About Us and Contact Details
Trinity Multi Academy Trust (“we”, “us”, or “our”) is the Data Controller responsible for your personal data collected through this website.
Registered Address: Trust Headquarters, The Maltings, Maltings Rd, Halifax, HX2 0TJ
Data Controller: Trinity Multi Academy Trust
Data Protection Officer (DPO): Mr P Knightford
DPO Contact Email: dataprotection@trinitymat.org
The Data We Collect
We collect and process personal information when you browse our site, get in touch with us, or use our digital services:
Contact Information: First name, last name, email address, phone number, and organisation/school name (where provided through contact or enquiry forms).
Communication Content: Any information, feedback, or queries submitted in message forms or via telephone.
Technical & Usage Data: IP address, browser type and version, device information, operating system, pages visited, time spent on pages, and referral sources.
Cookies and Tracking Technologies: Information gathered via cookies and similar technologies (see our Cookie Policy for details).
Providing contact details is voluntary; however, failure to provide accurate contact information may prevent us from responding to your enquiry.
Lawful Basis and Purpose of Processing
Under UK data protection law, we rely on the following lawful bases to process your information:
| Purpose of Processing | Type of Data | Lawful Basis (UK GDPR) |
|---|---|---|
| Responding to Enquiries: Addressing requests submitted via forms or telephone | Name, email address, phone number, enquiry message | Legitimate Interests (Article 6(1)(f)) or Public Task (Article 6(1)(e)) to respond to prospective parents, staff, or community members. |
| Website Performance & Analytics: Monitoring website traffic and improving user experience via Google Analytics | Usage data, device identifiers, analytical cookies | Consent (Article 6(1)(a)) obtained via the website cookie consent banner. |
| Content Delivery & Security: Ensuring website stability, displaying web assets (e.g., Google Fonts), and maintaining IT logs | IP address, system logs, technical usage data | Legitimate Interests (Article 6(1)(f)) to secure and deliver digital services. |
| Statutory / Legal Obligations: Complying with regulatory or legal duties | Any relevant collected information | Legal Obligation (Article 6(1)(c)). |
Note: We do not process your phone number or contact form submissions for unsolicited commercial telemarketing or direct marketing without your explicit opt-in consent.
Third-Party Services and International Transfers
We share data with trusted data processors to host, secure, and deliver website functionality:
Website Hosting & IT Support: Secure website hosting and system administration providers.
Google Analytics: Used to analyse aggregated website usage. Analytics cookies are only set if you give consent via the cookie banner.
Google Fonts / External Embeds: Embedded web typefaces and external media platforms used to render page design.
International Transfers
Where data is transferred outside the United Kingdom (for example, to Google LLC servers in the United States), we ensure appropriate safeguards are in place:
Transfers to US entities certified under the UK–US Data Bridge (the UK Extension to the EU–US Data Privacy Framework); or
Standard contractual clauses using the UK International Data Transfer Agreement (IDTA) or the ICO Addendum, accompanied by a transfer risk assessment.
Retention of Your Data
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, and reporting requirements.
All data retention and disposal schedules are carried out in strict accordance with the Trinity Multi Academy Trust Record Management Policy and our statutory retention guidelines (including guidance aligned with the Information and Records Management Society Toolkit for Schools).
General Website Enquiries: Retained in line with our Record Management Policy guidelines for routine correspondence.
Analytics Data: Stored according to standard analytics retention limits and cleared once no longer required.
System & Security Logs: Stored temporarily for operational diagnostics and security auditing before being securely overwritten or destroyed.
Your Rights
Under the UK GDPR and the Data Protection Act 2018, you have rights regarding your personal information:
Right of Access: You can request a copy of the personal data we hold about you (a Subject Access Request).
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): You may ask us to delete your personal data under certain conditions.
Right to Restriction: You can ask us to pause the processing of your data.
Right to Object: You have the right to object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time without affecting previous processing.
Requests are handled free of charge within one calendar month. To exercise any right, please contact our Data Protection Officer using the details in Section 1.
How to Complain
If you have concerns about our handling of your data, please contact our DPO first so we can resolve the issue.
You also have the right to lodge a formal complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Updates to This Policy
We review and update this policy periodically to reflect operational, policy, and legal changes.
Last Updated: September 2026