Introduction
Wycombe High School Academies Trust (“the Trust”, “we”, “our” or “us”) is committed to protecting the privacy and security of your personal information.
This Website Privacy Notice explains how we collect, use, store and protect personal information when you visit and interact with our website.
This notice applies only to information collected through the Trust’s website and should be read alongside our wider privacy notices for pupils, parents/carers, staff, volunteers and governors.
________________________________________
Who We Are
Data Controller
Wycombe High School Academies Trust
Marlow Road
High Wycombe
Buckinghamshire
HP11 1TB
The Trust is the Data Controller for personal information processed through this website.
Data Protection Officer
The Trust has appointed a Data Protection Officer (DPO) who can be contacted at: Email: dpo@whs.bucks.sch.uk
or by writing to the Trust at the address above, marked for the attention of the Data Protection Officer.
________________________________________
Information We Collect
Information You Provide
We may collect personal information when you:
• Complete an online form.
• Submit an enquiry.
• Register for an event.
• Request information.
• Contact us by email.
• Subscribe to communications.
• Apply for admissions information.
This may include:
• Name.
• Email address.
• Telephone number.
• Postal address.
• Child’s name and year group (where applicable).
• Organisation or job title.
• Any information voluntarily included in your correspondence.
Information Collected Automatically
When you visit our website, certain technical information may be collected automatically, including:
• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Pages visited.
• Date and time of access.
• Website usage data.
• Referring website addresses.
This information helps us maintain website security and improve our services.
________________________________________
How We Use Your Information
We use personal information collected through the website to:
• Respond to enquiries and requests.
• Provide information about the Trust and its schools.
• Manage admissions enquiries.
• Administer events and activities.
• Improve website functionality and user experience.
• Monitor website performance and security.
• Prevent fraud and misuse of our systems.
• Meet our legal obligations.
• Establish, exercise or defend legal claims.
We will only use personal information where we have a lawful basis to do so.
________________________________________
Lawful Bases for Processing
Depending on the purpose of processing, we rely on one or more of the following lawful bases under UK data protection law:
• Public Task – where processing is necessary for the Trust to perform its educational functions.
• Legitimate Interests – where processing is necessary for the effective operation and security of the website and does not override your rights and freedoms.
• Legal Obligation – where we must process information to comply with legal requirements.
• Consent – where consent is specifically required, such as for non-essential cookies or certain marketing communications.
________________________________________
Cookies and Analytics
Our website uses cookies and similar technologies to improve functionality, analyse performance and enhance user experience.
Some cookies are essential for the operation of the website and do not require consent.
Where required by law, we will obtain your consent before placing non-essential cookies on your device.
You can manage your cookie preferences through our website cookie banner or your browser settings.
For further information, please refer to our Cookie Policy.
________________________________________
Sharing Information
We do not sell personal information.
We may share information with:
• Website hosting providers.
• IT support and security providers.
• Website analytics providers.
• Communication and email service providers.
• Regulatory bodies and government agencies where required by law.
• Professional advisers, insurers or legal representatives where necessary.
All sharing is undertaken in accordance with data protection law and appropriate contractual safeguards.
________________________________________
International Transfers
Where a service provider processes information outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with UK data protection law.
These safeguards may include:
• UK adequacy regulations.
• The UK International Data Transfer Agreement (IDTA).
• The UK Addendum to Standard Contractual Clauses.
• Other lawful transfer mechanisms approved under UK data protection legislation.
________________________________________
How Long We Keep Information
We will retain personal information only for as long as necessary for the purposes for which it was collected.
Retention periods will be determined in accordance with:
• The Trust’s Records Retention Schedule.
• Statutory requirements.
• Regulatory requirements.
• Legitimate business and educational needs.
Information that is no longer required will be securely deleted or destroyed.
________________________________________
Security of Information
The Trust takes the security of personal information seriously and implements appropriate technical and organisational measures to protect personal data against:
• Unauthorised access.
• Loss.
• Misuse.
• Alteration.
• Disclosure.
• Destruction.
These measures include secure systems, access controls, encryption where appropriate and regular monitoring of our information systems.
________________________________________
Your Data Protection Rights
Subject to certain exemptions, you have the right to:
• Be informed about how your personal information is used.
• Request access to your personal information.
• Request correction of inaccurate personal information.
• Request erasure of personal information in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing where permitted by law.
• Request transfer of your personal information where applicable.
• Withdraw consent where processing is based on consent.
To exercise any of these rights, please contact the Data Protection Officer.
________________________________________
Data Protection Complaints
If you have concerns about how your personal information has been collected, used or handled, we encourage you to contact us in the first instance.
The Trust will investigate concerns in accordance with its Data Protection Complaints Procedure and will seek to resolve matters promptly and fairly.
Complaints should be submitted to:
Data Protection Officer
Email: dpo@whs.bucks.sch.uk
________________________________________
Information Commissioner’s Office (ICO)
If you remain dissatisfied after completing the Trust’s complaints process, or if you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
________________________________________
Third-Party Websites
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.
We encourage users to read the privacy notices of any external websites they visit.
________________________________________
Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in legal requirements, guidance or our processing activities.
The most current version will always be published on our website and the revision date will be updated accordingly.
________________________________________
Contact Us
If you have any questions about this Website Privacy Notice or how the Trust processes personal information, please contact:
Data Protection Officer
Wycombe High School Academies Trust
Marlow Road
High Wycombe
Buckinghamshire
HP11 1TB
Email: dpo@whs.bucks.sch.uk
Telephone: 01494 523961
Document Owner: Data Protection Officer
Review Frequency: Annually
Next Review Date: July 2027
