Here are our GDPR policies:

GDPR Data Protection Policy – November 2021

GDPR Data Protection Framework Document – November 2021

GDPR Learning Policy – November 2021

GDPR Special Category Data Policy – November 2021

GDPR CCTV Policy – November 2021

GDPR IT Security and Acceptable Use Policy – November 2021

GDPR Bring Your Own Device Procedure (BYOD) – November 2021


Privacy Notices

In line with General Data Protection Regulations, please find details of our privacy notices:

GDPR Pupil Privacy Notice – November 2021

GDPR Workforce Privacy Notice – November 2021

GDPR Governors Privacy Notice – November 2021

GDPR Data Breach Procedure Appendix 8


Subject Access Requests

Individuals have the right to access their personal data and supplementary information held by Buxton Infant School.

The GDPR clarifies that the reason for allowing individuals to access their personal data is so that they are aware of, and can verify, the lawfulness of the processing.

GDPR Access to Personal Information Procedure Appendix 6

Please refer to this guidance from the Information Commissioners Office:

If you wish to request information we hold about you, please complete and return the Subject Access Form that can be found in the Data Protection Policy above.

Any request in writing from the individual (Data Subject) will be considered as a valid request, whatever the format as long as it contains the relevant information to enable us to deal with your request.


Records Retention Schedule

Personal data will be kept securely in accordance with the school’s data protection obligations.  The length of time data will be retained for is detailed here:


For further help and information about processing and our commitment to keeping data safe, please contact our Data Protection Officer:

Data Protection Officer Laura Bowers/Helen Williams (Data Lead)
DPO Email:
DPO Phone: 01298 26660/01298 22499
DPO Address: Hardwick Square, Buxton SK17 6QB