{"id":446,"date":"2026-07-16T13:18:01","date_gmt":"2026-07-16T13:18:01","guid":{"rendered":"https:\/\/uk2.demomeapp.com\/thearkv1\/?page_id=446"},"modified":"2026-07-16T13:18:01","modified_gmt":"2026-07-16T13:18:01","slug":"data-protection-policy","status":"publish","type":"page","link":"https:\/\/uk2.demomeapp.com\/thearkv1\/policies\/data-protection-policy\/","title":{"rendered":"Data Protection Policy"},"content":{"rendered":" <p><strong>Explains how we handle personal data, comply with UK GDPR and protect the privacy of our learners, families and staff.<\/strong><\/p>\r\n\r\n                <h3>1. Purpose and Scope<\/h3>\r\n                <p>This policy sets out The Ark Specialist College&#8217;s commitment to protecting personal data and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all personal data processed by the college, whether held electronically or in paper form.<\/p>\r\n\r\n                <h3>2. Data Protection Principles<\/h3>\r\n                <p>We adhere to the following data protection principles:<\/p>\r\n                <ul>\r\n                    <li><strong>Lawfulness, fairness and transparency<\/strong> \u2014 we process data lawfully and openly<\/li>\r\n                    <li><strong>Purpose limitation<\/strong> \u2014 we only use data for specified, explicit purposes<\/li>\r\n                    <li><strong>Data minimisation<\/strong> \u2014 we collect only what is necessary<\/li>\r\n                    <li><strong>Accuracy<\/strong> \u2014 we keep data accurate and up to date<\/li>\r\n                    <li><strong>Storage limitation<\/strong> \u2014 we retain data only as long as needed<\/li>\r\n                    <li><strong>Integrity and confidentiality<\/strong> \u2014 we keep data secure<\/li>\r\n                    <li><strong>Accountability<\/strong> \u2014 we demonstrate our compliance<\/li>\r\n                <\/ul>\r\n\r\n                <h3>3. Roles and Responsibilities<\/h3>\r\n                <p>The Principal is the Data Protection Officer (DPO) for the college, supported by the administration team. All staff are responsible for handling personal data securely and in accordance with this policy. Training is provided to all staff on data protection and information security.<\/p>\r\n\r\n                <h3>4. Data Subject Rights<\/h3>\r\n                <p>Individuals whose data we hold have the following rights:<\/p>\r\n                <ul>\r\n                    <li>Right of access (Subject Access Request)<\/li>\r\n                    <li>Right to rectification<\/li>\r\n                    <li>Right to erasure (&#8216;right to be forgotten&#8217;)<\/li>\r\n                    <li>Right to restrict processing<\/li>\r\n                    <li>Right to data portability<\/li>\r\n                    <li>Right to object<\/li>\r\n                    <li>Rights related to automated decision-making<\/li>\r\n                <\/ul>\r\n                <p>Requests to exercise these rights should be made in writing to the Principal at <a href=\"mailto:info@thearkcollege.com\">info@thearkcollege.com<\/a>.<\/p>\r\n\r\n                <h3>5. Data Security<\/h3>\r\n                <p>We implement appropriate technical and organisational measures to safeguard personal data, including: secure storage, access controls, encryption, regular backups, staff training, and incident response procedures. In the event of a personal data breach, we will notify the ICO and affected individuals in accordance with our legal obligations.<\/p>\r\n\r\n                <h3>6. Data Sharing<\/h3>\r\n                <p>We share personal data only when necessary and lawful. This may include sharing with local authorities, health professionals, Ofsted, and other regulatory bodies. We do not sell or rent personal data.<\/p>\r\n\r\n                <h3>7. Data Retention<\/h3>\r\n                <p>We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods are set out in our retention schedule and are reviewed regularly. Records are disposed of securely when no longer needed.<\/p>","protected":false},"excerpt":{"rendered":"Explains how we handle personal data, comply with UK GDPR and protect the privacy of our learners, families and staff. 1. Purpose and Scope This policy sets out The Ark Specialist College&#8217;s commitment to protecting personal data and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. [&hellip;]","protected":false},"author":2,"featured_media":0,"parent":194,"menu_order":8,"comment_status":"closed","ping_status":"closed","template":"template-parts\/policydetails.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-446","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/pages\/446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/comments?post=446"}],"version-history":[{"count":1,"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/pages\/446\/revisions"}],"predecessor-version":[{"id":447,"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/pages\/446\/revisions\/447"}],"up":[{"embeddable":true,"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/pages\/194"}],"wp:attachment":[{"href":"https:\/\/uk2.demomeapp.com\/thearkv1\/wp-json\/wp\/v2\/media?parent=446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}