Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for using personal information.
- a) General personal data
We process personal data using the following lawful bases:
- Article 6(1)(b) – Contract
Where processing is necessary to deliver a booked service such as a residential visit, course, training, hire of premises, or event. - Article 6(1)(c) – Legal obligation
Where processing is required to meet legal or regulatory duties. - Article 6(1)(e) – Public task
Where processing is necessary for the performance of a task carried out in the public interest as a local authority service.
- b) Special category data
Some information we process is more sensitive, such as health, medical, dietary, and special educational needs and disabilities (SEND) information.
This information is processed under:
- Article 9(2)(c) – Vital interests, and
- Article 9(2)(g) – Substantial public interest
This allows us to keep people safe, make reasonable adjustments, and respond to emergencies.