html site templates

Cookies and GDPR

Our Policies

Please check on the statements below


The Graveley School website uses cookies, which are small text files that are placed on your computer by websites you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. They cannot be used to get information from your computer about you or read any personal material kept by you on your computer.

The cookie is used to make the link between you and the information you have provided to the website. The creation of a cookie on your computer does not give the website any access to other information such as your email address.

The Privacy and Electronic Communications (EC Directive) Regulations 2003 (the Regulations) cover the use of cookies and similar technologies for storing information, and accessing information stored, on a user’s equipment such as their computer or mobile. Amendments to the regulations came into effect on 25 May 2011 The Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 make it compulsory for websites to inform users if cookies are being used, and to provide some information on how cookies are used.

Where the school links to external/third party websites or other Hertfordshire County Council websites/HCC/HfL systems which may set cookies, we have no control over these. Certain of our pages may contain links to Twitter, Facebook and Survey Monkey. These web sites set cookies as part of their processes which we cannot control.

A list of the cookies we use on the site is below: 

Google Analytics

General Data Protection Regulation (GDPR)

Graveley School as Data Controller ensures that all personal data of pupils, parents, staff, governors, visitors and other individuals is collected, stored and processed in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018).
We process data in order to meet our statutory obligations as a maintained school and an employer; to ensure we meet our duty of care to those on our premises; and to provide additional services to pupils and parents which complement the curriculum of the school and enhance the broader education and opportunities of pupils;
We will share data where required in order to ensure our pupils and staff are safe, this will include with health; social care and the police as necessary.
We will share data with consent to support services provided by third parties under contract to us or by mutual agreement. This includes the provision of school meals; school trips and after school activities.
Our policy applies to all personal data, regardless of the format. Our Data Protection policy meets the requirements of the GDPR and the DPA 2018. It is based on guidance published by the Information Commissioner’s Office (ICO) on the GDPR and the ICO’s code of practice for subject access requests.
You have the following rights in respect of data we hold about you:
• You have the right to access the information we hold about you.
• be informed about what information we hold about you and how we use it
• correct any factual errors
• object to us processing your data. However, our responsibilities may mean that we can't stop processing
• request that your data is deleted. However, again, we may be unable to delete your data if there's a need for us to keep it. In this case, we'll explain why we need to keep the data
• ask us to stop using your data while we consider a request to have it corrected or deleted. There may be some circumstances where we can't do that – we'll explain if this is the case
• request data we hold about you in a format that allows it to be transferred to another organisation (in certain circumstances)
• request that any decisions taken using automated processes are reviewed by a member of staff. You have the right to challenge those decisions.

If you have a concern about how we handle your data, our Data Protection Officer is Mrs E Dunnicliffe and she can be contacted at
If you remain unhappy about the way your data is handled you have the right to complain to the ICO 

Our Data Protection Policy can be found here

Our Data Response Plan can be found here