Privacy notice

Who is responsible

The Iraqi School is run by the Iraqi Educational Trust, a charity registered in England and Wales, number 1115053. The Trust is the data controller for your child’s information.

Registered office: 2 Crompton Road, Manchester M19 2GH. The school itself meets at Parrs Wood High School, Wilmslow Road, East Didsbury, Manchester M20 5PG.

For any question about your data — including a request to see it, correct it or delete it — email office@iraqiedu.org or call 0161 533 0304.

What we collect

About your child: their name in English and Arabic, date of birth, gender, ethnicity, and any medical condition or allergy you tell us about; then their attendance record, fees and payments, and — for children in Year 1 and above — a school Google account for classwork.

About you: your name, relationship to the child, email address, phone number and home address, plus at least one emergency contact you nominate — we ask for a second, and we would rather have it.

Why we collect it, and our lawful basis

To enrol your child, take the register, contact you, manage fees and keep your child safe. Our lawful basis is a task carried out in the public interest (providing education), and contract where fees are concerned.

Health information and ethnicity are special category data. We rely on the substantial public interest conditions for education and for equality monitoring. Health information is used only to keep your child safe and is shown to the staff who teach them.

Using your child’s photograph in school material relies on your consent alone. It is optional, ticking it is entirely your choice, and you can withdraw it at any time by contacting the school — your child’s place is unaffected either way.

Who sees it

The people who run the school. A teacher taking the register sees any medical note for the children in front of them. The office sees registrations and the whole of a child’s record. The treasurer sees fees and payments. The Trust’s trustees, who are volunteers closely involved in running the school, have read access to the pupil list and the accounts.

Nobody outside the school and the Trust sees your child’s record, and no other family can see it. Every change to it is logged with who made it and when.

We also use these service providers: Google (pupil accounts and Google Classroom), Stripe (online card payments — your card details go straight to Stripe and are never seen or stored by the school), Resend (sending our emails),Render (hosting the system and its database, inside the EU) and Sentry (reports of technical faults so we can fix them, kept inside the EU, with names and contact details left out). We never sell your data or share it for marketing.

How long we keep it

We keep your child’s record — name, date of birth, contact details, medical notes and consents — for as long as they attend the school, and then for one further year in case you or another school needs it. After that we delete it.

Some things we have to keep longer: attendance registers and enrolment records for six years after the end of the school year, and fee, payment and Gift Aid records for six years plus the current year, because charity and tax rules require it. If we ever have to record a concern about a child’s safety, that record is kept until their 25th birthday, which is the standard for schools.

Your rights

You can ask for a copy of your child’s information, ask us to correct anything wrong, ask us to delete it, or object to how we use it. You can also withdraw your photograph consent at any time. Email office@iraqiedu.org and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.