrose Preparatory school is a registered charity, and our registered charity number is 254312. We take our responsibilities as a data controller seriously and are committed to using the personal data we hold in accordance with the law. This privacy notice provides detailed information about how we process personal data. Please read it carefully and, if you have questions regarding your personal data or its use, please contact the School. St. Ambrose Preparatory School, Wicker Lane, Hale Barns, Altrincham, WA15 0HF, 0161 903 9193.
2.TYPES OF PERSONAL DATA WE PROCESS
We process personal data about prospective, current and past: pupils and their parents; staff, suppliers and contractors; donors, friends and supporters; and other individuals connected to or visiting the School.
The personal data we process takes different forms – it may be factual information, expressions of opinion, images or other recorded information which identifies or relates to a living individual. Examples include:
names, addresses, telephone numbers, e-mail addresses and other contact details;
admissions, academic, disciplinary and other education related records, information about special educational needs, references, examination scripts and marks;
education and employment data;
images, audio and video recordings;
financial information (e.g. for bursary assessment or for fund-raising);
courses, meetings or events attended.
As a school, we need to process special category personal data (e.g. concerning health, ethnicity, religion) and criminal records information about some individuals (particularly staff). We do so in accordance with applicable law (including with respect to safeguarding or employment) or by explicit consent.
3. COLLECTING, HANDLING AND SHARING PERSONAL DATA
We collect most of the personal data we process directly from the individual concerned (or in the case of pupils, from their parents). In some cases, we collect data from third parties (for example, referees, previous schools, the Disclosure and Barring Service, or professionals or authorities working with the individual) or from publicly available resources.
Personal data held by us is processed by appropriate members of staff for the purposes for which the data was provided. We take appropriate technical and organisational steps to ensure the security of personal data about individuals, including policies around use of technology and devices, and access to school systems. We do not transfer personal data outside of the European Economic Area unless we are satisfied that the personal data will be afforded an equivalent level of protection. In the course of school business, we share personal data (including special category personal data where appropriate) with third parties such as the school nurses, the school’s professional advisors and relevant authorities (e.g. the Local Children Safeguarding Board, DBS, NCTL, HM Revenue and Customs, Department for Education and Department for Work and Pensions). Some of our systems are provided by third parties, e.g. hosted databases, school website, school calendar, school portal and cloud storage providers. This is always subject to contractual assurances that personal data will be kept securely and only in accordance with our specific directions.