Privacy Policy

1. Introduction

St George’s Preparatory School Limited (“the School”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of all individuals whose information we hold. This Privacy Policy explains how we collect, use, store, share and protect your personal data in accordance with the Data Protection (Jersey) Law 2018 and, where applicable, the UK General Data Protection Regulation (UK GDPR).

The School’s website is located at www.stgeorgesprep.co.uk.

2. Who We Are

St George’s Preparatory School Limited is the Data Controller responsible for your personal data.

Registered address:
La Hague Manor
Rue de la Hague
St Peter
Jersey
JE3 7DB

Telephone: +44 (0) 1534 481593

Email: school.office@stgeorgesprep.co.uk

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Pupils

Full name, date of birth, gender and nationality
Home address and contact details
Academic records, progress reports and assessment data
Attendance records
Medical and health information, including dietary requirements and allergies
Special educational needs and disability (SEND) information
Photographs and video recordings for educational and promotional purposes (with consent)
Behavioural and pastoral records
Emergency contact details

3.2 Parents and Guardians

Full name and contact details (address, telephone, email)
Financial information for the purposes of fee administration
Communications and correspondence with the School

3.3 Staff and Job Applicants

Full name, address and contact details
Employment history, qualifications and references
Right to work documentation
DBS (Disclosure and Barring Service) check results
Payroll and pension information
Performance and appraisal records
Medical information relevant to employment

3.4 Website Visitors

When you visit this website, we may collect limited information automatically through cookies and similar technologies, such as pages viewed, referring website, approximate location, and device or browser type. This is used to help the site function correctly and to understand how visitors use it. For full details, please see our Cookies Policy.

If you contact us via email or an enquiry form, we will also collect the personal information you choose to provide.

4. How We Collect Your Personal Data

We collect personal data in the following ways:

Directly from you, for example when you complete an admissions application, contact us by telephone or email, or submit an enquiry via our website
From your child’s previous school, as part of the admissions process
From third parties such as medical professionals, local authorities or the Government of Jersey where relevant
Generated internally through the day-to-day operation of the School, for example attendance records and academic reports

5. Lawful Basis for Processing

We process personal data on the following lawful bases under the Data Protection (Jersey) Law 2018:

Contract: to fulfil our obligations under the contract for educational services between the School and parents/guardians
Legal obligation: to comply with our legal duties, including safeguarding, employment law and regulatory requirements in Jersey
Legitimate interests: where processing is necessary for the School’s legitimate interests, such as maintaining the security of our premises and communicating with the school community
Consent: where we have obtained your freely given, specific and informed consent, for example for the use of photographs in marketing materials
Vital interests: to protect the vital interests of a pupil or other individual in an emergency situation

Where we process special category data (such as health information), we do so under the additional conditions set out in the Data Protection (Jersey) Law 2018, including for reasons of substantial public interest and for the provision of educational services.

6. How We Use Your Personal Data

We use personal data for the following purposes:

Administering admissions and enrolment
Providing education and pastoral care to pupils
Monitoring and reporting on pupil progress and welfare
Communicating with parents and guardians about their child’s education
Managing safeguarding responsibilities
Complying with our legal and regulatory obligations in Jersey
Managing staff employment, payroll and HR matters
Administering school fees and financial records
Promoting the School through newsletters, the website and other communications (where consent has been obtained)
Maintaining the safety and security of our school community

7. Sharing Your Personal Data

We do not sell your personal data to third parties. We may share personal data with:

Government of Jersey — including the Children, Young People, Education and Skills (CYPES) directorate, where required by law
Jersey Safeguarding Partnership Board — in connection with our safeguarding obligations
Medical and health professionals — where necessary for the welfare of a pupil or member of staff
External examiners and awarding bodies — for the administration of assessments
IT service providers and software suppliers — who process data on our behalf under appropriate data processing agreements
Professional advisers — such as legal advisers, auditors and insurers
Law enforcement agencies — where required by law or court order

Where we share data with third-party processors, we ensure appropriate contractual safeguards are in place.

8. Transfers Outside Jersey

We will not transfer your personal data outside of Jersey or the United Kingdom unless adequate protections are in place in accordance with the Data Protection (Jersey) Law 2018. Where any transfer does occur, we will ensure it is subject to appropriate safeguards.

9. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our retention periods are guided by Jersey education and employment legislation and best practice guidance. In general:

Pupil records are retained for a minimum of seven years after a pupil leaves the School
Staff employment records are retained for a minimum of six years after employment ends
Unsuccessful job applications are retained for six months then securely destroyed
Financial records are retained for seven years in accordance with tax and accounting requirements

When personal data is no longer required, it is securely deleted or destroyed.

10. Your Rights

Under the Data Protection (Jersey) Law 2018, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to ask us to correct inaccurate or incomplete data
Right to erasure — to ask us to delete your personal data in certain circumstances
Right to restriction of processing — to ask us to limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured, commonly used format in certain circumstances
Right to object — to object to processing based on legitimate interests or for direct marketing purposes
Rights related to automated decision-making — we do not carry out automated decision-making or profiling

To exercise any of these rights, please contact us at school.office@stgeorgesprep.co.uk or write to us at the address above. We will respond within one month of receiving your request.

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Cookies

This website uses cookies to ensure the site functions correctly, to understand how visitors use it, and to support certain third-party features such as embedded social media feeds.

For full details on the cookies we use, why we use them, and how you can manage your preferences, please see our Cookies Policy.

12. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. Access to personal data is restricted to staff who need it to carry out their responsibilities, and all staff are trained in their data protection obligations.

13. Complaints

If you have a concern about how we handle your personal data, please contact us in the first instance at school.office@stgeorgesprep.co.uk so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Jersey Office of the Information Commissioner (JOIC):

Jersey Office of the Information Commissioner
2nd Floor, 5 Castle Street
St Helier
Jersey
JE2 3BT
Website: www.jerseyoic.org
Email: enquiries@jerseyoic.org

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation or our internal practices. The current version will always be available on our website at www.stgeorgesprep.co.uk. We encourage you to review this policy periodically.