Data Protection GDPR

Data Protection

Data Protection

How we use Pupil information

We collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE). We use this personal data to:

  • Support our pupils’ learning
  • Monitor and report on their progress
  • Provide appropriate pastoral care; and
  • Assess the quality of our services

Please click here for Waverley School Privacy Notice

Please click here for the Waverley School Retention Policy

Article 30 – Register of Processing Activities

 Article 35 – Data Protection impact Assessment 


  1. Security Data Protection Incident Reporting Procedure (whistleblowing and retention policy)
  2. Access Control Policy
  3. Cyber and Information Security Policy
  4. Freedom of Information  Policy
  5. Acceptable Use Policy
  6. Bring Your Own Device Policy
  7. Data Protection Policy (read in line with Acceptable Use, Subject Access Policy & Procedure, Freedom of Information, Security incidents reporting and use of cloud services)
  8. Information and handling information (read in line with Acceptable Use, Access Control, Code of conduct, Data Protection, Freedom of Information and Retention policies and Contracts/SLA agreements)
  9. School Acces policy