- Published
- TBC
- Approval
- Approved by the Board of Directors
- Review
- Annually
- Responsible
- Data Protection Lead — [placeholder]
Summary
This notice explains how Lighthouse Learning Provision Ltd collects, uses, shares and protects personal information — including sensitive information about health, SEND and safeguarding that we receive through referrals from schools, Local Authorities and families.
Who we are
Lighthouse Learning Provision Ltd (Company No. 17244395), registered office 231 Whapload Road, Lowestoft, Suffolk, is the data controller for personal information collected via this website, via referral and enquiry forms, and in the course of providing our alternative provision.
Information we collect
From website visitors: contact details you provide in enquiry, referral or contact forms, and limited technical information required for the website to function. From referrals and placements: identifying details of the child or young person and their family; educational information including EHCP, SEND and attainment data; health and medical information; safeguarding history and current risk information; behavioural and pastoral information; and information about professionals involved in the child's care.
Special-category and safeguarding information
Referrals routinely include special-category personal data — for example, health information, information about disability or SEND, and information revealing racial or ethnic origin — together with information relating to safeguarding and, in some cases, criminal offences. We collect only what is necessary to consider a referral, agree a safe placement and provide appropriate learning and support.
Why we use information (purposes)
To consider referrals and decide whether we can meet need; to agree and manage placements with commissioners and families; to plan, deliver and record learning; to safeguard and promote the welfare of children and young people; to meet health, safety and safer-recruitment obligations; to communicate with families, schools, Local Authorities and other professionals; and to meet our legal, regulatory and contractual duties.
Lawful bases
We rely on the following UK GDPR lawful bases: performance of a contract or task in the public interest for commissioned placements; compliance with a legal obligation, including safeguarding and education duties; legitimate interests for general enquiries and website communications; and, where required, consent. For special-category data we additionally rely on Article 9(2)(b) (employment, social security and social protection), Article 9(2)(g) (substantial public interest — safeguarding of children and individuals at risk) and, where appropriate, Article 9(2)(a) (explicit consent). Criminal offence data is processed under Schedule 1 conditions of the Data Protection Act 2018 for safeguarding purposes.
Who we share information with
Commissioning schools and Local Authorities; safeguarding partners including children's social care, police and health; the Designated Safeguarding Lead in the child's home setting; medical and therapeutic professionals involved in the child's care; the Disclosure and Barring Service and our safer-recruitment processes; our regulated professional advisers (for example, HR, legal and IT support) under written contracts; and statutory bodies where we are required by law to share information. We do not sell personal information and we do not use it for marketing.
International transfers
We aim to keep personal information within the UK. Where a supplier is based outside the UK, we ensure appropriate safeguards are in place in line with UK GDPR.
Retention
We keep personal information only for as long as necessary. Safeguarding and child-protection records are retained in line with statutory guidance and the Independent Inquiry into Child Sexual Abuse recommendations. Other records are retained under our records retention schedule, which is available on request.
Security
We apply organisational and technical measures to protect personal information, including access controls, secure record keeping, staff training, and written data-sharing arrangements with partners.
Your rights
Under UK GDPR you have rights to be informed; of access; to rectification; to erasure (in limited circumstances); to restrict processing; to data portability; to object; and rights relating to automated decision making. We do not carry out automated decision making that produces legal or similarly significant effects. To exercise any of these rights please contact us using the details below.
Cookies
See our Cookie Policy and Cookie Settings for information about cookies and how to change your preferences.
Contact and complaints
To contact us about your personal information, email info@lighthouselearningprovision.co.uk or write to the Data Protection Lead at the registered office above. If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.