Compliance with ‘The General Data Protection Regulations’ (GDPR) introduced on May 25th, 2018.
Challenging Education Ltd will issue schools with Challenging Education Ltd GDPR policy and this will be mentioned in the future SLAs and service purchase documents with schools.
LAWFUL BASIS FOR COLLECTING PERSONAL DATA
No pupil level data will be requested or collected by challenging Education Ltd. In the lawful process of their business, group level data will be collected and processed.
SECURITY OF ELECTRONIC GROUP LEVEL INFORMATION / DATA
Any emails sent containing group level achievement and/or attendance information will be sent password protected / encrypted.
DATA RETENTION PERIODS
Only purposeful information will be kept by Challenging Education, other information will be destroyed.
Challenging Education will keep group level achievement and attendance data statistics from the school as part of its ongoing tracking. Again, this will be password protected, although this will never hold personal information.
When data is to be deleted this will be done securely / confidentially.
CONFIDENTIALITY / SAFEGUARDING Confidentiality will always be ensured when discussing data on the phone or with other professionals. We will always ensure to check confirmation of who we are speaking to.
REGISTERED WITH THE ICO
Challenging Education is NOT registered with the ICO as it only processes information on behalf of another organisation (ie schools.) However, ‘Challenging Education’ adheres to the principles of the data protection act and understands best practice for managing data. It is the decision of the school, through the SLA for how data is processed.
Any data breaches will be reported to the school it relates to and to the ICO if applicable and procedures would be followed.
END OF SCHOOL CONTRACT
At the end of a school contract all confidential data will be securely and confidentially deleted.
SCHOOLS DATA PROTECTION OFFICER (DPO)
Challenging Education will work with the DPO of each school to ensure compliance with processes and procedures.
HOW TO MAKE A COMPLAINT
If any person has a concern over their data held by Challenging Education Ltd, please contact the Directors on 01743 343469, Email firstname.lastname@example.org or contact the Headteacher or Data Protection Officer for the school.
The data collected by Challenging Education on behalf of the school that they have a contract with (SLA) will only be collected for the specified, explicit and legitimate purposes as described above. It will not be further processed in a manner that is not compatible with the purposes. It will not be shared with any third parties for marketing purposes and it will not be shared or referred to in social media.