UK GDPR & vacancies

General Data Protection Regulation (GDPR)

The law which manages how we use your information has changed. The new European General Data Protection Regulation (GDPR) law came into effect on 25 May 2018. The aim of this law is to ensure all personal data is protected and organisations who work with such data are held accountable for its protection.

To help explain how your information is used we have published a Privacy Notice, which you can read here.


Data Protection Officer

We have appointed a Data Protection Officer for our school with matters relating to Data Protection and the use of your personal information.
Our Data Protection Officer is registered with the Information Commissioners Officer (ICO) and can be contacted at


Subject Access Requests (SAR)

Individuals wishing to access their personal data held by The Malling School under the Data Protection Act can send a completed Subject Access Request (SAR) form to the Data Protection Officer (DPO).

The personal data requested should be clearly identified. It may be necessary to confirm the identity of the data subject and/or the person making the request. The Malling School will respond to requests within 30 calendar days of receipt of the completed form (provided sufficient information has been given to the school to enable the request to be processed).

We will comply with the Information Commissioner's guidelines for Subjects Access Requests. 

The SAR Form can be completed online here, or alternatively sent to the DPO via or by writing to us at:

Data Protection Office
The Malling School
Beech Road,
East Malling, West Malling,
ME19 6DH

Privacy Notice for STAFF, Parents and Carers


Privacy Notice for Job Applicants