The Boarding Schools’ Association (BSA) is a United Kingdom-based Association, serving and representing over 560 member boarding schools in the UK and internationally, training staff and promoting boarding education in independent and state education sectors. BSA services include professional development, government relations, communications, media, publications, conferences and events. The BSA does not operate an advisory service for parents seeking a boarding school.
We take our responsibilities as a data controller seriously and are committed to using the personal data we hold in accordance with the law.
This privacy notice provides detailed information about how we process personal data. Please read it carefully and, if you have questions regarding your personal data or its use, please contact the BSA at BSA@boarding.org.uk; by telephone on +44 (0)207 798 1580; or by post at 4th Floor, 134-136 Buckingham Palace Road, London, UK SW1W 9SA.
2. TYPES OF PERSONAL DATA WE PROCESS
We process personal data about prospective, current and past: member and non-member schools, school staff, BSA staff, training providers/contractors, information about students provided to us by the school and other individuals connected to a member school.
The personal data we process takes different forms – it may be factual information, expressions of opinion, images or other recorded information which identifies or relates to a living individual. Examples include:
- Names, addresses, telephone numbers, e-mail addresses and other contact details
- Images, audio and video recordings
- Financial information (bank details)
- Courses, meetings or events attended
- Membership status of school in other ISC organisations.
As an employer, we need to process criminal records information about individuals (particularly staff and contractors). We do so in accordance with applicable law (including with respect to safeguarding or employment) or by explicit consent.
3. COLLECTING, HANDLING AND SHARING PERSONAL DATA
We collect most of the personal data we process directly from schools (in some cases directly from teachers, training attendees, training providers and parents). We also collect data from third parties (working references, professionals or authorities) or from publicly available resources.
Personal data held by us is processed by appropriate members of staff for the purposes for which the data was provided. We take appropriate technical and organisational steps to ensure the security of personal data about individuals, including secure use of technology and devices, and access to our online systems. We do not transfer personal data outside of the European Economic Area unless we are satisfied that the personal data will be afforded an equivalent level of protection.
Some of our systems are provided by third parties, such as Microsoft Office suite and cloud storage, the BSA website, BSA weekly newsletter, BSA mailings, and independent cloud storage providers. This is always subject to contractual assurances that personal data will be kept securely and only in accordance with our specific directions.
We do not share or sell personal data to other organisations.
4. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
We process personal data to support the BSA’s function of promoting and supporting boarding education in the UK and internationally.
- Names, emails and numbers of key contacts for schools for membership changes, updates and payments
- Names, emails and numbers of attendees of events and training (both current and previous) to provide information on similar training or events
- School-supplied press releases containing names for the purposes of promoting the school through the BSA online networks
- Names and contact details of prospective members schools for the purpose of promoting membership
- Email addresses of key contacts of member schools for BSA weekly newsletter (opt out option for this is always available)
- As part of the BSA membership process, members must provide the BSA with information of their membership of other ISC organisations. This is part of the membership review procedure and allows the BSA to see that schools meet all standards.
- Name/title and school address for purpose of posting BSA Boarding School magazine and BSA promotional content
- Use of images supplied by schools for the promotion of the BSA on the BSA website, social media, print content and presentations
- Contact details for associations that work in conjunction with the BSA/in the educational sector
- Details of individuals who have booked on to BSA training programmes in order to confirm training arrangement, share resources, and keep a record of their attendance
- Details of individuals in the boarding sector who have applied for the Accredited Boarding Practitioner (ABP) scheme to keep them updated with the boarding sector through ABP-specific mailings and promotions
- To contact individuals and schools for financial correspondence
- Details of safeguarding professionals/advisors for the BSA Safeguarding newsletter. Details are provided by individuals who request access to this service, and they are able to opt out at any time by replying to the Safeguarding Newsletter asking to be removed, or by emailing BSA@boarding.org.uk
- Sharing of social media posts from member schools through BSA social networks (retweeting, sharing).
The processing set out above is carried out to fulfil our legal obligations (including staff employment contracts).
5. KEEPING IN TOUCH
The BSA maintains contact with past school Heads/boarding school staff members who have requested to be kept on the BSA mailing lists and have provided their personal details to the BSA to this effect. This is so that the BSA can continue to invite these previous school members to BSA events, keep them updated with the boarding sector and provide them with useful and relevant information. The BSA asks that individuals requesting continued contact provide us with their data preferences to ensure that all communications are requested for and relevant. Individuals can opt out of these mailings at any time by emailing BSA@boarding.org.uk or by clicking on the ‘unsubscribe’ link at the bottom of email contact.
6. HOW LONG WE KEEP PERSONAL DATA
We retain personal data only for legitimate and lawful reasons and only for so long as necessary / required by law.
Details of school staff are updated yearly. Staff who have left the school are removed from our contact lists unless they request to continue to receive BSA contact.
Press releases will remain on the BSA website (News Archive, accessible via search function) and social media pages for a period of 10 years in order to help support schools in the promotion of their brand. Press releases can be removed at any time by emailing BSA@boarding.org.uk.
7. YOUR RIGHTS
You have various rights under Data Protection Law to access and understand the personal data we hold about you, and in some cases to ask for it to be erased or amended or for us to stop processing it, but subject to certain exemptions and limitations.
You always have the right to withdraw consent, or otherwise object to receiving generic communications. Please be aware however that the BSA may have another lawful reason to process the personal data in question even without your consent. This usually relates to staff records (time worked with the BSA, HR purposes and for reference requests).
If you would like to access or amend your personal data, would like it to be transferred to another person or organisation, or have some other objection to how your personal data is used, please make your request in writing to the Director of Operations.
We will to respond to any such written requests as soon as is reasonably practicable and in any event within statutory time-limits, which is one month in the case of requests for access to information. We will be better able to respond quickly to smaller, targeted requests for information. If the request is manifestly excessive or similar to previous requests, we may ask you to reconsider or charge a proportionate fee, but only where Data Protection Law allows it.
You should be aware that certain data is exempt from the right of access. This may include information which identifies other individuals, or information which is subject to legal privilege. We are also not required to disclose any confidential reference given by the BSA for the purposes of the education, training or employment of any individual.
8. PUPIL DATA
We only hold pupil data when it has been provided to the BSA for the purposes of the promotion of a member school (though the BSA Website, social media pages and marketing content such as the Boarding School magazine).
9. SAFEGUARDING DATA
Any data relating to safeguarding is provided to us by our member schools. The data is provided with all details of individuals involved already removed (even if these details are already available in the public domain).
If a school provides information that has not been anonymised, the Head of Safeguarding and Standards will remove all relevant data upon receipt of content. All safeguarding information is kept securely within the BSA system, with severely limited access.
Safeguarding data will not be shared with any external agency, other than to comply with a legal obligation and where there is a lawful basis for it to be shared.
10. CHANGE OF DETAILS
We try to ensure that all personal data held in relation to an individual is as up to date and accurate as possible. Please notify BSA@boarding.org.uk of changes to information, such as contact details.
11. THIS POLICY
Our privacy notice should be read in conjunction with our other policies and terms and conditions which make reference to personal data, including our Commitment to Care Charter and Staff Handbook.
We will update this Privacy Notice when required. Any substantial changes that affect how we process your personal data will be notified on our website and to you directly, as far as practicable.
If you believe that we have not complied with this policy or have acted otherwise than in accordance with Data Protection Law, you should notify the Director of Operations. You can also make a referral to or lodge a complaint with the Information Commissioner’s Office (ICO), although the ICO recommends that steps are taken to resolve the matter with us before involving them.