Data Protection Policy

All data collected for Wakitu out-of-School and holiday clubs will comply with the Data Protection Act 1998. 

This must adhere to the eight principles set out in the Data Protection Act 1998. 

These principles require that personal data will: 

1 Be obtained and processed fairly and lawfully and will not be processed unless certain conditions are met. 

2 Be obtained for specific and lawful purpose and will not be processed in any manner incompatible with that purpose 

3 Be adequate, relevant, and lawful and not excessive for those purposes 

4 Be accurate and kept up to date. 

5 Not to be kept for longer than is necessary for that purpose. 

6 Be processed in accordance with the data subject’s right 

7 Be kept secure for unauthorised access, accidental loss, or destruction. 

8 Not to be transferred to a country outside the European Economic Area unless that country has adequate levels of protection of personal data. 

We need to collect and store relevant information on children, carers, and staff. Records are strictly for information relevant to carer for the children in our care and staff. 

All information is kept in lockable storage. Whether it be in lockable cabinets or password protected tablets/laptops. All digital information will be encrypted.