skip navigation

DATA PROTECTION POLICY

In order to operate efficiently, to meet our contractual and legal obligations Nord Anglia has to collect and use data about people with whom we work. These may include members of the public, current, past and prospective employees, clients and customers, and suppliers.

We recognise that the lawful and correct treatment of personal information is very important to successful operations and to maintaining our customers', employees’ and suppliers’ confidence in Nord Anglia.  

We are aware of our obligations under the Data Protection Act 1998 (“Act”) and are committed to maintaining high standards of confidentiality and privacy with respect to the processing of personal information.  

We intend to collect personal data for the sole purpose of meeting specifically planned, agreed and necessary purposes and to retain that information only for as long as those purposes remain valid. 

Personal data will only be passed to a third party where required by law, to comply with statutory obligations or where we have obtained the express consent of the individual concerned.

Any personal data which we collect, record or use in any way whether it is held on paper, on computer or other media will have appropriate safeguards applied to it to ensure that we comply with the Act.  We fully endorse and adhere to the eight principles of Data Protection as set out in the Act. These principles state that personal data must: 
 

  • be fairly and lawfully processed;
  • be processed for specified and lawful purposes and not in any other way which would be incompatible with those purposes;
  • be adequate, relevant and not excessive;
  • be accurate and kept up to date;
  • not be kept for longer than is necessary;
  • be processed in line with the data subject's rights;
  • kept secure; and
  • not be transferred to a country which does not have adequate data protection laws.
Our purpose for holding personal data and a general description of the categories of people and organisations to which we may disclose it are listed in the public register of data controllers maintained by the Information Commissioner.  We will not disclose information to any third party unless we believe it is lawful to do so. You may inspect this or obtain a copy from the Information Commissioner's Office or website.

In order to meet the requirements of the principles, we will:

                • observe fully the conditions regarding fair collection and use of personal data

          • meet our legal obligations to specify the purpose for which personal data is used

          • collect and process appropriate personal data and only to the extent that it is needed to fulfil operational needs or to comply with any legal requirements;

          • ensure the quality of personal data used;

          • apply strict checks to determine the length of time personal data is held;

      • take appropriate technical and organisational security measures to safeguard personal data;

      • ensure that personal data is not transferred abroad without suitable safeguards;

      • ensure that the rights of people about whom the information is held can be fully exercised under the Act.

Where we collect any sensitive personal data, we will take appropriate steps to ensure that we have explicit consent to hold, use and retain such data. Sensitive personal data is personal data about an individual's racial or ethnic origin, political opinions, religious beliefs, trade union membership, physical or mental health, sex life, details of the commission or alleged commission of any offence and any court proceedings relating to the commission of an offence.

Companies within the Nord Anglia group may share personal data (only within the Nord Anglia group and excluding sensitive personal data) to enable them to integrate administrative tasks such as address changes. This helps to maintain consistent records across the group.

Under the Act, you may write to us and request a copy of the personal data which we hold about you. We are legally allowed to charge you a fee (currently £10) for providing this information. If the details we hold about you are inaccurate, you have the right to ask us to correct, rectify, block or erase such inaccurate information. In certain circumstances you may have the right to prevent processing.