Data Protection - E-ACT

Source: https://www.e-act.org.uk/data-protection

Archived: 2026-04-23 17:19

Data Protection - E-ACT
Enhance your experience
We use cookies on this site to improve your user experience.
Accept
Manage your preferences
Podcasts
Policies
Contact
Our mission
How we work
Work for us
Train To Teach
Ideas
Our academies
News & views
Data Protection
E-ACT publishes all required data protection information in line with the UK GDPR, Data Protection Act 2018 and ICO guidance. This includes privacy notices for all relevant data subjects, details of the Trust’s Data Protection Officer, and clear information on individual rights and how to exercise them.
Data Privacy
Policies & Notices
Subject Access Requests
Freedom Of Information Requests
Information and Records Retention Policy
Reporting a data protection concern
Data Privacy
The UK GDPR is legislation that sets rules around how organisations collect, use and protect personal data (such as names, addresses and educational records).
UK GDPR requires any organisation that processes personal data to make the following clear to individuals:
what personal data is collected and held
why it is collected
how it is used
how long it is kept
what data protection rights individuals have
This page provides an overview of how E-ACT (“the Trust” or “we”) collects and uses personal information during and after your relationship with us.”
Policies & Notices
Data Protection Policy
Privacy Notice for Website Users, Event Attendees and External Service Providers
Privacy Notice for pupils in Year 7 and above
Privacy Notice for pupils in Year 6 and below
Privacy Notice for Parents and Carers
Privacy Notice for Staff, Volunteers, Trustees and Governance Roles Holders
Freedom of Information (FOI) Requests
Our
Publication Scheme
provides information that we routinely make available, along with previous responses to Freedom of Information requests. and our previous responses to Freedom of Information Act requests.
E-ACT Freedom of Information Policy
How to request information
You can submit an FOI request by:
Email:
foi@e-act.org.uk
Post:
Freedom of Information, E-ACT,
The Orangery, 28 Headlands,
Kettering, Northamptonshire NN15 7HP
Please include your name, contact details, the academy the request relates to and a clear description of the information you are requesting.
Information about specific academies
All FOI enquiries are handled centrally by E-ACT. If your request relates to a specific academy, please still contact
foi@e-act.org.uk
.
What happens when we receive your request?
We will acknowledge your request as soon as possible.
We aim to respond within 20 working days, in line with the Freedom of Information Act.
If your request is particularly complex or would take more than 18 hours of staff time to process, we may need to charge a fee. In this case, we will contact you to explain the cost and confirm whether you wish to proceed.
Are there any exemptions?
Some information may not be released due to legal or commercial reasons, for example:
Personal data of others
Information subject to legal privilege
Commercially sensitive information
If an exemption applies, we will explain why the information cannot be released.
Right to appeal
If you are unhappy with our response, you may:
Request an internal review by writing to E-ACT.
If still dissatisfied, you can appeal to the Information Commissioner’s Office (ICO).
Subject Access Requests (SAR)
Our trust is committed to giving individuals access to the personal data we hold about them, in line with the UK GDPR.
How to submit a request
You can make a Subject Access Request by:
Email:
dpo@e-act.org.uk
Post:
Subject Access Request, E-ACT,
The Orangery, 28 Headlands,
Kettering, Northamptonshire NN15 7HP
Please include your name, contact details, the academy the request relates to and a clear description of the information you are requesting.
Requests on behalf of a child:
For children aged 13 or over, we will seek verbal consent before processing the request. They have the same rights as adults.
For children under 13, a parent or guardian can submit the request on their behalf.
What happens when we receive your request
We will acknowledge your request as soon as possible.
We may ask you to clarify or narrow down your request if necessary to ensure we can provide the relevant information.
We aim to respond within one month (30 calendar days). For more complex requests, this may be extended by up to two additional months and we will inform you if this applies.
Any personal data relating to other individuals will be redacted to protect their privacy.
We will provide the data in a clear and understandable format.
Charges
SARs are normally provided free of charge.
A reasonable fee may apply if a request is excessive or requires significant administrative effort.
We will notify you in advance if any fee is due.
Questions or support
If you have questions about submitting a SAR or need guidance, please contact
dpo@e-act.org.uk
Information and Records Retention Policy
This policy outlines how we manage and retain records in accordance with legal and regulatory requirements. It ensures that personal data is kept only for as long as necessary, after which it is securely deleted or anonymised. For more details on our retention practices and how long different types of data are kept, please review the full policy below.
E-ACT Information and Records Retention Policy
Reporting a data protection concern
If you have a concern about how your personal data has been handled, or believe a data protection incident may have occurred, you can contact the Trust’s Data Protection Officer at
dpo@e-act.org.uk
.
We take all data protection matters seriously and will review any concerns in line with our internal procedures and legal obligations.
If you remain dissatisfied after raising a concern with us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at
www.ico.org.uk
We Recommend
How we work
Work for us