These are links to the key published policies of The Kite Academy Trust.  Academy-specific policies can be found on individual academy websites.

The Kite Academy Trust is a charitable company limited by guarantee registered in England and Wales with company number 9785186.  The Registered Office is at Holly Lodge Primary Academy, Stratford Road, Ash Vale, Surrey, England, GU12 5PX.

Data Protection

The Kite Academy Trust is committed to complying with the data protection principles as outlined in the General Data Protection Regulations (UK GDPR) 2018 and the Data Protection Act (DPA) 2018.  The Trust takes its obligations in this regard seriously.

Data Protection Policy

The Kite Academy Trust Data Protection Policy can be found here.

Data Protection Officer

The Data Protection Officer (DPO) is responsible for overseeing data protection within the Kite Academy Trust and its academies.  If you have any questions in this regard, please contact the DPO as below:

Freedom of Information

The Freedom of Information (FOI) Act 2000 aims to promote greater accountability across the public sector.  The Act is overseen by the Information Commissioner and detailed guidance on the legislation can be found on the Information Commissioner's Office (ICO) website.

Under the legislation, schools are required to:
• have a publication scheme which sets out what information they hold and where and how this can be accessed;
• have a Freedom of Information Policy;
• be aware of their statutory responsibility to respond to requests for information the hold.

The Kite Academy Trust strives to be as open as possible in its attitudes, operations, policies and processes, and is pleased to share information about its activities.  Please read our Freedom of Information Policy & Publication Scheme for information available from the Kite Academy Trust under the Freedom of Information Act.

The best way to find information about the Trust and our academies is to use the search feature on our websites however, if you cannot find the information you require,  please read the guidance below on making a request.

Making a Request for Information

For a request to be considered valid under the Freedom of Information Act, it must:
• be in writing;
• include a name and address for correspondence (email address is sufficient);
• Detail the information requested.

However, any request for information received in writing by a member of staff within the Trust can constitute an FOI request.  The Trust may charge a fee for the information or disbursements (postage, photocopying etc. where reasonable).  Once it has received the fee and sufficient detail to fulfill a request, the Trust must respond within 20 working days by:
• confirming whether it holds the information, and
• either providing a copy or summary of the information, or arranging for the requester to inspect the information,
• or informing the requester why the information has been withheld.

Further information is available on the ICO website and in our Freedom of Information Policy.

A request for information under the Freedom of Information Act can be made by completing an online form here.

Please note that Freedom of Information requests are not the same as Subject Access Requests, which are requests for personal information by either the subject of that information or a third party and are handled in accordance with the Data Protection Act 2018.

Subject Access Requests

Under Data Protection Law, Data Subjects have a general right to find out whether the Trust hold or process personal data about them, to access that data, and to be given supplementary information. This is known as the right of access, or the right to make a Subject Access Request (SAR). The purpose of the right is to enable the individual to be aware of, and verify, the lawfulness of the processing of personal data that the Trust are undertaking.

A Data Subject has the right to be informed by the Trust of the following:
• Confirmation that their data is being processed;
• Access to their personal data;
• A description of the information that is being processed;
• The purpose for which the information is being processed;
• The recipients/class of recipients to whom that information is or may be disclosed;
• Details of the Trust’s sources of information obtained;
• In relation to any Personal Data processed for the purposes of evaluating matters in relation to the Data Subject that has constituted, or is likely to constitute, the sole basis for any decision significantly affecting the Data Subject, to be informed of the logic of the Data Controller’s decision making.  Such data may include, but is not limited to, performance at work, creditworthiness, reliability and conduct; and other supplementary information.

A Subject Access Request can be submitted by competing an online form here.  Further information on making a Subject Access Request and how the Trust will respond can be found in our Data Protection Policy (Appendix 1).

Minutes of the meetings of the Trustees of The Kite Academy Trust are available on request.  Please email governance@kite.academy to request copies of minutes.

What Are Cookies?

As is common practice with almost all professional websites this site uses cookies, which are tiny files that are downloaded to your computer, to improve your experience.  This page describes what information they gather, how we use it and why we sometimes need to store these cookies.  We will also share how you can prevent these cookies from being stored however this may downgrade or 'break' certain elements of the sites functionality.

How We Use Cookies

When you submit data to through a form such as those found on contact pages or comment forms cookies may be set to remember your user details for future correspondence.

In order to provide you with a great experience on this site we provide the functionality to set your preferences for how this site runs when you use it.  In order to remember your preferences we need to set cookies so that this information can be called whenever you interact with a page is affected by your preferences.

A detailed breakdown of typical cookies on our site will include:

Name: PHPSESSID  
Expires: A session cookie, deleted when you close your web browser.
Description: Identifies your unique session on the website

Name: gdprAccepted
Expires: 30 days.
Description: Saves your acceptance of storing cookies. Does not exist if you do not accept the storage of cookies.

Name: visited
Expires: 40 days.
Description: Saves whether you have already visited the site or not – so you do not see the splash screen on every visit 

Third Party Cookies

In some special cases we also use cookies provided by trusted third parties.  The following section details which third party cookies you might encounter through this site.

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience.  These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.

For more information on Google Analytics cookies, see the official Google Analytics page.

From time to time we test new features and make subtle changes to the way that the site is delivered.  When we are still testing new features these cookies may be used to ensure that you receive a consistent experience whilst on the site whilst ensuring we understand which optimisations our users appreciate the most.

We also use social media buttons and/or plugins on this site that allow you to connect with your social network in various ways.  For these to work the following social media sites including; Facebook, Twitter, LinkedIn, Pinterest, Google+, will set cookies through our site which may be used to enhance your profile on their site or contribute to the data they hold for various purposes outlined in their respective privacy policies.

Disabling Cookies

If you would like to change your preferences and disable cookies from our site, you can Opt Out here.

To clear all of your browser cookies, please clear your browsing history and ensure the “cookies and other site data” is checked.

More Information

For more information then please contact us on:

Email: info@kite.academy
Phone: 01252 984930

Privacy Notice (How we use pupil information)

Why do we collect and use pupil information?  We collect and use pupil information under the Education Act 1996.  The General Data Protection Regulation 2016/679 (GDPR) which took effect in May 2018 including Article 6 ‘lawfulness of processing’ and Article 9 ‘Processing of special categories of personal data’

https://www.gov.uk/education/data-collection-and-censuses-for-schools

We use the pupil data: 

• to support pupil learning
• to monitor and report on pupil progress
• to provide appropriate pastoral care
• to assess the quality of our services
• to comply with the law regarding data sharing 

The categories of pupil information that we collect, hold and share include: 

• Personal information (such as name, unique pupil number and address)
• Any relevant medical information
• Special educational needs
• Exclusions and behavioural information
• Assessment information
• Characteristics (such as ethnicity, language, nationality, country of birth and free school meal eligibility)
• Attendance information (such as sessions attended, number of absences and absence reasons) 

Collecting pupil information

Whilst the majority of pupil information you provide to us is mandatory, some of it is provided to us on a voluntary basis.  In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain pupil information to us or if you have a choice in this. 

Storing pupil data

We hold pupil data for 6 years following a student’s last entry.

Who do we share pupil information with?

We routinely share pupil information with: 

• schools that the pupil’s attend after leaving us
• our local authority
• the Department for Education (DfE)
• School nurse 

Why we share pupil information

We do not share information about our pupils with anyone without consent unless the law and our policies allow us to do so.

We share pupils’ data with the Department for Education (DfE) on a statutory basis.  This data sharing underpins school funding and educational attainment policy and monitoring. 

We are required to share information about our pupils with the (DfE) under regulation 5 of The Education (Information About Individual Pupils) (England) Regulations 2013. 

The National Pupil Database (NPD)

The NPD is owned and managed by the Department for Education and contains information about pupils in schools in England.  It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the Department.  It is held in electronic format for statistical purposes.  This information is securely collected from a range of sources including schools, local authorities and awarding bodies. 

We are required by law, to provide information about our pupils to the DfE as part of statutory data collections such as the school census and early years’ census.  Some of this information is then stored in the NPD.  The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013. 

To find out more about the pupil information we share with the department, for the purpose of data collections, go to https://www.gov.uk/education/data-collection-and-censuses-for-schools. 

To find out more about the NPD, go to https://www.gov.uk/government/publications/national-pupil-database-user-guide-and-supporting-information. 

The department may share information about our pupils from the NPD with third parties who promote the education or well-being of children in England by: 

• conducting research or analysis
• producing statistics
• providing information, advice or guidance 

The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data.  Decisions on whether DfE releases data to third parties are subject to a strict approval process and based on a detailed assessment of: 

• who is requesting the data
• the purpose for which it is required
• the level and sensitivity of data requested: and
• the arrangements in place to store and handle the data 

To be granted access to pupil information, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data. 

For more information about the department’s data sharing process, please visit:

https://www.gov.uk/data-protection-how-we-collect-and-share-research-data 

For information about which organisations the department has provided pupil information, (and for which project), please visit the following website: https://www.gov.uk/government/publications/national-pupil-database-requests-received 

To contact DfE: https://www.gov.uk/contact-dfe 

Requesting access to your personal data

Under data protection legislation, parents and pupils have the right to request access to information about them that we hold.  To make a request for your personal information, or be given access to your child’s educational record, contact

You also have the right to:

• object to processing of personal data that is likely to cause, or is causing, damage or distress
• prevent processing for the purpose of direct marketing
• object to decisions being taken by automated means
• in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
• claim compensation for damages caused by a breach of the Data Protection regulations 

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/ 

Contact:

If you would like to discuss anything in this privacy notice, please contact: info@kite.academy