Your privacy — making a data request
For everyoneYour privacy
Section titled “Your privacy”Under UK GDPR you have rights over the personal data your trust holds about you. The Your privacy page lets you make a request and see what you’ve already asked for. Open it from your account, or go straight to /me/privacy.
You’ll need to be signed in. Because you’re logged in, we already know who you are — there’s no separate identity-verification step before you can submit.
The requests you can make
Section titled “The requests you can make”| Request | What it asks for |
|---|---|
| Access | A copy of the personal data the trust holds about you (a subject access request). |
| Rectification | Correction of data about you that’s wrong or incomplete. |
| Erasure | Deletion of your data, where there’s no overriding reason to keep it. |
| Restriction | A pause on processing your data while something is checked. |
| Portability | Your data in a portable format you can take elsewhere. |
| Objection | An objection to a particular use of your data. |
Making a request
Section titled “Making a request”- Your name and email are filled in from your account. You can edit them — for example, a parent who is also a governor might submit on behalf of their child. The trust’s Data Protection Officer (DPO) will confirm identity before fulfilling either way.
- Choose the type of request.
- Add a description if it helps explain what you’re after. This is optional.
- Submit. You’ll get a reference, and the request lands in the DPO’s queue.
What happens next
Section titled “What happens next”The DPO will be in touch within one month — the response time UK GDPR sets. For a complex request they may extend this by a further two months and will tell you if so. They may ask you to confirm your identity before releasing anything.
Tracking your requests
Section titled “Tracking your requests”The page lists your own past requests with their reference, type, the date you submitted, the date a response is due, and the current stage:
- Pending — received, not yet picked up.
- In progress — the DPO is working on it.
- Fulfilled — completed.
- Declined — the DPO couldn’t action it (they’ll explain why).
- Closed — finished and closed off.
You can only see your own requests. The DPO’s working notes, and anyone else’s requests, are never shown here.