Home Page

Privacy Notices

Privacy notice for pupils and their families


Data Protection: How we use pupil information


The name and contact details of our Data Protection Officer is: 

  • Lee Henley – Strategic Lead – Information Governance, Thurrock Council (01375 652500)

What information do we collect and why?


Abbots Hall Primary Academy collect and hold personal data relating to our pupils and may also receive data about them from their previous school, local authority and/or the Department for Education (DfE).


We collect and use personal data in order to meet legal requirements and legitimate interests set out in the GDPR and UK law, including those in relation to the following:  

  • Article 6 and Article 9 of the GDPR
  • Education Act 1996  
  • Regulation 5 of The Education (Information About Individual Pupils) (England)

Regulations 2013


This data will include;

  • their contact details
  • national curriculum assessment results,
  • attendance information,
  • pastoral information,
  • any exclusion information,
  • where they go after they leave us,
  • personal characteristics such as their ethnic group,
  • any special educational needs,
  • relevant medical information,
  • CCTV systems to monitor and collect visual images for security and the prevention and detection of a crime.


Why we collect and use this information


We use this personal data to;

  • safeguard pupils
  • support our pupils’ learning
  • monitor and report on their progress
  • provide appropriate pastoral care
  • assess the quality of our service; and
  • to comply with the law regarding data


Collecting pupil information


Whilst the majority of pupil data you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with Data Protection Regulations, we will inform you whether you are required to provide certain pupil data to us or if you have a choice in this.

Statutory Data collection requirements:

We are required, by law, to pass certain data about our pupils to our local authority (LA) and the Department for Education (DfE).


We routinely share pupil data with:

  • schools that the pupil’s attend after leaving us
  • our local authority
  • the Department for Education (DfE)


We hold personal pupil data for the duration of the time children are with us and we hold assessment data for a further 7 years. We will not give data about our pupils to anyone without the consent unless the law and our policies allow us to do so.


The National Pupil Database (NDP)


The NDP is owned and managed by the DfE and contains data about pupils in schools in England. It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the Department. It is held in electronic format for statistical purposes. This data is securely collected from a range of sources including schools, local authorities and awarding bodies.


We are required by law, to provide data about our pupils to the DfE as part of statutory data collections such as the school census and early years’ census. Some of this data is then stored in the NPD. The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013. To find out more about the NPD, go to


Personal Data shared by the DfE


DfE may also share pupil level personal data that we supply to them, with third parties. This will only take place where legislation allows it to do so and it is Data Protection compliant.

Decisions on whether DfE releases this personal data to third parties are subject to a robust approval process and are based on a detailed assessment of who is requesting the data, the purpose for which it is required, the level and sensitivity of data requested and the arrangements in place to store and handle the data. To be granted access to pupil level data, requestors must comply with strict terms and conditions covering the confidentiality and handling of data, security arrangements and retention and use of the data.


For more information on how this sharing process works, please visit:

For information on which third party organisations (and for which project) pupil level data has been provided to, please visit:

If you need more information about how our local authority and/or DfE collect and use your information, please visit:


Requesting access to your personal data


Under data protection legislation, parents and pupils have the right to request access to data about them that we hold. To make a request for your personal data, or be given access to your child’s educational record, please contact us via the school office.


You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means
  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
  • claim compensation for damages caused by a breach of the Data Protection regulations


If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office at

For further information, please see our Data Protection Policy in the Policies section of our website.