Privacy Policy

This privacy policy explains how Rhos y Fedwen Primary School (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our website at https://www.rhosyfedwenprimary.co.uk (the “Site”). We are committed to protecting your privacy and ensuring that any personal information we collect is kept secure and confidential.

What information we collect

We collect personal information when you use our Site, such as when you fill out a contact form or subscribe to our newsletter. The personal information we may collect includes:

• Your name
• Your email address
• Your phone number
• Your child’s name and age
• Any other information you choose to provide to us

How we use your information

We use your personal information for the following purposes:

• To respond to your inquiries and requests
• To send you our newsletter and other communications related to our school
• To provide you with information about our school and upcoming events
• To comply with legal obligations

We will never share your personal information with third parties for marketing purposes.

How we protect your information

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, or misuse. However, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.

Your rights

You have the right to access, correct, or delete your personal information that we hold. If you wish to exercise any of these rights, please contact us using the contact information provided below.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will post any updates to this Privacy Policy on our Site and will indicate the date of the most recent update.

Contact us

If you have any questions or concerns about this Privacy Policy or our practices regarding your personal information, please contact us.

GDPR

Rhos y Fedwen Primary School is committed to protecting the personal information of its pupils, parents, staff, and other stakeholders. This GDPR policy outlines our obligations under the GDPR and how we ensure compliance with its requirements.

Data Controller and Data Protection Officer

Rhos y Fedwen Primary School is the data controller of the personal information it collects and processes. We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance. Our DPO can be contacted via the contact us page.

Lawful Basis for Processing Personal Information

We will only process personal information if we have a lawful basis to do so. The lawful basis for processing personal information may include:

• Consent: We will obtain consent from individuals to process their personal information for specific purposes.
• Contract: We will process personal information as necessary to perform our contractual obligations to pupils, parents, and staff.
• Legal obligation: We will process personal information as required by law or regulatory bodies.
• Vital interests: We will process personal information to protect the vital interests of individuals.
• Legitimate interests: We will process personal information as necessary to pursue our legitimate interests, provided that the interests of individuals do not override our interests.

Rights of Data Subjects

Under the GDPR, individuals have the following rights with respect to their personal information:

• Right of access: Individuals have the right to access their personal information and obtain copies of it.
• Right to rectification: Individuals have the right to have inaccurate or incomplete personal information corrected.
• Right to erasure: Individuals have the right to have their personal information erased in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing: Individuals have the right to restrict the processing of their personal information in certain circumstances, such as when the accuracy of the information is contested.
• Right to data portability: Individuals have the right to receive their personal information in a structured, commonly used, and machine-readable format and have it transmitted to another controller.
• Right to object: Individuals have the right to object to the processing of their personal information in certain circumstances, such as when the processing is based on legitimate interests.

Data Breach Notification

In the event of a data breach involving personal information, we will promptly assess the breach and notify the relevant supervisory authority and affected individuals as required by law.

Data Retention

We will only retain personal information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law or regulatory bodies.

Training and Awareness

We will ensure that our staff are trained and aware of their responsibilities under the GDPR and this GDPR policy.

Updates to this GDPR Policy

We may update this GDPR Policy from time to time to reflect changes in our practices or legal obligations. We will post any updates to this GDPR Policy on our website and will indicate the date of the most recent update.

Contact us

If you have any questions or concerns about this GDPR Policy or our practices regarding personal information, please contact our Data Protection Officer at the contact information provided above.