Privacy Notice - How we use your information
This privacy notice explains what personal data Cobham Community Pre-School collects, why we collect it, how we use it and how we protect it.
The Data Protection Controllers with responsibility for monitoring this privacy notice are Alison Scott and Claire Hargrove.
Why do we collect and use children’s information?
Cobham Community Pre-School will record, process and keep personal information on you and your child in accordance with the General Data Protection Regulations 2018.
We use this data to:
• Offer and allocate places at the setting
• Apply for funding for your child and the pre-school
• Support children’s learning
• Make assessments on children’s development
• Safeguard the children in our care in accordance with relevant legislation
• Comply with Government legislation
• Assess the quality of our services
• Contact you regarding your child.
Cobham Community Pre-School collect, hold and share two kinds of records on children attending our setting.
• Developmental information collected prior to the child starting at the setting
• A copy of the child’s Two-Year-Old Progress Check
• Observations of children in the setting, photographs, video clips, samples of work and developmental assessment records.
• A summary of the child’s EYFS profile report.
• Personal details – including the information provided on the child’s registration form and any consent forms and characteristics such as ethnicity, language and nationality.
• Contractual matters – including the child’s days and times of attendance, a record of the child’s fees and/or funding entitlement, any records of fee reminders and/or disputes
• Emergency contact details – including those people, other than parents/guardians with authorisation to collect the child from the setting.
• Children’s health and well-being – including discussions about every day matters regarding the health and well-being of the child with the parent/guardian, records of accidents and medication records.
• Safeguarding and child protection concerns – including records of all welfare and protection concerns and our resulting actions, meetings and telephone conversations about the child and any information regarding a Looked After Child.
• Early support and SEN – including any focussed intervention provided by our setting, a record of the child’s IEP and, where relevant, their Statement of Special Education Need.
• Correspondence and reports – including letters and emails to and from other agencies and any confidential reports relating to specific children
Whilst the majority of information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain information to us or if you have a choice in this.
The Early Years Foundation Stage (Welfare Requirements) Regulations 2012 place a legal obligation upon us to collect and process much of the information detailed above. Therefore, we do not require your consent to collect this information as we have a fair and lawful reason for doing so.
All forms collecting data will clearly state our lawful basis for processing the information you supply and where the request is voluntary or consent is required this will be clearly stated.
With your consent, we will also record your child’s activities for their individual learning record. This may include photographs and videos. You will have the opportunity to withdraw your consent at any time, for images taken by confirming so in writing.
Storing children’s data
We ensure that access to children’s files is restricted to those authorised to see them such as the Pre-School Manager, Deputy Manager/SENCo, the child’s key person and the Pre-School Administrator. These confidential records are stored in locked filling cabinets at the setting and in the Administrator’s office. Some information is also stored electronically in password protected files, on computers only accessible by further password security.
Retention of your data
Your child’s learning and development records are maintained by us and handed to you when your child leaves.
Other information held on you and your child is kept in accordance to the legal retention periods for the data, for example all medical, accident and child protection records are kept for 21years after you child leaves us.
The information that you provide to us, whether mandatory or voluntary, will be regarded as confidential. We do not share information about your child with anyone without consent unless the law and our policies allow us to do so.
We routinely share information without consent with:
• schools that children attend after leaving us
• our local authority for the purposes of the Universal Funding for 3 & 4 year olds, Early Years Pupil Premium and the Early Years Census
• the Department for Education (DfE) as part of statutory data collections.
We are obliged to share confidential information without authorisation from the person who provided it, or to whom it relates, when:
• there is evidence that the child is suffering, or is at risk of suffering, significant harm.
• There is reasonable cause to believe that a child may be suffering, or is at risk of suffering, significant harm
• It is to prevent significant harm arising to children, young people or adults, including the prevention,
detection and prosecution of serious crime.
The National Pupil Database (NPD)
The NPD is owned and managed by the Department for Education and contains information about children in schools in England. It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the Department. It is held in electronic format for statistical purposes. This information is securely collected from a range of sources including schools, local authorities and awarding bodies.
We are required by law, to provide information about our pupils to the DfE as part of statutory data collections such as the early years’ census. Some of this information is then stored in the NPD. The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013.
Find out more about the NPD.
The department may share information about our pupils from the NPD with third parties who promote the education or well-being of children in England by:
• conducting research or analysis
• producing statistics
• providing information, advice or guidance
The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data. Decisions on whether DfE releases data to third parties are subject to a strict approval process and based on a detailed assessment of:
• who is requesting the data
• the purpose for which it is required
• the level and sensitivity of data requested: and
• the arrangements in place to store and handle the data
To be granted access to pupil information, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.
More information about the department’s data sharing process can be found on its website.
Information about which organisations the department has provided pupil information, (and for which project) can be found on its website.
Further information regarding information sharing and confidentiality can be found in the relevant policies which can be found on our website or are available on request.
Requesting access to your personal data
Under data protection legislation, parents/guardians, children and young people have the right to request access to information about them that we hold. Where a child is too young to give ‘informed consent’ the parent is the ‘subject’ of the file and has a right to see the information held.
Children’s developmental records are shared regularly with parents/guardians and formal requests to access these is not required.
You also have the right to:
• object to processing of personal data that is likely to cause, or is causing, damage or distress
• withdraw consent where given
• prevent processing for the purpose of direct marketing
• object to decisions being taken by automated means
• in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
• claim compensation for damages caused by a breach of the Data Protection regulations
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office
If you would like to get a copy of the information about you that KCC shares with the DfE or how they use your information, please contact:
Information Resilience & Transparency Team
Kent County Council
Email: [email protected]
You can also visit the KCC website if you need more information about how KCC use and store your information.
To contact DfE