GDPR

The General Data Protection Regulation (GDPR) is a piece of legislation that determines how people's personal data is processed and kept safe, and the legal rights individuals have in relation to their own data.


For the purposes of GDPR The Elliot Foundation Multi Academy Trust is the 'data controller'. The Data Protection Officer for the trust is Jem Shuttleworth who can be contacted on jem.shuttleworth@elliotfoundation.co.uk.


Our Local Compliance Officer is Jay Handley who can be contacted on jay.handley@gbshp.org.


Across the trust we work to identify and monitor the use of personal data, to undertake the necessary processes for auditing and assessing risk and to ensure that policies are in place to support our schools to sustain compliance. For more information, please click here.


Individuals can ask for copies of the Personal Data the Trust holds about them and other details about how the Trust uses their Personal Data. Such requests are known as Subject Access Requests (SAR). To make a Subject Access Request, please follow the guidance here.