Data Protection & Information Sharing
At Staverton Kids Club we respect the privacy of all children attending and the privacy of their parents or carers, as well as the privacy of our staff. Our aim is to ensure that all those using and working at Staverton Kids Club can do so with confidence that their personal data is being kept secure.
The lead person for data protection is Erika Bradley. The lead person ensures that Staverton Kids Club meets the requirements of the GDPR, liaises with statutory bodies when necessary, and responds to any subject access requests.
Confidentiality within Staverton Kids Club we respect confidentiality in the following ways: • We will only ever share information with a parent about their own child. • Information given by parents to Staverton Kids Club staff about their child will not be passed on to third parties without permission unless we believe a child is at Risk as part of our statutory requirement connected to our registration • Concerns or evidence relating to a child’s safety, will be kept in a confidential file and will only be shared with setting staff on a ‘need to know basis’. • Staff only discuss individual children for purposes of planning and group management. • Staff are made aware of the importance of confidentiality during their induction process and are required to sign a confidentiality agreement. • Issues relating to the employment of staff, whether paid or voluntary, will remain confidential to those making personnel decisions. • All personal data is stored securely with a password protected computer / passcode-locked phone. • Students on work placements and volunteers are informed of our Data Protection policy and are required to also sign a confidentiality agreement.
Children and Parents: We hold only the information necessary to provide a childcare service for each child. This includes the child’s personal information, medical information, parent contact information, incident and accident records, developmental records, referrals to external agencies and any reports shared with external agencies / bodies. Once a child leaves our care we retain only the data required by statutory legislation and industry best practice, and for the prescribed periods of time. Electronic data that is no longer required is deleted after the prescribed holding time.
Staff: We keep information about employees in order to meet Statutory and HMRC requirements, and to comply with all other areas of employment legislation. We retain the information after a member of staff has left our employment for the recommended period of time, then it is deleted or destroyed as necessary.
Sharing information with third parties We will only share child information with outside agencies on a need-to-know basis and with consent from parents, except in cases relating to Child Protection, criminal activity, or if required by legally authorised bodies, e.g. (Police, HMRC, etc). If we decide to share information without parental consent, we will record this in the child’s file, clearly stating our reasons. We will only share relevant information that is accurate and up to date. Our primary commitment is to the safety and well-being of the children in our care. Some limited personal information is disclosed to authorised third parties we have engaged to process it as part of the normal running of our business, for example in order to take online bookings, system providers, claim external funding and to manage our payroll and accounts. Any such third parties comply with the strict data protection regulations of the GDPR.
Subject access requests • Parents/carers can ask to see the information and records relating to their child, and/or any information that we keep about themselves. • Staff and volunteers can ask to see any information that we keep about them. • We will make the requested information available as soon as practicable and will respond to the request within one month at the latest. • If our information is found to be incorrect or out of date, we will update it promptly. • If any individual about whom we hold data has a complaint about how we have kept their information secure, or how we have responded to a subject access request, they may complain to the Information Commissioner’s Office (ICO).
- You have the right to ask us to stop processing your personal data in relation to any service we provide. However, this may stop us delivering our service to you. Where possible, we will do as you ask, but we may need to hold or process personal data to comply with a legal requirement. If you find that the personal data that we hold is no longer accurate, you have the right to have this corrected. Please contact Staverton Kids Club for this.