The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 set out how organisations must collect, use, store, and protect personal information. Rudgwick Pre‑school is committed to meeting these requirements and ensuring that all personal data is handled lawfully, fairly, and securely.
UK GDPR is based on six core Privacy Principles, which require that personal data must be:
- Processed lawfully, fairly and transparently We only collect personal data when we have a lawful reason to do so, and we explain clearly how that information will be used.
- Collected for specified, explicit and legitimate purposes Personal data is only used for the purpose for which it was originally obtained.
- Adequate, relevant and limited to what is necessary We only collect the information we need in order to fulfil our responsibilities.
- Accurate and kept up to date We take steps to ensure the information we hold is correct and provide ways for parents and carers to update it when needed.
- Kept only for as long as necessary Personal data is retained only for the period required to meet legal, regulatory, or operational obligations.
- Handled securely We use appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access.
These principles are supported by a further requirement: accountability. This means we are responsible for demonstrating our compliance with data protection law and ensuring that robust policies, procedures, and records are in place.
We have updated our Privacy Policy and internal procedures to ensure full compliance with UK GDPR. Please click here for more information -> Privacy Notice