At CommunityWorks we take your personal privacy seriously and have many policies in place to ensure the safety and protection of all those accessing our services.
GDPR Privacy Notice
This Privacy Notice tells you what to expect when Communityworks collects personal information about you and your child – if your child attends here. Communityworks is committed to compliance with the General Data Protection Regulation 2018 (GDPR) and the Data Protection Act 1998, as well as to your rights to confidentiality and respect for privacy. We will ensure that we keep all personal information accurate and secure. Communityworks is registered with the information Commissioner’s Office (ICO) under the provisions of the Data Protection Act 1998.
We use children’s and adult’s information to:
- Support pupil learning.
- Monitor and report on pupil progress.
- Provide appropriate pastoral care and support.
- Assess the quality of our services.
- Comply with the law regarding data sharing.
- Keep our building and those that use it safe.
Whilst the majority of information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain pupil information to us or if you have a choice in this.
We will collect personal information about you and your child:
- On your application form for a nursery place.
- On your or your child’s registration form.
- Through observations of your child in the rooms.
- When accessing an activity or service we provide.
- When requesting to be added to a waiting list for an activity or service we provide or one that you want us to refer you on to.
- Via our CCTV cameras.
The information we hold includes:
- Child’s personal information such as name, date of birth and address. GP and NHS number.
- Characteristics such as ethnicity, language, nationality, country of birth.
- Parent/carer details including emergency contact information.
- Attendance information such as sessions attended, number of absences and absence reasons.
- Assessment data about how well your child is doing.
- For those families in receipt of a 2YO place or pupil premium NI number and proof of eligibility.
- Times that you enter and leave the building and move around the nursery entrance.
- We may keep a record of your case in paper or digital format which will be stored securely; to enable us to assist you on an ongoing basis. E.g. CVs for Job Club, notes for CEE families.
Information is stored securely on our database and document management systems with stringent access and use policies. How long do we keep this information? We have a data retention policy which details how long we keep different types of records and when these are deleted. What authority do we have to collect and use this information? The following categories of lawfulness apply:
- Processing is necessary for compliance with a legal obligation. The submission of the school census returns, including a set of named pupil records, is a statutory requirement on schools under Section 537A of the Education Act 1996.
- Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract (paid for childcare).
- Processing is necessary to protect the vital interests of a data subject or another person. In the rare circumstance that we don’t have a legal authority to use your information, we will obtain your consent first.
If you have consented, photos and videos will be taken of you and your child. These photos and videos will be used in your child’s record of achievement, for displays, in leaflets and other publicity materials. Photos and videos may also be shared on the Communityworks Facebook and Twitter pages. These will be deleted within six months of posting. Photos and videos will not be tagged with your child’s name. Also we may put photos and videos on the Communityworks website, but always ask for specific consent. If you have any concerns about the use of photos of your child please talk to their Keyworker in the first instance. Any concerns as an adult please talk to the person running the session.
We share information with schools that pupils attend after leaving us. We share information with those that fund our work. This is wholly or partly anonymised; for example your name and postcode is supplied to Bradford Council, but any further details are supplied in an anonymised format. We are also required to share information about our pupils with our local authority (LA) and the Department for Education (DfE) under section 3 of The Education (Information About Individual Pupils) (England) Regulations 2013. This data sharing underpins school funding and educational attainment policy and monitoring. Some of this information is then stored in the National Pupil Database (NPD). The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013.
Find out more about the data collection requirements placed on us by the Department for Education.
Find out more about the NPD.
Everything you tell us will be treated confidentially; however we may suggest that you go to another organisation for help because they will be more able to help you. We are able to refer you to them and help get you an appointment. Ideally we would also give them the information you have given us.
If we have any concerns about a child or vulnerable adult we will in the first instance discuss them with you. However if children are suffering or may be at risk of suffering significant harm, we are legally obliged to share our concerns with children’s or adult’s social care and/or the police, also health visitors.
Access to Data
Under data protection legislation, parents and pupils have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s educational record, please contact us. You also have the right to object to processing of personal data that is likely to cause, or is causing, damage or distress or claim compensation for damages caused by a breach of the Data Protection regulations.
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office.