Releasing Potential

Privacy Notice

Introduction

Releasing Potential takes seriously its responsibility to protect your data, and keep you informed about what we collect and how we process it. This statement is intended to provide transparency to all those whose information we hold, and to ensure that the individuals we come into contact with are aware of their rights under the General Data Protection Regulations (GDPR). Please contact the Data Protection Officer named below if you have any questions or comments about this document.

Contact details

Releasing Potential
7 Kingscroft Court
Ridgway
Havant
PO9 1LS
Email: admin@releasingpotential.com
Website: www.releasingpotential.com
Tel: 02392 479762

DPO: Catherine Brennan
Email: catherine@releasingpotential.com
Tel: 02392 479762

Types of personal data we process

Type	Source	Lawful basis	How processed
Students’ personal data : Name, address, DOB, previous school, medical, academic history, safeguarding history, progress, incidents	Local Authority, previous school, parents/social worker	Statutory requirement for Ofsted/HMI Parental consent forms termly	Shared electronically with statutory agencies eg DfE, Local Authorities, and in person with HMI/Ofsted inspectors. Shared when appropriate with other agencies in the public interest for safeguarding reasons only.
Staff and trustees’ personal data: Name, address, DOB, work history, educational achievements, criminal records, health disclosure, financial information including bank account numbers, copies of identity documents eg passport and driving license. Photographs	Staff provide this data on joining the organisation	Statutory requirement for HMRC, Ofsted/HMI	All staff details are held electronically on Single Central Record and in paper personnel file. Information shared only with statutory bodies such as HMRC, Ofsted/HMI. This is done electronically via government portals and in person during inspections. Staff have a photo and brief biography on the school website. We provide references for former employees, consent is assumed if the candidate has named us as referee.
Parents/carers personal data: Name, address, telephone numbers, email address	Parents and carers are required to complete a contact/medical form each term to ensure we hold up to date details. The form includes consent to holding their data.	Consent	This information is not shared externally, and is used only to contact parents/carers in the case of an incident/ emergency.
Members of the public personal data: Name, address, email address, credit card number	Customers provide this information when they make online purchases or sign up to newsletter	Consent	This information is not shared externally. Consent is gained through a tick box on the website to send information about the organisation

How long we keep your data

Student data is archived electronically when a student leaves, and is kept for 10 years
Staff and trustees’ data is archived when a colleague leaves and is kept for 10 years
Data belonging to members of the public is retained for the purposes of information sharing, consent is updated 2 yearly

Data subject rights

The General Data Protection Regulations give individual the following subject rights:

The right to be informed

We must tell individuals what data of there is being collected, how it’s being used, how long it will be kept andwhether it will be shared with third parties.

The right of access

We must tell individuals that they have the right to request a copy of the information we hold on them

The right of rectification

We must tell individuals that they have the right to correct data that is inaccurate or incomplete

The right to be forgotten

We must tell individuals that in certain circumstances, individuals can ask organisations to erase any personal data stored on them.

The right of portability

We must tell individuals that they can request we transfer any data we hold on them to another organisation

The right to restrict processing

We must tell individuals that they have to right to ask that we limit the way we use their personal data

The right to object

We must tell individuals that they have the right to challenge certain types of processing, such as direct marketing
The right to be informed about data processing activities if you believe your data is being processed unlawfully
We must tell individuals that they have the right to ask for a copy of its automated processing activities if they believe data is being processed unlawfully