At Bill Quay Primary school, we collect and use pupil information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, which replaced the Data Protection Act 1998. The lawful basis for processing pupil data includes compliance with the Education Act 1996 and relevant provisions under the UK GDPR.

• The school processes personal data under Article 6 of the UK GDPR, which covers the lawful bases for processing personal data (such as legal obligation and public task).
• When processing special category data (sensitive data), the school relies on Article 9 of the UK GDPR, ensuring additional protections are in place.

These legal frameworks ensure that pupil information is handled lawfully, fairly, and securely, supporting our educational and safeguarding responsibilities.

GDPR Policies:

Please refer to our 'Policies' page for our:

Data Protection Policy

Data Breach Policy

Record Keeping and Retention Policy

Privacy Notices:

These can be found below.