At Alfred Sutton, we comply with the UK General Data Protection Regulation (UK GDPR) which ensures a balance between an individual’s rights to privacy and the lawful processing of personal data undertaken by organisations in the course of their business. It aims to protect the rights of individuals about whom data is obtained, stored, processed or supplied and requires that organisations take appropriate security measures against unauthorised access, alteration, disclosure or destruction of personal data.

We have appointed a data protection office (DPO) to oversee compliance with data protection within our organisation. If you have any questions about how we handle your personal information which cannot be resolved by the School Business Manager, then you can contact the DPO on the details below: –

Data Controller Name: Craig Stilwell

Data Controller Details: Judicium Consulting Ltd, 72 Cannon Street, London, EC4N 6AE

Data Controller Email: dataservices@judicium.com

You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues at https://ico.org.uk/concerns

Data Protection Policies

Data Protection Policy

IT Acceptable Use Policy

Data Retention Policy

Freedom of Information & Publication Scheme

Social Media Policy

CCTV Policy

Data Breach Policy

Privacy Notices

Privacy Notice for Pupils & Parents

Privacy Notice for Staff

Privacy Notice for Governors & Volunteers

Privacy Notice for Job Applicants

Privacy Notice for Visitors & Contractor

DFE Privacy Notice for Attendance Data