Privacy Policy

GDPR stands for General Data Protection Regulation and replaces the previous Data Protection Act.

GDPR states that personal data should be:

• Processed fairly & lawfully
• Collected for specified and legitimate purposes
• Individuals’ data is not processed without their knowledge and is only processed with their consent.

The Stirling School of Dance is committed to protecting the rights of individuals with respect to the processing of children’s, parents’, and staff personal data. GDPR gives individuals the right to know what information is held about them and provides a framework to ensure that personal information is handled properly.

The SSD is required to collect and manage certain data. We need to know parents’ names, addresses, telephone numbers, email addresses.

We need to know children’s full names, date of birth and any SEN/Medical requirements/conditions. We are required to provide this information to Surrey County Council (SCC) for the purposes of school shows and to chaperones in respect of Health & Safety and the Safeguarding of children.

We are also required to provide pupils’ data to the Imperial Society of Dancing (ISTD) for the purposes of examinations.

An individual can make a request to access their data and the SSD will need to provide a response (within 1 month). The SSD can refuse a request, if we have a lawful obligation to retain data but we will inform the individual of the reason for the rejection.

The individual has the right to request the deletion of their data where there is no reason for its continued use. However, the SSD has a legal duty to keep children’s and parents’ data for a reasonable time.

The SSD shares data with SCC (see paragraph above).

All paper copies of children’s data are kept in a locked filing cabinet/cupboard. Teachers can have access to these files, but information taken from the files about individual children is confidential. These records are shredded after the retention period.

The SSD holds photographs/video clips taken during shows, competitions, events at the School and may be used solely for School purposes, such as the School’s website and other School promotional material.

Access to office computers/laptops is password protected. Any portable data storage used to store personal data such as a USB memory stick is password protected and/or stored in a locked filing cabinet/cupboard.

GDPR means that The Stirling School of Dance must:

• Manage and process personal data properly
• Protect the individual’s rights to privacy
• Provide an individual with access to all personal information held on them.