At Captain Shaw's, we hold information about our children, families, staff and others who work with our school so that we can provide education, keep children safe, offer appropriate support and run our school effectively.
We take our responsibility for looking after this information seriously.
Captain Shaw's C of E Primary School is the Data Controller for the personal information we collect and use. This means that we are responsible for deciding what information we need, why we need it, how it is used and shared, and how long it should be kept.
We handle personal information in accordance with UK data-protection law, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
We only collect and use personal information when we have a lawful reason to do so.
For children and families, this includes information we need to:
Some of the information we hold is more sensitive, such as information about a child's health, SEND, ethnicity or safeguarding needs. We take particular care when collecting, using, storing and sharing this information.
We have procedures in place to protect personal information and only allow it to be accessed by people who need it for their role.
Like other schools, we also use carefully selected digital systems and services to help us teach, communicate, safeguard children and manage the school. Where another organisation processes information on our behalf, we consider its data-protection and security arrangements.
We only keep information for as long as it is needed and in accordance with our records-retention arrangements.
There are times when we need, or are legally required, to share information with other organisations.
Depending on the circumstances, this can include Cumberland Council, the Department for Education, other schools, health and social-care professionals, safeguarding partners and organisations providing services to the school.
We do not simply share personal information because somebody asks for it. Information is shared where there is a lawful reason and where it is necessary and appropriate to do so.
Safeguarding children is particularly important. Data-protection law does not prevent us from sharing information where this is necessary to protect a child.
Data-protection law gives people rights over their personal information.
Depending on the circumstances, these can include rights to:
Children have data-protection rights too. As they grow and develop, we help them understand that information about them belongs to them and should be treated with care.
Our full privacy notices explain in greater detail what information we collect, why we use it, the legal basis for doing so, who we may share it with, how long we keep it and the rights individuals have over their information.
Our Data Protection Officer (DPO) is:
Mr Terentius Jackson – Headteacher
The DPO oversees how the school meets its data-protection responsibilities and is a point of contact for questions or concerns about how personal information is used.
You can contact the DPO through the school office:
Telephone: 01229 718279
Email: admin@capt-shaws.cumbria.sch.uk
If you would like to know more about how we use your information, exercise one of your data-protection rights or make a Subject Access Request, please contact the school or our Data Protection Officer.
If you are concerned about how we have collected or used personal information, please contact us in the first instance so that we can investigate and respond.
You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.
Information Commissioner's Office
![]()