Data Protection

At Kenilworth Multi Academy Trust (KMAT), we are committed to protecting the privacy and personal data of our pupils, parents, staff, and wider community. We handle all personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

These laws set out how personal data should be collected, used, stored, and shared — and give individuals important rights over their data. We are transparent about how we use your data and take care to process it lawfully, fairly, and securely.

Privacy Notices

We publish specific privacy notices for different groups. Please select the notice that applies to you:

Pupils and Parents Privacy NoticeStaff Privacy NoticeJob Applicants Privacy NoticeGovernors, Trustees and Volunteers Privacy NoticeVisitors and Contractors Privacy NoticeAlumni Privacy Notice

Each notice includes:

  • What information we collect and why
  • Who we may share it with
  • How long we keep it
  • Your rights and how to exercise them

Our Data Protection Policies

We maintain the following policies to support good data governance and compliance:

KMAT Data Protection Policy

KMAT Data Breach Policy

KMAT Data Retention Policy

These documents are reviewed regularly and approved by the Trust's leadership.

Your Rights

Under the UK GDPR, you have rights over your personal data, including:

  • Right to access your data
  • Right to correct inaccurate information
  • Right to request deletion or restriction of your data
  • Right to object to certain uses of your data
  • Right to withdraw consent
  • Right to lodge a complaint with the Information Commissioner's Office (ICO)

We are committed to responding promptly to any request you make about your data.

Contact Us

If you have a query about how your personal data is used or wish to raise a concern, please contact the Data Protection Lead for the relevant school. Details of this can be obtained in the Data Protection Policy or from the school office.

Data Controller

Kenilworth Multi Academy Trust (KMAT) is the Data Controller for both Kenilworth School and Sixth Form and The Westwood Academy.

KMAT is registered as the Data Controller with the Information Commissioner’s Office (ICO).
Registration Number: ZA495703

You may contact the Trust as the Data Controller by:

  • Email: enquiries@kmat.org.uk (Please use the subject line: FAO Data Protection Officer for KMAT)
  • Letter:
    Data Protection Officer,
    Kenilworth Multi Academy,
    Glasshouse Lane,
    Kenilworth,
    Warwickshire,
    CV8 2AL
  • Phone: 01926 859 421
  • Or in person at the Trust office.