Data Protection

GDPR image1


The General Data Protection Regulation (GDPR) is a new law that determines how your personal data is processed and kept safe, and the legal rights that you have in relation to your own data. For full details about how we keep your data safe please read  our Data Protection Policy.

Uckfield College collects, holds and uses information about students, staff, parents, governors and other adults connected with the college. Under the Regulation (EU) 2016/679 (General Data Protection Regulation), data about individuals is known as personal data. The regulation puts in place numerous safeguards for the use of data about individuals.

We take our Data protections responsibilities very seriously and all of the information we hold on individuals follows the six key principles set out in the GDPR:


  • Data must be processed lawfully, fairly and transparently
  • It must be collected for specific, explicit and legitimate purposes
  • It must be limited to what is necessary for the purposes for which it is processed
  • Information must be accurate and kept up to date
  • Data must be held securely
  • It can only be retained for as long as is necessary for the reasons it was collected

Information about your rights under GDPR can be found on the Information Commissioner’s website.

We have provided Privacy Notices for students, staff and governors. These explain how we collect and process information:


Privacy Notice : Students

Privacy Notice: Governors 

Privacy Notice: Staff 

We are users of the Gsuite of applications for Education and the Gsuite for Education Privacy notice can be found here