You can read our standard privacy notice on this page (below). 

Privacy notices for specific services or groups of people can be found here.

Achieving for Children privacy notice

Introduction

Achieving for Children holds and processes a considerable amount of information, including personal information about children, young people and their families it provides services to, and other people. Achieving for Children is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations. This privacy notice explains how we use any personal information we collect about you.

To understand how your own personal information is processed check the privacy notice of the service or contact the service directly to ask about your personal circumstances.

Who we are

Achieving for Children is a community interest company created in 2014 by the Royal Borough of Kingston upon Thames and London Borough of Richmond to provide children’s services. In August 2017 the Royal Borough of Windsor and Maidenhead became co-owner of Achieving for Children.

Achieving for Children delivers children’s services and the local authority statutory responsibilities relating to children aged up to 25 years across the boroughs of Kingston, Richmond and Windsor and Maidenhead. Achieving for Children is registered as a controller with the Information Commissioner’s Office (ICO) registration number ZA045069.

Personal data we collect

There are a variety of reasons why we work with children and their families and ways to collect information about you and your child. We collect and process the following personal data:

How we collect personal data 

Whilst the majority of personal information you provide to us is mandatory, some of it is requested on a voluntary basis. In order to comply with the data protection legislation, we will inform you at the point of collection, whether you are required to provide certain personal information to us or if you have a choice in this. We collect personal data via a number of means including:

How we use your personal data

The personal data you provide helps us to support your family and makes sure that we meet our legal duties and responsibilities. We use information about children, young people and their families:  

Legal basis for processing your personal data

Under the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018, the lawful basis for processing personal data is public task or to comply with a legal obligation.  If we need to collect special category data, we rely upon reasons of substantial public interest (safeguarding of children and of individuals at risk, and equality of opportunity or treatment), for the provision of social care and for the establishment, exercise or defence of legal claims.

These lawful basis was underpinned by the following (non exhaustive list) legislation:

Marketing campaigns

We use an Audience Placement Tag which helps us build anonymous audiences from users who show an interest in a digital campaign, and help us retarget the said audience with further messages relating to that campaign, or similar future campaigns.

This helps public sector organisations communicate more meaningfully with audiences who might not usually engage.

How long your personal data will be kept

We only keep your personal data for as long as is required by law and in accordance with our retention schedule. Further details are recorded in the service privacy notices.

Keeping your information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

Achieving for Children’s email service has been configured to Government Digital Service and we encrypt and authenticate email in transit using Transport Layer Security (TLS) and Domain-based Message Authentication, Reporting and Conformance (DMARC). We will ensure that when we send emails containing your personal information they are sent using appropriate security measures to encrypt the data in transit. This may involve the use of a third party encryption tool where appropriate.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Who we share your personal information with

We hold your information securely and only share information where it is appropriate and lawful to do so. Where this is necessary, we are required to comply with all aspects of data protection legislation.  We may share your personal data between Achieving for Children departments and services so that we can keep our information up to date, provide cross departmental support and improve our services to you and your child. 

Some of the organisations we may share your personal data with to carry out our statutory functions or to support the delivery of the service you receive may include (non exhaustive list) the following: 

Artificial intelligence

Achieving for Children utilises Google Gemini, an artificial intelligence platform, to enhance various services and improve efficiency. Gemini may process data to assist with tasks such as generating summaries, translating text, transcribing meetings and providing insights. Any processing of personal data by Gemini is conducted in accordance with applicable data protection laws and this Privacy Notice. We take appropriate measures to ensure the security and confidentiality of your information.

Your rights and access to information 

Under data protection legislation you have the right to request access to the information that we hold about you. To request a copy of your data, please read the Individual Rights Requests on this website and then submit your request using your preferred method of contact.

You also have the right to:

If you have any questions or concerns about the way we process personal data, or would like to discuss anything in this privacy notice, please contact our Data Protection Officer: dpo@achievingforchildren.org.uk

If you want to make a complaint about how we handle your personal data, we ask that you give our Data Protection Officer the opportunity to respond in the first instance, but you are not obliged to do this. You can make a complaint directly to the Information Commissioner’s Office. 

Other notices

You can find other privacy notices specific to particular services or groups of people on this page

Our website privacy notice explains how we collect, use and share your information via this website.