Skip to content ↓

Privacy Policy

Privacy Policy and Cookies

Last updated: 27.10.25

Eastern Multi Academy Trust is committed to protecting the privacy and security of personal information across all schools within the Trust. This page explains how we collect and use information on our websites, how we use cookies, and links to full privacy notices and CCTV policy applicable to all Trust schools (found at the bottom of this page).

Who we are

Data controller: Eastern Multi Academy Trust

Registered address: Queen Mary Road, Kings Lynn, Norfolk, PE30 4QG.

Data Protection Officer (DPO) / Privacy Contact: datarequests@eastern-mat.co.uk 01553 779685

If you have any questions about this page, please contact our DPO using the details above.

What information we collect via this website

We collect two types of information:

  1. Information you give us directly (e.g. when you use contact forms, job applications, or sign up to newsletters):
    • Name
    • Email address
    • Telephone number
    • Message or enquiry details
    • Any attachments you provide (e.g. CVs)
  2. Information collected automatically when you visit the site:
    • IP address and approximate location
    • Browser and device information
    • Pages visited and time spent on pages
    • Referring website and links clicked
How is your information used?

We will only process (use) your personal information where:

  • We need to comply with a legal obligation;
  • We have a ‘legitimate interest’ to do so in order to support our aims. Our use will be fair and balanced and never unduly impact on your rights.
  • We have a contract with you that we can only fulfil by using your personal information, e.g. to register you for an event.
  • We determine that it is in the public interest.
  • We have asked your consent for us to do so.

We do not collect special category (sensitive) personal data via general website forms unless you voluntarily provide it for a specific purpose (e.g. an application form). If such information is required, a clear lawful basis and notice will be provided on the relevant form. We may process special categories of personal information in the following circumstances:

  • in limited circumstances, with your explicit written consent.
  • where we need to carry out our legal obligations in field of employment/social security law.
  • where there is a substantial public interest with a basis defined by the Data Protection Act 2018.

Less commonly, we may process this type of information where it is needed in relation to legal claims or where you have already made the information public.

How we use personal data

We process personal data for the following purposes and lawful bases:

  • To respond to enquiries (lawful basis: consent or legitimate interest) — to reply to messages and requests submitted via the website contact forms.
  • To manage recruitment/application processes (lawful basis: contract/necessary for recruitment) — information provided on recruitment forms will be used to assess candidates.
  • To provide and improve the website (lawful basis: legitimate interest) — to monitor performance, fix errors and improve user experience.
  • To send communications (lawful basis: consent or legitimate interest) — where you have asked to receive newsletters or updates, or where we have a legitimate interest to inform the school community.
  • To meet legal obligations (lawful basis: legal obligation) — where we are required to retain or share information by law (e.g. safeguarding, statutory reporting).

We will only use your personal data for the purpose for which it was collected unless we reasonably consider that we need to use it for another compatible purpose.

Sharing data with third parties

We may share personal information with:

  • Service providers who support our website (hosting, form processors, analytics providers)
  • Local authorities, the Department for Education or other statutory bodies when required by law
  • Third parties with your explicit consent

All third parties are required to take appropriate security measures and only process personal data in accordance with our instructions and applicable law.

International Transfers

We do not transfer personal data outside of the UK however, where our suppliers do we ensure that the appropriate due diligence is performed and that they only do so under the appropriate adequacy decisions or Standard Contractual Clauses (SCCs) that satisfy the UK Addendum in conjunction with the EU SCCs.

CCTV notice

CCTV may be used on Trust premises for the purposes of:

  • Protecting staff, pupils, visitors and property
  • Preventing and detecting crime
  • Supporting safeguarding and health and safety investigations

Signage & Notice:  All areas where CCTV is in operation have clear signage indicating that CCTV operates and where to find the full CCTV policy and contact details for requests.  A link to our CCTV policy is below.

Disclosing personal data about our staff

As an employer, Eastern Multi-Academy Trust takes its responsibilities regarding the protection of the personal privacy of its staff seriously. Professional contact details for staff members are only made available via our public website if consent has been given for such a disclosure. We will respond to email requests for individual staff members’ contact details by issuing their work contact details only. We will not disclose any private non-work contact details. Any request for the latter will be forwarded to the staff member concerned, who will then decide whether to respond or not.

Automated decision-making and profiling

We do not use automated decision-making or profiling that would have a legal or similarly significant effect on individuals through the website.

Data Retention

For information relating to how long we store your data for, please email datarequests@eastern-mat.co.uk

Our Data retention policy can be found on our policy page: Eastern Multi Academy Trust - Policies 

Requesting access to your personal data

Under UK data protection law you have the right to:

  • Request access to your personal data (subject access request)
  • Request correction of inaccurate data
  • Request erasure of your data (right to be forgotten) in certain circumstances
  • Request restriction of processing
  • Object to processing where we rely on legitimate interests
  • Request data portability where applicable
  • Withdraw consent at any time where processing is based on consent

To make a request for your personal information, or be given access to your child’s educational record, please contact the Academy Principal or make a request via datarequests@eastern-mat.co.uk

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office.

If you have any concerns of queries about the contents of this policy, please contact the Trust Data Lead: datarequests@eastern-mat.co.uk

Complaints

If you have concerns about how we process your personal data, contact the DPO in the first instance. If you remain dissatisfied, you can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/concerns/

How we use cookies

A cookie is a small amount of data, which often includes a unique identifier that is sent to your Internet browser and is stored on your device’s hard drive. Each website can send its own cookie to your browser if your browser’s preferences allow it, but your browser only permits a website to access the cookies it has already sent to you, not the cookies sent to you by other websites. Many websites do this whenever a user visits their website in order to track online traffic.

We use Google Analytics cookies to record information about your visit to the site. None of this information identifies you personally and is used solely to improve the usability of our site.

Please note that during your visits to the Trust website you may notice some cookies that are not related to us. When you visit a page with content embedded from, for example, Twitter, YouTube or Facebook, you may be presented with cookies from these websites. The Trust does not control the dissemination of these cookies. You should check the third party websites for more information about these.

We use the following services:

  • YouTube – to display our videos
  • Twitter or Facebook – to inform you about the latest news and updates at the academy
  • WordPress – to display our web site and related content
  • Issuu - to display some publications

Find out more about cookies here.

Cookies Used

Necessary

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.