GDPR Requirements

Who are we?

Our website address is:

What personal data we collect and why we collect it


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: After approval of your comment, your profile picture is visible to the public in the context of your comment.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms


If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


Who we share your data with


How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.


Freedom of Information

The Freedom of Information Act 2000 applies to all information held by public authorities. The purposes of the Act are summarised below:

  • To allow access to recorded information held by public authorities
  • To create exemptions from the duty to disclose information
  • To establish the arrangements for enforcement and appeal

This means you can have access to information held by public authorities or information that is held on their behalf.

However, it doesn’t give people the right to School documents or other types of records or information on other people. It gives a right (subject to exemptions) to the relevant information, so there will be times when only some parts of a document can be made available.

Before making your information request

The School already makes a lot of information available, so check first, as if you can already get hold of it, the School isn’t obliged to deal with your request.

Who can request information under FOI?

Anyone can request information under the Act regardless of age, nationality or location.

How do I make a request?

Your request must be made in writing. You can submit your request via email to

Your request must include:

  • Your name
  • A contact address
  • A description of the information you wish to obtain
  • Any preferences for the format for receiving the information

As much as we would like to, the School doesn’t have the manpower to respond to broad requests for information, so please be as specific as possible so we can locate it. Also, we should be able to get back to you faster. If we don’t have enough information to find what you want, we may come back to you with more questions.

What happens when I make a request?

When we get a request for information, we have to respond promptly within 20 working days. We will consider your request, and let you know if we can provide the information you requested, or explain why we can’t.

What does it cost?

If the requested information costs more than £450, we are allowed to charge you for it. We are also allowed to refuse the request. If we intend to charge a fee, we will tell you first and you then have 3 months in which to pay. Once we receive the fee, we will then respond to your request. If the cost of meeting your request exceeds the appropriate limit in the regulations, we are not obliged to meet your request. If you refuse to pay the fee, the School can refuse to supply the information. The School also reserves the right to charge for disbursements e.g. Photocopying and postage. If we refuse the request we will write to you to ask you to revise it.

What happens if my request is refused?

A request for information may only be refused if:

  • it is vexatious or repeated
  • if we have asked you for more information in order to meet your request and you have not provided it
  • if it falls under one of the exemptions

If your request is refused, we will explain why and give you details of how to apply for an internal review of this decision. For details on how to make a complaint, see below. If, after an internal review, the School still refuses your request, you may ask the Information Commissioner to review that decision.

Internal reviews

If you are unhappy with a response, you can request an internal review. Following this, you have a further right of appeal to the Information Commissioner and subsequently to the Information Tribunal.

You may be unhappy with the treatment you have received if, for example:

  • your application was not dealt with within the 20 working days time-limit
  • you did not receive all of the information requested
  • you feel that exemptions have been wrongly applied
  • you feel that a fee has been wrongly charged

Part VI of the Section 45 Code of Practice requires public authorities to have a process in place to ensure that applicants are able to ask a public authority for an internal review if they are not content with the public authority’s decision on release. This is the first review stage for applicants.

Any internal review will be conducted by a person who was not party to the original decision on whether to release information.

The internal review will be a fair and impartial review of decisions made during the original consideration of whether to release information.

All internal reviews will consider the information released against the information requested and make a full review of the papers associated with the original application.

The internal reviewer will discuss the decisions made with the staff member, or members, who dealt with the original application in order to build a full picture as to how decisions were made.

After concluding the internal review, the reviewer will discuss their conclusions with the school’s  freedom of information specialist in order to ensure that any internal processes, which may need to be altered, are fully reviewed.

You will be fully informed of the outcome of the internal review.

What are the timescales for internal reviews?

Internal reviews have to be completed in a reasonable timescale. Whitehall Park School aims to conclude internal reviews as follows:

  • we aim to deal with simple reviews within 20 working days of receiving the complaint
  • we aim to deal with complex reviews – in particular where it is necessary to reconsider the public interest test – with within six weeks of receiving the complaint.
Making a complaint

We will always try to help you with queries and requests for information. But if you do have a complaint, please contact the school via this link.