Privacy Policy and Cookies
Last updated: 23.10.25
Eastern Multi Academy Trust is committed to protecting the privacy and security of personal information across all schools within the Trust. This page explains how we collect and use information on our websites, how we use cookies, and links to full privacy notices and CCTV policy applicable to all Trust schools.
Who we are
Data controller: Eastern Multi Academy Trust
Registered address: Queen Mary Road, Kings Lynn, Norfolk, PE30 4QG.
Data Protection Officer (DPO) / Privacy Contact: datarequests@eastern-mat.co.uk 01553 779685
If you have any questions about this page, please contact our DPO using the details above.
What information we collect via this website
We collect two types of information:
- Information you give us directly (e.g. when you use contact forms, job applications, or sign up to newsletters):
- Name
- Email address
- Telephone number
- Message or enquiry details
- Any attachments you provide (e.g. CVs)
- Information collected automatically when you visit the site:
- IP address and approximate location
- Browser and device information
- Pages visited and time spent on pages
- Referring website and links clicked
We do not collect special category (sensitive) personal data via general website forms unless you voluntarily provide it for a specific purpose (e.g. an application form). If such information is required, a clear lawful basis and notice will be provided on the relevant form.
How we use personal data
We process personal data for the following purposes and lawful bases:
- To respond to enquiries (lawful basis: consent or legitimate interest) — to reply to messages and requests submitted via the website contact forms.
- To manage recruitment/application processes (lawful basis: contract/necessary for recruitment) — information provided on recruitment forms will be used to assess candidates.
- To provide and improve the website (lawful basis: legitimate interest) — to monitor performance, fix errors and improve user experience.
- To send communications (lawful basis: consent or legitimate interest) — where you have asked to receive newsletters or updates, or where we have a legitimate interest to inform the school community.
- To meet legal obligations (lawful basis: legal obligation) — where we are required to retain or share information by law (e.g. safeguarding, statutory reporting).
We will only use your personal data for the purpose for which it was collected unless we reasonably consider that we need to use it for another compatible purpose.
Sharing data with third parties
We may share personal information with:
- Service providers who support our website (hosting, form processors, analytics providers)
- Local authorities, the Department for Education or other statutory bodies when required by law
- Third parties with your explicit consent
All third parties are required to take appropriate security measures and only process personal data in accordance with our instructions and applicable law.
CCTV notice
CCTV is used on Trust premises for the purposes of:
- Protecting staff, pupils, visitors and property
- Preventing and detecting crime
- Supporting safeguarding and health and safety investigations
Signage & Notice: All areas where CCTV is in operation have clear signage indicating that CCTV operates and where to find the full CCTV policy and contact details for requests. A link to our CCTV policy is below.
Disclosing personal data about our staff
As an employer, Eastern Multi-Academy Trust takes its responsibilities regarding the protection of the personal privacy of its staff seriously. Professional contact details for staff members are only made available via our public website if consent has been given for such a disclosure. We will respond to email requests for individual staff members’ contact details by issuing their work contact details only. We will not disclose any private non-work contact details. Any request for the latter will be forwarded to the staff member concerned, who will then decide whether to respond or not.
Automated decision-making and profiling
We do not use automated decision-making or profiling that would have a legal or similarly significant effect on individuals through the website.
Requesting access to your personal data
Under UK data protection law you have the right to:
- Request access to your personal data (subject access request)
- Request correction of inaccurate data
- Request erasure of your data (right to be forgotten) in certain circumstances
- Request restriction of processing
- Object to processing where we rely on legitimate interests
- Request data portability where applicable
- Withdraw consent at any time where processing is based on consent
To make a request for your personal information, or be given access to your child’s educational record, please contact the Academy Principal or make a request via datarequests@eastern-mat.co.uk
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office.
If you have any concerns of queries about the contents of this policy, please contact the Trust Data Lead datarequests@eastern-mat.co.uk
Complaints
If you have concerns about how we process your personal data, contact the DPO in the first instance. If you remain dissatisfied, you can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/concerns/
How we use cookies
A cookie is a small amount of data, which often includes a unique identifier that is sent to your Internet browser and is stored on your device’s hard drive. Each website can send its own cookie to your browser if your browser’s preferences allow it, but your browser only permits a website to access the cookies it has already sent to you, not the cookies sent to you by other websites. Many websites do this whenever a user visits their website in order to track online traffic.
We use Google Analytics cookies to record information about your visit to the site. None of this information identifies you personally and is used solely to improve the usability of our site.
Please note that during your visits to the Trust website you may notice some cookies that are not related to us. When you visit a page with content embedded from, for example, Twitter, YouTube or Facebook, you may be presented with cookies from these websites. The Trust does not control the dissemination of these cookies. You should check the third party websites for more information about these.
We use the following services:
- YouTube – to display our videos
- Twitter – to inform you about the latest news and updates at the academy
- WordPress – to display our web site and related content
- Issuu - to display some publications
Find out more about cookies here.
Cookies Used
Necessary
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.
You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
Targeting
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.
They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.