Data Protection

On 25 May 2018, the EU General Data Protection Regulation 2016 (GDPR) came into force. This piece of legislation (which has been retained in domestic law as the UK GDPR following Brexit), along with the existing Data Protection Act, governs how we collect, use and share people’s information and provides greater rights to individuals and control over how their information is handled by organisations, including schools.

Shaftesbury Park is committed to the protection of personal data and to being transparent about what data we process. Individuals’ rights in relation to the processing, including the right of access and rectification, are set out in our Privacy Notices for Pupils and Parents/Carers, the School Workforce and Job Applicants, all of which can be found at the bottom of this page. In addition to these documents, you will also find a COVID-19 Addendum to our Published Privacy Notices which describes additional ways we may use your information to protect and assist pupils, parents/carers, the school workforce and job applicants during the outbreak.

Should you have any queries regarding data protection or the UK GDPR at Shaftesbury Park, please contact the School Office on 0207 228 3652 or or the school’s Data Protection Officer, Gary Hipple, at Should you wish to find out more about the UK GDPR and your rights, please visit the UK’s data protection regulator, the Information Commissioner’s Office at .

Privacy Notice for Pupils and Parents & Carers

Privacy Notice for the School Workforce 

Privacy Notice for Job Applicants

COVID-19 Addendum to our Published Privacy Notices