Student Privacy Notice

(Alternative Provision Setting)

Who We Are

We are Empowher, an Alternative Provision setting providing education, support and personalised learning for young people. We are committed to protecting personal information and being transparent about how we collect, use and store personal data.

Our contact details

Empowher Northeast CIC is based in Witham House, Mandale Park, Belmont Industrial Estate, Durham DH1 1TH
Telephone:
Email: beautyaestheticsnetraining@gmail.com

Data Protection Lead:
Name: Louise Forrest Email: beautyaestheticsnetraining@gmail.com

What Information We Collect

We may collect and process the following types of personal information about pupils:

Personal information

  • Name
  • Date of birth
  • Address
  • Contact details

Educational information

  • School history
  • Attainment and assessment records
  • Attendance data
  • Exclusion information
  • Progress reports

Safeguarding information

  • Risk assessments
  • Safeguarding records
  • Support plans
  • Welfare concerns

Special Educational Needs (SEN) information

  • Education, Health and Care Plan (EHCP) details (where applicable)
  • SEN assessments and support plans

Health and medical information

  • Medical conditions relevant to education or safety
  • Medication or care requirements

Behaviour information

  • Behaviour records
  • Incident reports
  • Support or intervention plans

Images and recordings

  • Photographs for educational or promotional purposes (with consent where required)
  • CCTV footage if CCTV systems are used on site

Parent or carer information

  • Parent or guardian names
  • Contact details
  • Emergency contact information

Sources of Information

Information may be obtained from:

  • Referring schools or academies
  • Local authorities
  • Parents or carers
  • Health professionals
  • Social care services
  • Other relevant support agencies

Why We Use Your Information

We use personal data to:

  • Provide education and personalised learning support
  • Monitor attendance, attainment and progress
  • Safeguard pupils and promote their welfare
  • Communicate with parents and carers
  • Share relevant information with referring schools or local authorities
  • Meet our legal responsibilities under education and safeguarding legislation

Legal Basis for Processing

We process personal data under the following legal bases within the UK GDPR:

Public Task – Article 6(1)(e)
Processing is necessary to provide education and carry out tasks in the public interest.

Legal Obligation – Article 6(1)(c)
Processing is required to comply with legal duties, including those set out in the Education Act 1996 and the Children Act 1989.

Vital Interests – Article 6(1)(d)
Processing may occur where necessary to protect the life or safety of a pupil.

For special category data (such as health, SEN or safeguarding information), processing may occur under Article 9(2)(g) and 9(2)(h) of UK GDPR where it is necessary for safeguarding or educational provision.

In some circumstances we may request consent, for example when using photographs.

Who We Share Information With

We may share pupil information where it is necessary and lawful with:

  • Referring schools or academies
  • Local authorities
  • Safeguarding partners including social care
  • Health professionals and support services
  • Examination boards or accreditation organisations
  • The Department for Education where required
  • Emergency services where necessary

We only share information that is relevant and required.

How We Keep Your Information Safe

We take appropriate measures to ensure personal data is protected. These include:

  • Secure electronic systems with restricted access
  • Password protection and secure networks
  • Secure storage of paper records
  • Staff training in confidentiality and data protection
  • Data sharing agreements where information is shared externally

How Long We Keep Information

We retain pupil records in accordance with national guidance from the
Information and Records Management Society.

In most cases:

  • Pupil records are retained until the pupil reaches the age of 25

Safeguarding records may be retained for longer where required.

Your Data Protection Rights

Under the UK GDPR, individuals have the right to:

  • Request access to personal information held about them
  • Request correction of inaccurate information
  • Request erasure of personal data in certain circumstances
  • Request restriction of processing
  • Object to processing where applicable

Requests should be directed to the Data Protection Lead using the contact details above.

Complaints

If you have concerns about how your personal data is being used, please contact us first.

You also have the right to raise a concern with the
Information Commissioner’s Office.

Website: https://ico.org.uk
Telephone: 0303 123 1113

✅ If helpful, I can also provide:

  • A complete list of policies an Alternative Provision website must publish for Ofsted compliance
  • A full policy pack for Alternative Provision (around 30 policies)
  • A ready-to-use website compliance checklist used by AP providers in the UK.