Privacy policy

---

Privacy Notice

At GMT, we respect the privacy of children and their parents or carers. 

The personal information that we collect about you and your child is used only to provide appropriate care for them, maintain our service to you, and communicate with you effectively. 

Our lawful basis for processing the personal information relating to you and your child is so that we can fulfil our contract with you. We process personal data under many lawful bases, including contract, legal obligations, vital interests (to protect a child/ young person), and legitimate interests where possible. Our legal condition for processing any health-related information that you provide about your child is so that we can provide appropriate support for that child.

Any information that you provide is kept secure by encrypted storage and restricted access. We retain personal data only for as long as necessary. Some records, particularly safeguarding information, must be kept for a legally required period in line with our retention schedule. 

We will use the contact details you give us to contact you via phone, email, social media and post, so that we can send you information about your child, our programme and other relevant news (updates), and so that we can communicate with you.

We will only share personal information about you or your child with another organisation if we:

• Have a safeguarding concern about your child 
• Are required to by government bodies or law enforcement agencies
• Engage a supplier to process data on our behalf (e.g.; to take online bookings (complying with GDPR), or to issue invoices) 
• Have obtained your prior permission.

We may share information without consent where this is necessary to safeguard a child or protect them from harm. 

You have the right to ask to see the data that we have about yourself or your child, and to ask for any errors to be corrected.  Please contact our Data Protection department at dataprotectionofficer@gmt.team Where appropriate, children also have rights over their own information depending on their age and understanding. 

We will respond to all such requests within one month. You can also ask for the data to be deleted, but note that: 

• We will not be able to continue to support your child if we do not have sufficient information about them.
• Even after your child has left our support, we have a statutory duty to retain some types of data for specific periods of time* so we can’t delete everything immediately.

If you have a complaint about how we have kept your information secure, or how we have responded to a request to access, update or erase your data, you can refer us to the Information Commissioner’s Office (ICO). https://ico.org.uk/