1. Who We Are
   1. This is the website of Wylye Valley CofE VA Primary School, a maintained primary school in the United Kingdom. We are the data controller for any personal information collected or processed through this website.
   2. Contact Details:

• Wylye Valley CofE VA Primary School
• Cherry Orchard, Codford, Warminster, BA12 0PN
• Telephone: 01985 850461
• Email: admin@wylyevalley.wilts.sch.uk
  3. Data Protection Officer (DPO): Mr Jeremy Shatford - please contact the school office using the details above and your message will be passed to the DPO securely.

2. Lawful Basis for Processing
   1. Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing personal data collected through our website. In most cases:

• We rely on consent for the use of non-essential cookies (such as Google Analytics).
• We rely on legitimate interests for the use of essential cookies that enable the website to function properly.

3. Cookies
   1. What Are Cookies?
      1. Cookies are small text files placed on your device when you visit a website. Some cookies are essential to make the site work properly, while others help us understand how visitors use the site.
   2. Cookies We Use

Cookie Name	What It Does	Lawful Basis
ASP.NET_SessionId	Essential cookie used if a user logs in, maintaining the session state.	Legitimate Interests
_utma, _utmb, _utmc, _utmz	Google Analytics cookies to help us understand visitor behaviour.	Consent

• 3. Cookie Consent
     1. In line with the Privacy and Electronic Communications Regulations (PECR):
• We do not set non-essential cookies (e.g., Google Analytics) without your consent.
• When you first visit our website, you will be asked whether you accept or reject cookies.
• You can change your preferences at any time by adjusting your browser settings or revisiting the cookie banner (if available).
  1. 2. You can also opt out of Google Analytics tracking by installing this browser tool:
        https://tools.google.com/dlpage/gaoptout

4. Social Media and Third-Party Content

• We do not embed content from platforms such as YouTube, Vimeo, Facebook, or Twitter. These platforms should not place cookies on your device through our website.
• Our website may contain links to external educational or community sites. We are not responsible for their privacy practices and recommend that you review their privacy notices.

5. Data Retention
   1. We do not collect personal data via this website (e.g., via contact forms).
      1. Where technical logs or cookie-related data are collected, these are retained only as long as necessary to monitor website performance and ensure security, typically no longer than 26 months, in line with Google Analytics' default settings.
6. Data Sharing
   1. Where necessary, we may share limited website-related data with trusted third parties:

• Juniper Education – our website provider, who hosts and maintains the website on our behalf.
• Google LLC – if you consent to Google Analytics cookies, anonymised usage data is shared for analytical purposes.
  1. 1. We do not sell or share personal information collected through the website with any other third party.

7. Data Security
   1. Our website uses HTTPS encryption to secure the transmission of data between your browser and the site. Access to the website's administration tools is restricted to authorised staff and contractors, and is protected by secure login credentials. Regular updates and maintenance are carried out to ensure website security.
8. Children’s Data
   1. This website is aimed at parents, carers, and members of the school community. It is not designed for children, and we do not knowingly collect personal information from children via the website.
   2. If a child were to submit personal data (e.g., via a linked service), we would process that data in line with the UK GDPR and ensure appropriate safeguards are in place. If we become aware that personal data has been collected from a child without the appropriate permissions, we will delete that data.
9. Your Rights
   1. Under the UK GDPR, you have the following rights regarding your personal data:

• The right to access your personal information.
• The right to ask us to correct inaccurate or incomplete data.
• The right to ask us to erase your personal data in certain circumstances.
• The right to restrict or object to processing in certain situations.
  2. You can find out more about your rights from the Information Commissioner’s Office (ICO):
     https://ico.org.uk/for-the-public/
  3. You also have the right to lodge a complaint with the ICO if you are unhappy with how we use your data.
  4. To make a data protection request or raise a concern, please contact the school office in the first instance.

10. Changes to This Privacy Notice
    1. We keep our website privacy notice under regular review. If we make significant changes to how we use cookies or website data, we will update this notice and post a message on our homepage where appropriate.
11. Last updated: June 2025

Cookies Used

Necessary

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.