Who is responsible
The Iraqi School, part of the Iraqi Educational Trust, a registered UK charity. Address: [TO CONFIRM: school postal address]. For any question about your data, contact [TO CONFIRM: contact email]. ICO registration: [TO CONFIRM: ICO number, or confirm none held].
What we collect
About your child: their name in English and Arabic, date of birth, gender, ethnicity, and any medical condition or allergy you tell us about; then their attendance record, fees and payments, and — for children in Year 1 and above — a school Google account for classwork.
About you: your name, relationship to the child, email address, phone number and home address, plus two emergency contacts you nominate.
Why we collect it, and our lawful basis
To enrol your child, take the register, contact you, manage fees and keep your child safe. Our lawful basis is a task carried out in the public interest (providing education), and contract where fees are concerned.
Health information and ethnicity are special category data. We rely on the substantial public interest conditions for education and for equality monitoring. Health information is used only to keep your child safe and is shown to the staff who teach them.
Using your child's photograph in school material relies on your consent alone. It is optional, ticking it is entirely your choice, and you can withdraw it at any time by contacting the school — your child's place is unaffected either way.
Who sees it
School staff, limited to what their role needs: a teacher sees their own class, the office sees registrations, the treasurer sees fees.
We also use these service providers: Google (pupil accounts and Google Classroom), Stripe (online card payments — your card details go straight to Stripe and are never seen or stored by the school), Resend (sending our emails) and Render (hosting the system and its database, inside the EU). We never sell your data or share it for marketing.
How long we keep it
[TO CONFIRM: retention period the school sets]
Your rights
You can ask for a copy of your child's information, ask us to correct anything wrong, ask us to delete it, or object to how we use it. Contact [TO CONFIRM: contact email] and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
Last updated: [TO CONFIRM: date this is approved]