Privacy Policy

Privacy Policy

Introduction

This Privacy Policy explains how Ysgol Gymraeg Coed-y-Gof collects, uses, stores, and shares personal data. We are committed to protecting the privacy of our pupils, parents, staff, and visitors in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Ysgol Gymraeg Coed-y-Gof is the Data Controller. We are registered with the Information Commissioner’s Office (ICO).


What Data We Collect

We collect data including:
- Pupil information (name, DOB, address, UPN, ALN status, medical needs)
- Parent/carer contact details
- Staff employment records
- Attendance and behaviour records
- Assessment and attainment data
- Safeguarding information
- Website usage data (cookies)

Why We Collect Data

We use data to:
- Deliver education and support pupil welfare
- Monitor and report on progress
- Provide pastoral care and safeguarding
- Communicate with families
- Manage school operations and staffing
- Meet legal and statutory duties

Legal Basis

We process data under:
- Legal obligation
- Public task
- Vital interests
- Consent (for optional activities like photos)

Data Sharing

We may share data with:
- Local authorities and Welsh Government
- NHS and safeguarding partners
- Education software providers
- Other schools (e.g. for transition)

Data Retention

We retain personal data in line with our Records Management Policy and legal requirements. Data is securely deleted when no longer needed.

Your Rights

You have the right to:
- Access your data
- Request correction or deletion
- Object to processing
- Withdraw consent (where applicable)
- Lodge a complaint with the ICO

Contact

For questions or concerns, contact:
Data Protection Officer
Ysgol Gymraeg Coed-y-Gof
ysgolcoedygof@cardiff.gov.uk

Beechley Drive, Pentrebane, Cardiff CF5 3SG

Cookies Used

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.