Nottingham Health & Education Support (NHES), a charity registered in England (1145903), is committed to protecting the privacy and security of your personal information. This privacy notice describes how NHES collects and uses personal information about students and their parents/guardians in accordance with the General Data Protection Regulation (GDPR).
This privacy notice applies to current and former students and explains how we’ll process your personal data.
Data Protection Principles:
All personal data obtained and held by us must be processed according to a set of core principles and we will ensure that data is: –
- Processed in a fair, lawful and transparent way
- Collected only for legitimate and valid purposes that have been clearly explained
- Relevant to the purposes and limited only to those purposes we have explained
- Kept accurate and up to date
- Kept only as long as necessary for the purposes we have told you about
- Kept securely under lock and key
What information do we hold?
We hold a range of personal data about you. Here are some examples of types of personal data we hold:
- Name
- Age
- Name of school
- Home address
- Dietary requirements
- Attendance information at classes and events
- Parents/guardians name, address and contact details
- Emergency contact details (should the parents/guardians be unavailable)
- Observation, planning and assessment and progress reports
- Photographs and video clips
We may collect store and use the following “special categories” of more sensitive personal information such as: –
- Race/ethnicity, spoken language and nationality of students and parents
- Asylum or refugee status of students and parents
- Student’s health, medical condition or disability
- special educational needs
- Student’s accident or incident report
- Child protection referral forms/case details and report
How do we use it and why?
We process your personal data for the purposes of enrolling you onto our education and health classes, supporting you during your attendance at our classes and monitoring your health & educational progress throughout the programme.
We only process data for specified purposes and if it is justified in accordance with data protection law. Some personal data is also required to fulfil our legal obligations. The table below lists examples of personal data we process and the justification for it.
| Activity requiring your data | Lawful basis |
|---|---|
| Assessing application for joining classes | Consent |
| Keeping contact details of parents/guardians/emergency contact | Contractual and legal obligation |
| Assessing attendance, planning progress and performance | Our legitimate Interests |
| Providing support to parents with communication at child’s school | Our legitimate Interests |
| Making reasonable adjustments for disabilities or health conditions | Our legal obligation |
| Making reasonable adjustments for special educational needs | Our legitimate interest |
| Child protection | Our legal obligation |
| Providing statistical information and photographs required by funders | Contractual and legal obligation |
| Promoting and marketing our services through use of photographs/video clips | Consent |
What information do we get from third parties?
With parental/guardian’s consent we obtain information from schools and local authorities in relation to educational support.
Who do we share your personal data with?
We share names, attendance and progress reports with tutors and trainers. Where necessary we also share information so that reasonable adjustments can be made to accommodate your needs relating to health conditions, disabilities or special educational needs.
We will share personal information with third parties where required by law. This includes local authorities, regulatory bodies and funders.
How long will you use my information for?
We will only retain personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements..
Your rights
You have the following rights in relation to the personal data we hold on you:
- the right to be informed about the data we hold on you and what we do with it;
- the right of access to the data we hold on you;
- the right for any inaccuracies in the data we hold on you, however they come to light, to be corrected.
- the right to have data deleted in certain circumstances.
- the right to restrict the processing of the data;
- the right to transfer the data we hold on you to another party. This is also known as ‘portability’;
- the right to object to the inclusion of any information;
- the right to regulate any automated decision-making and profiling of personal data.
In addition to the above rights, you also have the unrestricted right to withdraw consent, that you have previously provided, to our processing of your data at any time. Withdrawing your consent means that we will stop processing the data that you had previously given us consent to use. There will be no consequences for withdrawing your consent. However, in some cases, we may continue to use the data where so permitted by having a legitimate reason for doing so.
If you wish to exercise any of the rights explained above, please contact our Data Compliance Officer (Mr Parvez Khan).
Where can I get more information?
If you have concerns about how we are using your personal data then please contact our appointed compliance officer in the first instance. If you are not satisfied by our response and you think your data rights have been breached, you are able to raise a complaint with the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF
Data Protection compliance
Our appointed compliance officer in respect of our data protection activities is: –
Name: Parvez Khan
Email: parvez@nhes.org.uk
Telephone: 07773024774