Data Protection & Personal Information

How we use and protect personal information

The Trust and our schools use personal information to support education, keep children safe and run our services effectively. This page explains how we use personal information, your rights, and what to do if you have a concern.

What is personal information?

Personal information (sometimes called personal data) means information that identifies a person.

This may include:

pupil records and assessment information
names and contact details
attendance information
medical or SEND information
staff or parent information

How we use personal information

We use personal information to:

provide education and support for pupils
communicate with families
meet legal and safeguarding responsibilities
manage school and Trust services

We only use personal information where we have a lawful reason to do so.

Read our full Privacy Notices

Your rights

Data protection law gives you rights over personal information. These include the right to:

ask what information we hold
request access to personal information
ask us to correct information that is inaccurate
raise concerns about how information is handled

Some rights may be limited where legal or safeguarding duties apply.

Children and personal information

Children also have rights over their personal information.

As children grow older and show enough understanding, they may be able to make their own decisions about how their information is used. Each situation is considered individually, taking account of the child’s understanding and wellbeing.

If you have a concern about personal information

If you are concerned about how personal information has been used or handled, you can raise a data protection concern with us.

Data protection concerns are handled under a separate process from the school’s general complaints procedure.

You can raise a concern by:

completing our online Data Protection Concern Form
contacting the Trust Data Protection Officer (DPO)

Raise a Data Protection Concern: Data Protection Concern Form

Read our Data Protection Complaints Policy

What happens next

When you submit a concern:

we will normally acknowledge it within 30 days
the Trust’s Data Protection Officer will review and investigate
we will explain the outcome and any actions taken

If you are not satisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO).

Need help?

Data Protection Officer (DPO)
Email: dpo@abbeytrust.org

Further information and Policies

Complete our Subject Access Request (SAR) online.