1.Information and data protection policies and documents

We mange information and data according to the policies and documents below: 

2. Privacy Notices

We collect personal information from parents, pupils, staff, visitors & volunteers so that we: 

• provide children with an education
• keep everyone safe
• communicate effectively
• fulfil our legal obligations as a public body

We have different privacy notices for:

• Pupils
• Parents/Carers
• Staff
• Governors 

You can find out more about the detail of what we collect in our Privacy Notices below:

3. Your rights 

Individuals whose data we manage have the right to: 

• access their data (Subject Access Request)
• request corrections
• ask for deletion (where applicable)
• object to processing
• complain about how we managed their data

Parents also have the right to see their child's educational record. 

Everyone has the right to ask broader questions about the data the school manages under the Freedom of Information Act (FOI) and Environmental Information Regulations (EIR). You can find out what we already publish by looking through our Publication Scheme shown above. 

4. How to make a Subject Access Request (SAR)

Individuals whose data we manage have the right to request access to personal data the school holds about them or their child.

Subject access requests can be verbal or in writing and made to any member of staff. So that we can be sure of providing the information being requested, we prefer individuals to use our online Subject Access Request (SAR) form:

Subject Access Request Form Witley C of E Infant School

 They should include:

1. Name of individual
2. Correspondence address
3. Contact number and email address
4. Details of the information requested

When making a request there is no special wording required, you just need to make is clear what information you are asking for. 

We usually respond within one calendar month. If your request is complex, we may need to extend this by up to two further months, but we will keep you informed and explain why. 

We may need to ask for proof of identity (such as photo ID, proof of address) to make sure we are giving information to the right person. 

If you need help completing the form, please contact the school office office@witley.surrey.sch.uk in the first instance and we will assist you. 

5. How to make a Freedom of Information (FOI) or Environmental Information Regulation (EIR) request

If you have a question about the general data the school manages that is not already published, contact the school business manager office@witley.surrey.sch.uk. 

 Requests made under the FOI Act must be made in writing. Requests made under the EIR may be verbal or in writing.

 We will usually respond within 20 working days. If your request is complex, we can extend this, but we will let you know and explain why.

6. How to report a data protection, publication or SAR concern or complaint

If you have a concern or complaint about how the school collects and manages personal data, how it publishes information or how it has handled your subject access request (SAR), please contact us using the form below. We will acknowledge your complaint and aim to respond in full within 30 calendar days for general data protection or SARs complaints and within 20 working days for FOI and EIR complaints.

If we need more time, we will let you know.

If you need help completing the form, please contact the school office (office@witley.surrey.sch.uk) or our Data Protection Officer and we will assist you.

If your concern remains unresolved after 31 days for general data protection or SARs and after 21 school days for FOI and EIR complaints, contact our Data Protection Officer (DPO), Rachel Dunnage: DPO@godalminglearning.org.uk

If your concern has not been resolved by the DPO after a further calendar month, you can contact the Information Commissioner’s Office (ICO): Make a complaint about how an organisation has used your personal information | ICO

Please contact the school using this electronic form: General data use and access request Complaints Form (Witley C of E Infant School) – Fill in form

7. Contact the Data Protection Officer (DPO)

Our DPO is independent and available to advise Individuals whose data we manage on data protection matters. You can contact Rachel Dunnage on DPO@godalminglearning.org.uk

8. Information Commissioner's Office (ICO)

The ICO website has a wealth of information and guidance about data protection: For the public | ICO

You can contact the Information Commissioner’s Office by phone: 0303 123 1113

For more ways to get in touch see: How you can contact us | ICO