Privacy & Data Protection Centre

Your Privacy Matters

At MASKK (Manor After School & Kids Klubs), we are committed to protecting the privacy, dignity and rights of children, young people, families, staff, volunteers, trustees and website users.

We collect and use information to provide safe, high-quality services, support children and families, meet legal obligations and operate our charity effectively. We are committed to being transparent about what information we collect, why we collect it, how we use it and the rights available to you. Our wider data protection framework includes privacy notices, data retention procedures, data asset management and information security controls. 

Safeguarding is central to our work. While we respect confidentiality, there may be occasions where we are legally or professionally required to share information to help keep a child or vulnerable person safe.

 

Manor After School & Kids Klubs
Last Reviewed July 2026 

 Our Privacy Commitment

We aim to:

✅ Collect only the information we need

✅ Use information fairly, lawfully and transparently

✅ Keep information safe and secure

✅ Respect confidentiality

✅ Only share information when necessary and lawful

✅ Retain information only for as long as required

✅ Support individuals to exercise their information rights

✅ Continually review and improve how we manage information

These commitments are supported by MASKK’s privacy notices, data retention arrangements and information governance processes.

 

Your Information Rights

Under UK GDPR and the Data Protection Act 2018, you may have the right to:

Access Your Information
You can ask for a copy of the personal information we hold about you.

Correct Information
You can ask us to correct information that is inaccurate or incomplete.

Erase Information
You can request deletion of information in certain circumstances.

Restrict Processing
You can ask us to temporarily limit how we use your information.

Object to Processing
You can object to certain types of information processing.

Data Portability
You may request that information be transferred to another organisation where applicable.

Withdraw Consent
Where we rely on consent, you can withdraw it at any time.

Some rights may not apply in every circumstance, particularly where safeguarding, legal obligations or regulatory requirements apply.

 

Subject Access Requests (SARs)

If you would like to know what personal information MASKK holds about you, you can make a Subject Access Request.

To help us process your request efficiently, please provide:

  • Your name and contact details
  • Information about the records you are requesting
  • Proof of identity where required

We will respond in accordance with UK GDPR requirements.

Email: data@maskk.org.uk 


Information Sharing

We do not sell personal information.

Information may be shared where necessary and lawful with organisations such as:

  • Schools
  • Local authorities
  • Health professionals
  • Social care services
  • Ofsted
  • Funders and commissioners
  • Professional advisers
  • IT and software providers
  • Police or safeguarding agencies where required

Information sharing will always be limited to what is necessary for the relevant purpose. Safeguarding concerns may require information to be shared without consent where permitted or required by law.


How We Protect Information

MASKK uses a range of measures to protect personal information, including:

  • Secure cloud systems
  • Password-protected devices
  • Restricted access permissions
  • Secure storage of paper records
  • Staff training and procedures
  • Information governance controls
  • Archive and disposal processes

Sensitive information such as safeguarding, health, SEND and employment records receives additional protection.


Data Retention and Disposal

We only keep information for as long as it is needed.

Records are reviewed regularly and, where appropriate, are:

  • Securely destroyed
  • Permanently deleted
  • Anonymised
  • Archived where legally or historically required

MASKK maintains a Data Map, Data Asset Register, Archive Register and Disposal Log to support compliance with UK GDPR and to ensure information is managed responsibly throughout its lifecycle.


Data Breaches

A personal data breach may occur if information is:

  • Lost
  • Accessed without permission
  • Sent to the wrong person
  • Accidentally disclosed
  • Subject to unauthorised access

If a breach occurs, MASKK will:

  1. Investigate the incident promptly.
  2. Take action to minimise risk.
  3. Record the incident.
  4. Notify affected individuals where required.
  5. Report to the Information Commissioner’s Office (ICO) where legally necessary.

MASKK encourages anyone who becomes aware of a possible data breach to report it immediately. Information security forms part of our wider GDPR governance arrangements.


Making a Complaint

We take concerns about privacy seriously and encourage individuals to contact us first so we can try to resolve any issues quickly and fairly.

Contact MASKK

Email: data@maskk.org.uk 

Please provide as much information as possible about your concern so we can investigate appropriately.


Information Commissioner’s Office (ICO)

If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection.

ICO Website: https://www.ico.org.uk 

ICO Helpline: 0303 123 1113

 

 

Privacy and Data Protection Documents

The following documents provide more detailed information about specific areas of privacy and data protection at MASKK.

Website Information

🔗 Website Privacy Policy
Explains how information is collected and used when you visit our website.

🔗 Cookie Policy
Explains how cookies and similar technologies are used on our website.

🔗 Accessibility Statement
Explains our commitment to making information accessible to everyone.


Families and Service Users

🔗 Parent & Carer Privacy Notice
Explains how information about children, parents and carers is collected, used and shared.

🔗 Photography and Media Guidance
Information about photography, filming and consent preferences.


Workforce Information

🔗 Workforce Privacy Notice
Information for employees, volunteers, students, placements and trustees.


Information Governance

🔗 Data Retention Policy Summary
Overview of how long records are kept and how information is safely disposed of.

🔗 Full Policy and Procedure, including Data Protection Policy
Further details about MASKK’s approach to information governance.

 

Contact us

If you have any questions about this or to request:

  • A copy of the full GDPR and Data Protection Policy
  • A copy of our Privacy Notices
  • Information about your rights
  • To make a data protection request

MASKK – Manor After School & Kids Klubs
Email: data@maskk.org.uk
Website: https://www.maskk.org.uk