1. Introduction

Maiden Erlegh Trust (MET) is committed to protecting the privacy and personal data of everyone who uses our websites. This Privacy Policy explains how we collect, use, store and protect personal information when you visit the Maiden Erlegh Trust website or the websites of our schools.

This policy is written for parents and carers, students and children, staff, job applicants and members of the public. We have aimed to use clear, plain English so it is easy to understand.

This Privacy Policy applies to:

• The Maiden Erlegh Trust website
• All school websites operated by Maiden Erlegh Trust

It relates only to information collected through our websites. Separate privacy notices apply to pupil records, staff employment records and other Trust systems.

2. Who we are

Maiden Erlegh Trust is the data controller for the personal data collected through our websites.

Data controller:
Maiden Erlegh Trust
Silverdale Road Earley Berkshire RG6 7HS

Data Protection Officer (DPO):
Judicium Consulting Limited
Email: dataservices@judicium.com

The Data Protection Officer oversees how we use personal data and can be contacted if you have any questions or concerns.

3. How we use personal data

We only collect and use personal data when there is a clear reason to do so. This may include:

• Responding to enquiries submitted through website contact forms or email links
• Managing requests for information from parents, carers or members of the public
• Supporting recruitment activity where our website links to job opportunities
• Understanding how our websites are used so we can improve them
• Ensuring our websites function correctly and securely

We do not use our websites to carry out marketing profiling, behavioural advertising or automated decision-making.

4. The personal data we collect

Depending on how you use our websites, we may collect:

Information you provide directly

• Name
• Email address
• Message content when you contact us

Information collected automatically

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages

This information is collected using cookies and similar technologies. Further details are set out in our Cookie Policy.

5. Lawful bases for processing

Under UK GDPR, we must have a lawful reason for using personal data. For website-related processing, this will usually be:

• Public task: where processing is necessary for us to carry out our role as an education provider
• Legal obligation: where we are required to process information by law
• Consent: where you have given clear permission, for example for non-essential cookies
• Legitimate interests: where processing is necessary for website administration and security, and does not override your rights

Where we rely on consent, you can withdraw it at any time.

6. Cookies and website analytics

Our websites use cookies to ensure they work properly and to help us understand how they are used.

Some cookies are strictly necessary and do not require consent. Others are only used if you give permission.

Full details of the cookies we use, why we use them and how you can manage your preferences are provided in our Cookie Policy, which should be read alongside this Privacy Policy.

7. Embedded content and third-party services

Some pages on our websites include embedded content from trusted third-party services. This may include:

• Video content hosted on platforms such as YouTube or Vimeo
• Maps provided by Google Maps

When you view this content, these providers may set their own cookies or collect usage data. We do not control how third parties use your data.

Where consent is required, this content will only load after you have agreed to the relevant cookies.

8. Sharing personal data

We do not sell personal data or share it for advertising purposes.

Personal data collected through our websites may be shared with:

• Our website hosting and support provider, Juniper Education
• IT service providers who support website security and functionality
• Regulatory or law enforcement bodies where we are legally required to do so

All processors acting on our behalf are required to handle data securely and in line with data protection law.

9. International data transfers

Some third-party services used on our websites may process data outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect personal data.

10. How long we keep personal data

We keep website-related personal data only for as long as it is necessary for the purpose it was collected.

Retention periods are determined in line with our Trust retention schedule and legal requirements.

11. Children and young people

We take extra care to protect children’s personal data.

Our websites are designed to provide information rather than to collect data from children. We:

• Do not knowingly collect unnecessary personal information about children
• Do not carry out profiling or targeted advertising
• Use clear language to explain how data is used

If you are a child and are unsure about anything on our websites, we encourage you to speak to a parent, carer or a trusted adult.

12. Your data protection rights

Under data protection law, you have rights including:

• The right to access your personal data
• The right to request correction of inaccurate data
• The right to request deletion of data in certain circumstances
• The right to restrict or object to processing
• The right to withdraw consent where consent is used

Requests can be made by contacting the Data Protection Officer.

13. Complaints

If you are unhappy with how we handle your personal data, we encourage you to contact us first so we can address your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Website: https://www.ico.org.uk

14. Changes to this Privacy Policy

We keep this Privacy Policy under regular review to ensure it remains accurate and compliant.

The most up-to-date version will always be published on our websites.

Last reviewed: 07.09.2026
Next review due: 01.08.2027

Form Submissions

We may collect information about your approximate location when you submit a form on our website.

This may include:

• Your IP address
• Geographic location (such as city or region), inferred from your IP address or device data

We collect this information to:

• Identify and prevent fraudulent or malicious activity
• Diagnose technical issues

We process this data under our legitimate interests in operating and improving our website and ensuring its security.

We do not use this information to identify your precise location, and we do not share it with third parties for marketing purposes.

Form Submissions

We may collect information about your approximate location when you submit a form on our website.

This may include:

• Your IP address
• Geographic location (such as city or region), inferred from your IP address or device data

We collect this information to:

• Identify and prevent fraudulent or malicious activity
• Diagnose technical issues

We process this data under our legitimate interests in operating and improving our website and ensuring its security.

We do not use this information to identify your precise location, and we do not share it with third parties for marketing purposes.

Cookies Used

Necessary

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.