GDPR & Data Protection
On 25th May 2018, the General Data Protection Regulation (GDPR) became fully operative.
This page will provide information about how BCEHS is managing the changes which the GDPR has brought and how the changes has affected members of the school community who it processes data for.
Statement of Intent
The school’s Statement of Intent indicates the actions it is taking on an ongoing basis to ensure compliance with the GDPR.
Pupil Privacy Notice
Information about how the school processes the personal data of pupils can be found in our Pupil Privacy Notice.
Staff Privacy Notice
Information about how the school processes the personal data of its workforce can be found in our Staff Privacy Notice.
Recruitment Privacy Notice
Information about how the school processes the personal data of appicants for job vacancies can be found in our Recruitment Privacy Notice.
Subject Access Requests
If you would like to make a Subject Access Request under the General Data Protection Regulation (GDPR) legislation, please complete the form below and send it to the email address on the form. Please note:
- Where a request is made by a parent on behalf of a pupil, we will require the permission of the pupil if they are old enough to be able to understand their rights over their own information (this is generally considered to be age 12 and above). This will need to be in the form of a signed letter from the pupil stating that they give permission for their parent to make the SAR on their behalf.
- To protect the personal data that we hold, we are required to confirm the identity of the person making the SAR before releasing data. Therefore we will need to see a copy of photographic identification such as a driving license or passport.
Subject Access Request (SAR) form