Last updated: July 2025

This privacy notice explains how Annesley Primary and Nursery School collects, uses, stores, and protects personal data about pupils, parents, carers, staff, and website visitors in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Who We Are

Annesley Primary and Nursery School is the data controller for the personal data we hold.

Address:
Annesley Primary and Nursery School
Forest Road
Annesley Woodhouse
Kirkby-in-Ashfield
Nottinghamshire
NG17 9BW

Phone: 01623 468806
Email: office@annesley.notts.sch.uk

​

Our Data Protection Officer (DPO) is provided by Nottinghamshire County Council.
DPO Email: DPO@nottscc.gov.uk
Phone: 0115 804 3800

​

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Pupils:

Name, date of birth, address

Contact details

Medical and dietary information

Special educational needs

Attendance, attainment, and behaviour records

Photographs (with consent)

Safeguarding information

Parents/Carers:

Names and contact details

Relationship to pupil

Attendance at meetings or events

Records of communications with the school

Staff:

Employment and payroll details

DBS checks

Contact and emergency contact information

Appraisal and training records

Website Visitors:

IP address

Browser type

Cookie preferences

Contact form details (if submitted)

​

3. How We Use Personal Data

We use personal data to:

Support pupil learning and wellbeing

Monitor and report on progress

Provide pastoral care and safeguarding

Communicate with parents and carers

Manage school administration and staffing

Meet our legal and statutory obligations (e.g. to Ofsted, DfE, and the Local Authority)

​

4. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

Public task – to carry out our official functions as a school

Legal obligation – to comply with the law (e.g. safeguarding, education law)

Consent – for things like using images on the website (can be withdrawn at any time)

Vital interests – in emergency situations affecting health or safety

​

5. Data Sharing

We may share data with:

Nottinghamshire County Council

Department for Education (DfE)

NHS and school nurse team

Ofsted

Educational software providers (e.g. ParentPay, learning platforms)

External safeguarding agencies where required

We only share data when it is lawful and necessary. All third parties are required to protect personal data appropriately.

​

6. How We Store and Protect Data

We store personal data securely using both physical and digital security measures. Access is limited to staff who need it.

Data is retained only for as long as necessary. We follow the IRMS School Toolkit for data retention guidelines.

​

7. Your Rights Under Data Protection Law

You have the right to:

Request access to the personal data we hold about you or your child

Ask us to correct inaccurate data

Request data erasure (in certain cases)

Object to or restrict data processing

Withdraw consent (where applicable)

Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO contact:
www.ico.org.uk
Phone: 0303 123 1113

To exercise your rights, contact our school office or the DPO.

​

8. Photographs and Media Consent

We will only use images of pupils on the website, in social media, or publications where we have received prior consent. Consent can be withdrawn at any time by contacting the school office.

 

9. Cookies

Our website uses cookies to improve user experience. You can manage cookie preferences via your browser or our cookie banner.

For full details, see our cookie policy.

 

10. Changes to This Policy

We review and update this policy regularly. The latest version will always be available on our website.

 

11. Contact Us

If you have any questions about this policy or your data, please contact:

📧 Email: office@annesley.notts.sch.uk
📞 Phone: 01623 468806
🧾 Or contact our DPO: DPO@nottscc.gov.uk