Our privacy notices explain how we collect, use, store and share personal information, including the purposes for which it is processed, the lawful bases for processing, how long information is retained and the rights individuals have.

Please refer to the relevant privacy notice for further information:

* Pupil Privacy Notice

* Parent and Carer Privacy Notice

* Staff Privacy Notice

* Job Applicant Privacy Notice

* Governor Privacy Notice, where applicable

We maintain policies and procedures to support compliance with data protection legislation and ensure that personal information is managed appropriately throughout its lifecycle.  These include are available on our Policies page.  Our arrangements cover the secure storage, appropriate sharing, retention and disposal of information, as well as the management of information security incidents and requests from individuals wishing to exercise their data protection rights.

The school has a Data Protection Officer (DPO) who provides advice and guidance on data protection compliance and monitors the school’s arrangements for protecting personal information.

St Cuthbert Mayne School outsources its Data Protection Officer (DPO) service to Devon Education Services, Devon County Council. Our appointed Data Protection Officer is:

Jenny Goodall

School Data Protection Team

Devon Education Services, Devon County Council

Room L60, County Hall

Topsham Road

Exeter

EX2 4QD

Email: jenny.goodall@devon.gov.uk

If you have any questions about how the school collects, uses or protects personal information, wish to exercise your data protection rights or would like to raise a data protection concern, you can contact our Data Protection Officer using the details above.  Alternatively, contact the school Data Protection Link Officer at: gdpr@stcm.school. 

Under data protection legislation, individuals have the right to request access to their own personal information held by the school. This is known as a Subject Access Request (SAR).

Requests can be made verbally or in writing and should be directed to the school using the following email address gdpr@stcm.school.   Please provide sufficient information to help us identify the individual concerned and locate the relevant records. We may need to verify your identity or clarify the scope of your request before proceeding.

Parents and carers may, in certain circumstances, request access to information on behalf of their child. However, parental responsibility does not automatically entitle a parent to access all information held about a child. The school will consider the child’s age, understanding, wishes and circumstances, together with the authority of the person making the request, when determining whether access can be provided.

We will respond within the statutory timeframe, normally one calendar month from receipt of the request and any information needed to verify identity or clarify the request, where applicable. The response period may be extended by up to two further months where permitted by law, taking into account the complexity and number of requests. Requests are generally free of charge, although a reasonable fee or refusal may be permitted in certain circumstances under data protection legislation.

We take concerns about the handling of personal information seriously. If you believe that we have not handled your information appropriately, or that we have not complied with data protection legislation, you have the right to raise a complaint with the school.

Please contact the school using the following email address gdprcomplaints@stcm.school, explaining your concerns and providing any relevant information. Complaints may be made verbally or in writing.

If you remain dissatisfied with our response or believe that your personal information has not been handled in accordance with the law, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator. You can find further information on the ICO website:

⁠www.ico.org.uk   

You may contact the ICO directly, although you may find it helpful to raise your concerns with the school first so that we have an opportunity to investigate and respond.

The school is also subject to the Freedom of Information Act 2000. This provides a right of access to recorded information held by public authorities, subject to applicable exemptions.

Our Freedom of Information policy explains how to access information that we routinely publish through our Publication Scheme.

Requests should be made in writing and should clearly describe the information being sought. Please send your request by email to gdpr@stcm.school or by post to St Cuthbert Mayne School, Trumlands Road, Torquay, TQ1 4RN. We will respond within the statutory timeframe, normally 20 working days, in accordance with the requirements of the legislation. Before submitting a request, please check our website and Publication Scheme, as the information you require may already be publicly available.

If you require assistance accessing any of the documents referred to on this page, or have a question about our data protection arrangements, please contact the school office using the contact details provided on our website.