Data Processing and GDPR

GDPR Notice

We are updating our processes around how we handle your information, and we will publish more information about how we are meeting the requirements set out in the General Data Protection Regulations 2018 in due course. The school's Data Protection Officer is Ellie Davison.

Alfriston School has a number of policies that cover the areas of data processing and data protection, and these policies are linked below for your reference.

If in the meantime you would like to know more about the GDPR and your rights, please visit the UK’s data protection regulator, the Information Commissioner’s Office at

Should you have any queries regarding the GDPR and our school, please email us at email:

>> Alfriston School - Data Protection Policy (updated November 2018). This is our current Data Protection Policy which has been updated in light of GDPR

Subject Access Requests

In line with our Data Protection Policy and the requirements under the Data Protection Act and recent GDPR, pupils and parents / guardians have a right to access data that the school has collected about them by any data controller. This is commonly referred to as Subject Access.

Subject Access Requests can be made to the Data Protection Officer named above. These requests may be submitted verbally, on paper, or electronically via the email shown above. Please clearly mark all correspondence with the words "SUBJECT ACCESS". The school has a duty to check the identity of those making such requests, and if we are unable to prove without doubt the identity of the requestor, we may ask for a piece of additional information such as a witnessed copy of your signature or proof of your address. We will, without undue delay, 

Further information about Subject Access Requests may be found in the Data Protection Policy referenced above.