(1) Introduction

Lundi Education and Care Services (“Lundi”) is committed to protecting and respecting your privacy. This policy (together with Lundi’s Legal Notice and any other documents referred to within it) sets out the basis on which any personal data that you provide to Lundi (including its subsidiaries and services) will be processed by us.

Your personal data is information which, by itself or combined with other information, can be used to identify you as the data subject. By “processing,” we mean any activity that involves using your personal data. This includes collecting, recording, storing, retrieving, using, amending, disclosing, destroying, and transferring it to other individuals or organisations outside of Lundi.

Please read the following carefully to understand our views and practices regarding your personal data and how Lundi will treat it.

(2) The types of personal data Lundi may collect from you

Personal information about individuals is usually provided directly by the individual (a child or young person, their parent or guardian, foster carer, contractor, customer, or visitor). Personal information provided to other organisations may also be forwarded to Lundi (for example, from a local authority social worker when placing a young person with us).

Lundi may collect and process the following personal information:

• Personal details (name, date of birth, email address, home address, telephone number, National Insurance number, unique pupil number, gender, disability, sexual orientation, racial or ethnic origin, religious or other beliefs, criminal convictions).

• Family details (contact details and relationships).

• Financial information (bank details, payment information).

• Safeguarding, special educational needs, physical and mental health records.

• Education details (school admissions, attendance, absences, behaviour, exclusions, certificates, exams, progress records).

• Visual images and records (photographs, CCTV recordings).

• Information relating to offences or alleged offences.

• Details of goods and services provided.

Some of this information (for example, health information, safeguarding data, or information about alleged or proven offences) is considered sensitive personal information. Lundi will only process this type of data where we have your explicit consent, where it is necessary for legal reasons, or where you have deliberately made it public.

If you contact Lundi, we may also keep a record of that correspondence, including details of your visits to our website and the resources that you access.

(3) The reasons why Lundi collects personal information

We collect personal information to enable us to fulfil our legitimate business and service obligations, including to:

• provide education and training

• provide residential care, healthcare, welfare and educational support services

• provide fostering services for children and young people

• administer school and learning facilities

• maintain our accounts and records

• support and manage our staff

• communicate with parents, carers, and guardians

• ensure the safeguarding and wellbeing of children and young people

• manage admissions, attendance, and pupil progress

• promote our services (with your consent)

(4) Lundi’s legal basis and purposes for using your personal information

We use your information in line with the following lawful bases:

a) Contractual obligations – where use of your information is necessary to perform a contract with you.

b) Legitimate interests – where use of your information is necessary for our business needs or those of third parties working on our behalf (e.g., security monitoring via CCTV).

c) Legal obligations – where we must comply with the law (e.g., sharing pupil data with Ofsted, the Department for Education, or local authorities).

d) Public interest tasks – such as safeguarding children, cooperating with statutory bodies, or maintaining safe school and care environments.

e) Vital interests – where it is necessary to protect someone’s life (e.g., holding health or allergy information in case of emergencies).

f) Consent – where you have given us permission (e.g., using photographs in promotional materials, sending marketing communications). You can withdraw consent at any time.

(5) Who Lundi will share your personal information with

We may share your personal information with:

• Parents, carers, and families of children and young people in our care

• Ofsted, Department for Education, and local authorities

• Care Quality Commission (CQC) or equivalent regulators

• Police, courts, and safeguarding agencies

• Healthcare professionals, social and welfare organisations

• Contractors and service providers engaged by Lundi

• Staff, students, governors, and advisory boards

• Educational and training bodies

• Financial organisations where required

We will never sell your personal data to third parties.

(6) Transferring your personal information internationally

If personal data must be transferred outside the UK, it will only be transferred within the European Economic Area (EEA) or to countries with equivalent data protection safeguards in place, in full compliance with UK GDPR and the Data Protection Act 2018.

(7) How long Lundi keeps your personal information

We retain personal information only as long as necessary for the purposes collected, or as required by law and regulatory obligations. For example, safeguarding records may be kept for 25 years from a child’s birth.

Retention periods vary by data type. Where data is no longer needed, it is securely deleted or destroyed.

(8) How we keep your personal information safe

We take security of personal data seriously. Information is stored on secure systems with restricted access. Staff are trained in data protection, and we enforce strict policies and procedures.

Where third-party organisations process data on our behalf, we ensure contracts are in place requiring compliance with our data protection standards.

(9) Automated decision making

We do not make decisions about you solely by automated means. Any significant decisions, such as admissions or exclusions, are made by qualified staff.

(10) Your Data Protection Rights

You have the following rights under data protection law:

• Access to the personal data we hold about you

• Correction of inaccurate or incomplete data

• Erasure of your data where no longer required

• Restriction of processing in certain cases

• Objecting to processing, including direct marketing

• Data portability

• Withdrawal of consent (where consent is the basis for processing)

Requests can be made in writing to our Data Protection Officer (details below). We may ask for proof of identity to protect your information.

(11) IP addresses and cookies

Lundi may collect technical information (such as IP addresses and browser details) and use cookies to improve our website and personalise services. You can refuse cookies via your browser, but this may limit website functionality.

(12) Changes to this Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page.

(13) Contacting our Data Protection Officer

We have appointed a Data Protection Officer to oversee compliance.

📧 admin@lundicare.com
📍 Suite 28, Anglesey Business Centre, Anglesey Road, Burton-On-Trent, England, DE14 3NT

(14) Your right to contact the Information Commissioner

If you are unhappy with how we have handled your personal information, you can raise your concerns with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

(15) Contact us

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to our Data Protection Officer using the contact details in Section 13.