How we use Student and Parent/Guardian (“Parent”) information
This privacy policy explains how Clonlara School (“School”) uses the personal information we collect about students and families.
Why we collect and use this information
We collect and use student and family information for the following purposes:
The categories of student and parent information that we process may include:
The School holds the legal right to collect and use personal data relating to students and their families, and we may also receive information regarding them from their previous School or Local Authorities. We collect and use personal data to meet legal requirements and legitimate interests set out in GDPR, including those in relation to Articles 6 and 9.
How we collect information
Generally, the School receives personal data from the individual directly (including, in the case of students, from their parents). This may be via an online form, or in the ordinary course of interaction or communication (such as in person, phone, email or written assessments). However, in some cases personal data may be supplied by third parties (for example another School, or other professionals or authorities working with that individual); or collected from publicly available resources.
Storing and retaining data
Some education records relating to former students of the School may be kept indefinitely for legal reasons, but also to enable the provision of references for transcripts. The School will retain personal data securely and only in line with how long it is necessary to keep for a legitimate and lawful reason.
Who we share information with
We routinely provide information, with consent, to:
Students and parents are reminded that the School is under duties imposed by law and statutory guidance to record or report incidents and concerns that arise or are reported to it, in some cases regardless of whether they are proven, if they meet a certain threshold of seriousness in their nature or regularity. This may include file notes on safeguarding files, and in some cases referrals to relevant authorities such as Social Services or police. We do not share information with anyone without consent unless the law and our policies allow us to do so.
Keeping in touch and supporting the School
Unless the relevant individual objects, the School will use contact details of parents, alumnae and other members of the School community to keep them updated about the activities of the School, or alumnae and parent events of interest, including sending updates and newsletters, by email and by postal mail. The School may also:
Share personal data about parents and/or alumnae, as appropriate, with organizations set up to help establish and maintain relationships with the School community, such as Alumni or Parents’ Associations;
Contact parents and/or alumnae by postal mail, email or phone in order to promote and raise funds for the School or other worthy causes, as appropriate;
Should you wish to limit or object to any such use, or would like further information about them, please contact the School at the contact information listed below. You always have the right to withdraw consent, or otherwise object to direct marketing or fundraising.
Your Rights
Individuals have various rights under GDPR to access and understand personal data held about them by the School, and in some cases, ask for it to be erased or amended or for the School to stop processing it, but subject to certain exemptions and limitations. Any individual wishing to access or amend their personal data, or wishing it to be transferred to another person or organization, should contact the School at the contact information listed below.
The School will endeavor to respond to any such requests as soon as is reasonably practicable and in any event within statutory time-limits, which is one month in the case of requests for access to information. The School will be better able to respond quickly to smaller, targeted requests for information. If the request is manifestly excessive or similar to previous requests, the School may ask you to reconsider or charge a proportionate fee, but only where the law allows it.
You should be aware that certain data is exempt from the right of access. This may include information which identifies other individuals, or information which is subject to legal professional privilege. The School is also not required to disclose any pupil examination scripts, nor any confidential reference given by the School for the purposes of the education, training or employment of any individual. Students where supported by their parents, can make subject access requests for their own personal data. A student of any age may ask a parent or other legal representative to make a subject access request on her behalf, and moreover (if of sufficient age) their consent or authority may need to be sought by the parent. Parents of students aged 18+ must generally receive permission from the student for such requests. Students younger than 18 may be sufficiently mature to have a say in this decision. All subject access requests from students will therefore be considered on a case-by-case basis. Where the School is relying on consent as a means to process personal data, any person may withdraw this consent at any time (subject to similar age considerations as above). Please be aware however that the School may have another lawful reason to process the personal data in question even without your consent. That reason will usually have been asserted under this Privacy Notice or may otherwise exist under some form of contract or agreement with the individual (e.g. an employment or parent contract, or because a purchase of goods, services or membership of an organization has been requested).
Whose Rights
The School will often rely on parental consent to process personal data relating to students (if consent is required) unless, given the nature of the processing in question, and the student’s age and understanding, it is more appropriate to rely on the student’s consent. Parents should be aware that in such situations they may not be consulted, depending on the interests of the child, the parents’ rights at law or under their contract, and all the circumstances. In general, the School will assume that students’ consent is not required for ordinary disclosure of their personal data to their parents, e.g. for the purposes of keeping parents informed about the pupil’s activities, progress and behavior, and in the interests of the pupil’s welfare, unless, in the School’s opinion, there is a good reason to do otherwise. However, where a pupil seeks to raise concerns confidentially with a member of staff and expressly withholds their agreement to their personal data being disclosed to their parents, the School may be under an obligation to maintain confidentiality unless, in the School’s opinion, there is a good reason to do otherwise; for example where the School believes disclosure will be in the best interests of the pupil or other students, or if required by law. Students are required to respect the personal data and privacy of others, and to comply with the School’s relevant policies. Staff are under professional duties to do the same, covered under the relevant staff policy.
Requesting access to your personal data
To make a request for your personal information as stated above, or to object to:
Contact: info@clonlara.org (734) 769-4511
Consent
By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified herein. Consent is required for the School to process your data, but it must be explicitly given. You may withdraw consent by contacting info@clonlara.org (734) 769-4511
REV 080918 TAB
There are many ways to support Clonlara’s mission. Volunteer to share your time, knowledge, and experience; or donate and have a direct impact on our community.