GDPR

The General Data Protection Regulation (GDPR) is a piece of legislation that determines how people's personal data is processed and kept safe, and the legal rights individuals have in relation to their own data.

For the purposes of GDPR The Elliot Foundation Multi Academy Trust is the 'data controller'. The Acting Data Protection Officer for the trust is Simon Pink who can be contacted on simon.pink@elliotfoundation.co.uk.

Our Local Compliance Officer is Jay Handley who can be contacted on jay.handley@gbshp.org.

Across the trust we work to identify and monitor the use of personal data, to undertake the necessary processes for auditing and assessing risk and to ensure that policies are in place to support our schools to sustain compliance. For more information, please click here.

Lightspeed Systems (Monitoring online activity) - Schools are legally required to comply with statutory obligations regarding safeguarding and child protection. This Privacy Notice explains how we collect, store and use personal data about pupils and is specific to the use by pupils of their school provided email address and resulting online activity.

Individuals can ask for copies of the Personal Data the Trust holds about them and other details about how the Trust uses their Personal Data. Such requests are known as Subject Access Requests (SAR). To make a Subject Access Request, please follow the guidance here.