Privacy Policy

LAST UPDATED: NOVEMBER 28, 2025

This privacy notice for Eden Park Primary & Nursery School (referred to as ‘we’, ‘us’, or ‘our’) explains how and why we collect, store, use, and share (‘process’) personal information when you use our services (‘Services’), such as when you:

• visit our website at https://www.eppsa.org.uk/
• contact us or engage with the school in any related way.

If you have any questions or concerns after reading this notice, please contact us at admin@eppsa.org.uk.

SUMMARY OF KEY POINTS

What personal information do we process?
We may process personal information depending on how you interact with the school and our Services.

Do we process any sensitive personal information?
We do not process sensitive personal information through the website.

Do we receive information from third parties?
We may receive information from public databases, marketing partners, social media platforms, and other external sources.

How do we process your information?
We process information to provide and improve our Services, communicate with you, maintain security, and comply with the law.

When and with whom do we share your information?
We only share information in specific situations, such as when necessary to deliver a service or comply with legal obligations.

How do we keep your information safe?
We use organisational and technical measures to protect your information, although no system can be guaranteed to be completely secure.

What are your rights?
Under UK GDPR, you have rights relating to access, correction, restriction, and deletion of your personal information.

How do you exercise your rights?
You can contact us or use the form on our website: https://www.eppsa.org.uk/contact-us.

What information do we collect?
How do we process your information?
What legal bases do we rely on?
When and with whom do we share your information?
Do we use cookies and other tracking technologies?
How long do we keep your information?
How do we keep your information safe?
What are your privacy rights?
Controls for Do-Not-Track features
Do we make updates to this notice?
How can you contact us about this notice?
How can you review, update, or delete data we hold about you?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you provide to us
We collect personal information you voluntarily provide, such as when you request information, complete a form, or contact the school. This may include:

• names
• email addresses
• phone numbers
• contact preferences

We do not request or process sensitive information via the website.

Information collected automatically
When you visit our website, certain information is collected automatically. This may include your IP address, browser type, device information, language settings, referring website, and the pages you access. This helps us maintain security and analyse website usage.

We also use cookies and similar technologies.

Information from other sources
We may receive limited information from public databases or trusted partners to help keep our records up to date or to improve the relevance of our communications.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information to:

• provide and manage our Services
• respond to enquiries or support requests
• send administrative or essential updates
• maintain the safety and security of our systems
• comply with legal and safeguarding obligations

3. WHAT LEGAL BASES DO WE RELY ON?

Under the UK GDPR, we rely on the following lawful bases:

• Consent: where you have given clear permission.
• Contract: where processing is necessary to provide a service you have requested.
• Legal obligation: where we must process data to comply with the law.
• Vital interests: where processing is necessary to protect someone’s safety.
• Legitimate interests: where processing is necessary for the effective operation of the school and does not compromise your rights.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We may share personal information:

• with trusted service providers who support the operation of our website or school systems
• when required to comply with a legal obligation
• when necessary to protect vital interests or wellbeing

We do not sell or share personal data for marketing purposes.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes, we use cookies and similar technologies to support website functionality and understand how visitors use our site. More details can be found in our Cookie Notice.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep personal information only for as long as necessary to fulfil the purposes described in this notice, or as required by law. When information is no longer needed, it is securely deleted or anonymised.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We use appropriate technical and organisational measures to protect personal information. However, no online system can be completely secure. You should access the website using a secure connection whenever possible.

8. WHAT ARE YOUR PRIVACY RIGHTS?

Under UK data protection law, you have rights to:

• access your personal information
• request correction or deletion
• restrict or object to processing
• request data portability, where applicable

If you believe we are handling your data unlawfully, you may raise a concern with the Information Commissioner’s Office (ICO).

9. CONTROLS FOR DO-NOT-TRACK FEATURES

At present, there is no standard for recognising Do-Not-Track signals, and our website does not respond to these settings.

10. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this notice from time to time to remain compliant with UK law and best practice. The latest revision date will always be shown at the top.