Data Protection & Personal Information

Data Protection & Personal Information

How we use and protect personal information

The Trust and our schools use personal information to support education, keep children safe and run our services effectively.

This page explains how we use personal information, your rights, and what to do if you have a concern.

What is personal information?

Personal information (sometimes called personal data) means information that identifies a person.

This may include:

  • pupil records and assessment information
  • names and contact details
  • attendance information
  • medical or SEND information
  • staff or parent information

How we use personal information

We use personal information to:

  • provide education and support for pupils
  • communicate with families
  • meet legal and safeguarding responsibilities
  • manage school and Trust services

We only use personal information where we have a lawful reason to do so.

Read our full Privacy Notices:

Your rights

Data protection law gives you rights over personal information. These include the right to:

  • ask what information we hold
  • request access to personal information
  • ask us to correct information that is inaccurate
  • raise concerns about how information is handled

Some rights may be limited where legal or safeguarding duties apply.

Children and personal information

Children also have rights over their personal information.

As children grow older and show enough understanding, they may be able to make their own decisions about how their information is used. Each situation is considered individually, taking account of the child’s understanding and wellbeing.

If you have a concern about personal information

If you are concerned about how personal information has been used or handled, you can raise a data protection concern with us.

Data protection concerns are handled under a separate process from the school’s general complaints procedure.

You can raise a concern by:

  • completing our online Data Protection Concern Form
  • contacting the Trust Data Protection Officer (DPO)

Raise a Data Protection Concern:

What happens next

When you submit a concern:

  • we will normally acknowledge it within 30 days
  • the Trust’s Data Protection Officer will review and investigate
  • we will explain the outcome and any actions taken

If you are not satisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO).

Need help?

Data Protection Officer (DPO)

Email: dpo@abbeytrust.org

Further information and policies