Data Protection and FOI
Hatton Academies Trust aims to ensure that every item of personal data collected relating to staff, students, parents, directors, visitors and other individuals is collected, stored and processed in accordance with the UK General Data Protection Regulation (GDPR) and the expected provisions of the Data Protection Act 2018 (DPA 2018).
The following documents may be of interest to you:
HAT Information and Records Management Retention Guidance
NOTE: Parents of children in Year 8 and above should note that GDPR stipulates that the age of consent for Data Protection matters is 13 years. Consequently, consent for the processing of photographs and digital images will be sought directly from the child. Parents are advised to discuss consent with their child. If you are concerned that obtaining consent from your child is inappropriate for any reason, then please contact the Trust Data Protection Officer.
Our Data Protection Officer (DPO)
Our DPO for all Academies within the Trust is Colin Hinds who is contactable as follows:
Via e-mail: dataprotectionofficer@hattonacademiestrust.org.uk
Via telephone: 01933 231271
Via post: Hatton Academies Trust, Orchard House, 79 Gold Street, Wellingborough, Northants. NN8 4EQ
Subject Access Requests
Individuals have a right to make a ‘subject access request’ to gain access to personal information that an Academy and/or the Trust holds about them. Subject access requests must be submitted in writing, either by letter or email to our DPO. They should include:
- Name of individual
- Correspondence address
- Contact number and email address
- Details of the information requested
Freedom of Information Act Requests
Under the Freedom of Information Act 2000, every person has a legal right to request information held by the Trust and it’s constituent academies, which is deemed to be information held by a public authority. Those making requests are entitled to be informed whether the Trust holds the information requested, and subject to certain exemptions, to be furnished with a copy within prescribed deadlines.
Please see the above Data Protection Policy for further information. These requests must be submitted in writing, either by letter or email to our DPO.