Privacy & Data Protection Policy

Luke-Taylor School of Performing Arts is committed to protecting the privacy and personal data of all students and their parents/carers. This policy explains how personal information is collected, used, and stored in line with UK data protection law.

The school may collect the following personal data:

• Child's name and date of birth
• Parent/carer names and contact details
• Emergency contact details
• Medical information (e.g. allergies, conditions)
• Attendance records
• Photo/video consent preferences

Personal data is used to:

• Register students and manage classes
• Contact parents/carers about classes or changes
• Respond in emergencies
• Ensure the safety and wellbeing of students
• Meet legal and safeguarding responsibilities

Data is processed under the following lawful bases:

• Consent (e.g. photography)
• Legitimate interest (running the school safely and effectively)
• Legal obligation (safeguarding responsibilities)

• Information is stored securely (locked or password-protected)
• Only the school owner has access to personal data
• Data is not shared with third parties unless required for safeguarding or legal reasons

• Personal data will only be kept for as long as necessary
• Student records will be securely deleted when no longer required

Information may be shared if necessary with:

• Emergency services
• Local authority safeguarding teams
• Other authorities where required by law

Information will only be shared when necessary and appropriate.

• Photos/videos will only be taken with parental consent
• Images will only be used for agreed purposes
• No full names will be published alongside images without consent

Under UK GDPR, parents/carers have the right to:

• Access their data
• Request corrections
• Request deletion (where appropriate)
• Withdraw consent (e.g. for photos)

Requests can be made directly to the school.

For any data protection queries, please contact: