Releasing Potential  

Privacy Notice  


Releasing Potential takes seriously its responsibility to protect your data, and keep you informed about what we collect and how we process it. This statement is intended to provide transparency to all those whose information we hold, and to ensure that the individuals we come into contact with are aware of their rights under the General Data Protection Regulations (GDPR). Please contact the Data Protection Officer named below if you have any questions or comments about this document.  

Contact details

Releasing Potential
7 Kingscroft Court
Tel: 02392 479762

DPO: Catherine Brennan
Tel: 02392 479762

Types of personal data we process 

Type   Source  Lawful basis  How processed  
Students’ personal data : Name, address, DOB, previous school, medicalacademic history, safeguarding history, progress, incidents  Local Authority, previous school, parents/social worker 

Statutory requirement for Ofsted/HMI 

Parental consent forms termly 

Shared electronically with statutory agencies eg DfE, Local Authorities, and in person with HMI/Ofsted inspectors. Shared when appropriate with other agencies in the public interest for safeguarding reasons only. 
Staff and trustees’ personal data: Name, address, DOB, work history, educational achievements, criminal records, health disclosure, financial information including bank account numbers, copies of identity documents eg passport and driving license. Photographs   Staff provide this data on joining the organisation   Statutory requirement for HMRC, Ofsted/HMI 

All staff details are  held electronically on Single Central Record and in paper personnel file. Information shared only with statutory bodies such as HMRC, Ofsted/HMI. This is done electronically via government portals and in person during inspections. 

Staff have a photo and brief biography on the school website.  

We provide references for former employees, consent is assumed if the candidate has named us as referee.  

Parents/carers personal data: Name, address, telephone numbers, email address   Parents and carers are required to complete a contact/medical form each term to ensure we hold up to date details. The form includes consent to holding their data.  Consent  This information is not shared externally, and is used only to contact parents/carers in the case of an incident/ emergency. 
Members of the public personal data: Name, address, email address, credit card number   Customers provide this information when they make online purchases or sign up to newsletter  Consent  This information is not shared externally. Consent is gained through a tick box on the website to send information about the organisation 

How long we keep your data 

  • Student data is archived electronically when a student leaves, and is kept for 10 years  
  • Staff and trustees’ data is archived when a colleague leaves and is kept for 10 years 
  • Data belonging to members of the public is retained for the purposes of information sharing, consent is updated 2 yearly 

Data subject rights

The General Data Protection Regulations give individual the following subject rights:

  • The right to be informed

We must tell individuals what data of there is being collected, how it’s being used, how long it will be kept andwhether it will be shared with third parties.

  • The right of access

We must tell individuals that they have the right to request a copy of the information we hold on them

  • The right of rectification

We must tell individuals that they have the right to correct data that is inaccurate or incomplete

  • The right to be forgotten

We must tell individuals that in certain circumstances, individuals can ask organisations to erase any personal data stored on them.

  • The right of portability

We must tell individuals that they can request we transfer any data we hold on them to another organisation

  • The right to restrict processing

We must tell individuals that they have to right to ask that we limit the way we use their personal data

  • The right to object

We must tell individuals that they have the right to challenge certain types of processing, such as direct marketing
The right to be informed about data processing activities if you believe your data is being processed unlawfully
We must tell individuals that they have the right to ask for a copy of its automated processing activities if they believe data is being processed unlawfully


Releasing Potential
Unit 7 Kingscroft Court


Charity No: 1097440
Company No: 04622100


023 9247 9762


© Releasing Potential 2017