Privacy Policy
Privacy Notice – Elevated Education
1. Who We Are
Elevated Education provides alternative provision and support services for children and young people. We are committed to protecting the privacy and personal information of the young people, families, staff and partners we work with.
For the purposes of data protection law, Elevated Education is the Data Controller for the personal data we collect and hold.
Elevated Education has a designated Data Protection Lead responsible for overseeing GDPR compliance and data protection practices.
2. The Information We Collect
About Young People:
- Name, date of birth and contact details
- Emergency contact information
- Attendance records
- Educational history and referral information
- Safeguarding and welfare information
- Medical or additional needs information (where relevant)
- Behavioural or progress records
About Parents/Carers:
- Names and contact details
- Relationship to the young person
- Communication records
About Staff and Volunteers:
- Contact and employment details
- DBS and recruitment information
- Training records
3. Why We Collect This Information
We collect and use personal information to:
- Provide safe and effective alternative provision
- Safeguard and promote the welfare of children and young people
- Communicate with parents, carers and referring schools
- Monitor attendance, progress and wellbeing
- Meet our legal and contractual obligations
- Comply with safeguarding, education and employment law
Safeguarding is a legal obligation and may require us to share information without consent where a child is at risk of harm.
4. Lawful Basis for Processing
We process personal data under the following lawful bases:
- Legal obligation (safeguarding and education duties)
- Public task (providing education and support services)
- Contract (where services are commissioned)
- Vital interests (to protect a child from harm)
- Legitimate interests (to manage and improve our services)
Where consent is required, this will be clearly requested.
5. How We Store and Protect Information
We take data security seriously. Information is:
- Stored securely in password-protected systems
- Kept in locked cabinets where paper records are used
- Shared only on a need-to-know basis
- Accessed only by authorised staff
- Managed through secure digital communication systems
All staff receive training on confidentiality and data protection.
6. Sharing Information
We may share information where necessary with:
- Referring schools
- Local Authorities
- Children’s Social Care
- Safeguarding partners
- Relevant professionals involved in supporting the young person
Information is shared lawfully, proportionately and in the best interests of the child.
7. How Long We Keep Information
We retain records in line with recommended education and safeguarding retention schedules. Safeguarding records may be kept for an extended period in line with statutory guidance.
8. Your Rights
Under UK GDPR, individuals have the right to:
- Access their personal data
- Request correction of inaccurate information
- Request erasure (in certain circumstances)
- Restrict processing
- Object to processing
- Lodge a complaint with the Information Commissioner’s Office (ICO)
Requests to access personal data should be made in writing using the contact details below. We will respond within one month in line with GDPR requirements.
ICO website: www.ico.org.uk
9. Contact Us
Elevated Education
1 Lynx Court
Victoria Way
Newmarket
Suffolk
01638 454024
Policy Title: GDPR & Data Protection Policy
Written by: Katie Bristow — Director/Service Manager
Approved by: Penny Stapleton — Director
Date Approved: 26th January 2026
Review Date: 26th January 2027
Version: 001