Data Protection

Duxford C of E Primary school holds and processes personal information on each pupil, and limited information on parents, in order to provide a rounded education and a safe environment for each child.  The legal basis for processing personal data under the General Data Protection Regulations May 2018 is to complete a PUBLIC TASK (that of provision of an education).  The school complies with the General Data Protection Regulations May 2018 and this is demonstrated by our Data Protection Policy and linked policies such as Data Breach Policy, Internet Safety Policy, Special Category Data Policy and ICT Acceptable Use Policy. These are all available from our policies page. NB Some are in draft form while the school waits for final review by the Governing body. We commit to training our staff and volunteers to understand the importance of handling data securely. We understand that privacy is important to you and your child.


CONSENT: Where the data stored and processed is to enhance the educational provision, but is not a key element of providing an education, we will seek consent from a parent.  This includes: 

  • Photos, images and videos to be displayed in school and on the school website.  Such images will be removed and deleted 1 year after Year 6 unless specific consent obtained say, for marketing purposes. Images are stored on the school’s secure network and are appropriate.  If a child objects to a photo it will be removed.
  • Additional contact information

 The school has a Data Protection Officer provided through the Cambs County Council (ICT Services); they can be contacted through the school at


Images: The school asks all parents, carers and visitors to our school to ask permission before taking photos and video and to agree such files are used for personal use only and are not shared with social media sights or other agencies. The school will only publish images on this website if parental permission has been provided.

Rights: Parents and pupils have the right to access the information we hold about them; this is known as a Subject Access Request and should be made in writing.  The school must supply the information requested within one school month or provide a reason for an extension of up to two months.

Where you are unhappy with how your data has been handled by the school you can make a complaint to the Data Protection Officer, Vanessa Green, at or if this does not provide satisfaction direct to the Information Commissioner at

Separate from the GDPR, the Department for Education regulations provide a pupil’s parents (regardless of the age of the pupil) with the right to view, or to have a copy of, their child’s educational record at the school.  If you wish to exercise this right you should write to the school 

The Freedom of Information Act requires publicly funded bodies, including schools, to be clear about the information they publish. We have produced a publication scheme setting out all the information we publish on a regular basis and where to find it.  Please ask at the school office to see a copy of the scheme.


Use of our Website: Duxford Primary School acknowledges the right to privacy of the users of this website.  Any information gathered via this site is for the day to day running of the school’s business (education and associated pastoral care) and no information so gathered will be passed on to a third party for any purpose whatsoever. Any statistics derived from the use of this site are for the understanding of general trends and no individual users shall be identifiable.

External Links: This site contains links to other sites made in good faith. The school is not responsible for the privacy practices or the content of such websites and has no control over the content that may be found there.  If any site we link to causes concern, please contact our Business manager – Mrs Jelliman, at


Privacy Notices
Please click on the documents below to read our various privacy notices;
Please see below Data Protection Policies relevant to our school.