The General Data Protection Regulation (GDPR) is a new, European-wide law that replaces the Data Protection Act (DPA) 1998 in the UK.

Withernsea High School are committed to ensuring the safety of the data we hold, and of demonstrating our compliance with the new regulations.

Schools already have strict data protection policies. Any data we collect is stored securely and used appropriately. GDPR brings even greater security and transparency.

Under the GDPR, Withernsea High School is the data controller of the personal information you provide to us. This means the school determines the purposes for which, and the manner in which, any personal data relating to students and their families is to be processed.

In some cases, your data will be outsourced to a third party processor; however, we will always let you know when this is happening, unless the law requires the school to share your data.

Where the school outsources data to a third party processor, the same data protection standards that Withernsea High School upholds are imposed on the processor.

Sarah Evans is the Data Protection Officer, her role is to oversee and monitor the school’s data protection procedures, and to ensure the school is compliant with data protection regulation.

The data protection officer can be contacted on 01964 613133 or

Further information, including our full Data Protection Policy and associated staff/pupil privacy documents, have a permanent home on our Policies page under the Parents tab.

For convenience, these documents can also be found below. Please click the links to view/download the relevant information.

1) - Main Data Protection Policy

2) - Privacy Notice (Staff)

3) - Privacy Notice (Pupils)

4) - Privacy Notice (LAC)

5) - Subject Access Request (SAR) Form

6) - Information for Parents/Carers