Data Protection


Thorndown, as a school, holds and processes personal information on each pupil, and limited information on parents, in order to provide a rounded education and a safe environment for each child.  The legal basis for processing personal data under the General Data Protection Regulations May 2018 is to complete a PUBLIC TASK (that of provision of an education).  The school complies with the General Data Protection Regulations May 2018 and this is demonstrated by our Data Protection Policy and linked policies such as Data Breach Policy, Internet Safety Policy, Special Category Data Policy and ICT Acceptable Use Policy. These are all available from our policies page. NB Some are in draft form while the school waits for final clarification of the requirements under the GDPR. We commit to train our staff and volunteers to understand the importance of handling data securely. We understand that privacy is important to you and your child.

CONSENT: Where the data stored and processed is to enhance the educational provision, but is not a key element of providing an education, we will seek consent from a parent. This includes:

Please click on the application or system to obtain more information including a Privacy Statement where applicable.

  • Photos, images and videos to be displayed in school and on the school website . Such images will be removed and deleted 1 year after Year 6 unless specific consent obtained say, for marketing purposes. Images are stored on the school’s secure network and are appropriate.  If a child objects to a photo it will be removed.
  • Additional contact information

Thorndown Privacy Notices

Please click HERE for the school’s Privacy Notice (Pupils/Parents).

Staff members, volunteers, additional emergency contacts and contractors may wish to view the Privacy Notice for Staff by clicking HERE.

Privacy Notice for Governors and Volunteers – please click HERE

Privacy Notice for Visitors – please click HERE

We also have a child friendly version of our Privacy Notice – click HERE.

The school has a Data Protection Officer provided through the Cambs County Council (ICT Services); they can be contacted through the school at

Images: The school asks all parents, carers and visitors to our school to ask permission before taking photos and video and to agree such files are used for personal use only and are not shared with social media sights or other agencies. The school will only publish images on this website if parental permission has been provided.

Rights: Parents and pupils have the right to access the information we hold about them; this is known as a Subject Access Request and should be made in writing.  The school must supply the information requested within one school month or provide  a reason for an extension of up to two months.

Where you are unhappy with how your data has been handled by the school you can make a complaint to the Data Protection Officer, Vanessa Green, at or if this does not provide satisfaction direct to the Information Commissioner at

Separate from the GDPR, the Department for Education regulations provide a pupil’s parents (regardless of the age of the pupil) with the right to view, or to have a copy of, their child’s educational record at the school.  If you wish to exercise this right you should write to the school

The Freedom of Information Act requires publicly funded bodies, including schools, to be clear about the information they publish. We have produced a publication scheme setting out all the information we publish on a regular basis and where to find it.  Please ask at the school office to see a copy of the scheme.

Our Confidentiality Policy is relevant to data protection and can be accessed by clicking HERE.

Use of our Website

Thorndown acknowledges the right to privacy of the users of this website.  Any information gathered via this site is for the day to day running of the school’s business (education and associated pastoral care) and no information so gathered will be passed on to a third party for any purpose whatsoever. Any statistics derived from the sue of this site are for the understanding of general trends and no individual users shall be identifiable.

External Links: This site contains links to other sites made in good faith. The school is not responsible for the privacy practices or the content of such websites and has no control over the content that may be found there.  If any site we link to causes concern, please contact the website manager – Mrs Cooper, at

Cookies: Our site does not use cookies.

Advertisers: We do not display ads on our site.

Data Breach Policy

Data Retention Schedule

Subject Access Request Procedure