Data Protection

Data Protection

DDAT has two legal entities, each governed by an academy trust (DDAT and DDAT2). Please click on the links below to access data protection and privacy notices for each trust.

To identify which Trust your school belongs to, please click here.

As the UK has now left the EU, there have been some changes to data protection legislation. To comply with the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019, every policy, notice and procedural guide that refers to ‘GDPR’ shall now be read as ‘UK GDPR’. The rights, responsibilities and data protection provided by the Data Protection Act 2018 and the GDPR are not changed. Our procedures and arrangements will not change.

Freedom of Information

The public has the right of access to information the Trust produces in the course of its work. The DDAT Freedom of Information Policy commits the Trust to make information available to the public as part of its normal business activities. Requests should be sent to or by writing to us.

Subject Access Request (SAR)

Individuals have the right to access their personal data and supplementary information held by DDAT and our academies. The UK GDPR and the Data Protection Act 2018 clarifies that the reason for allowing individuals to access their personal data is so that they are aware of, and can verify, the lawfulness of the processing (please refer to this guidance from the Information Commissioners Office).

If you wish to request information we hold about you, please complete the Subject Access Request form. Completed forms can be sent to the relevant Trust School or DDAT Trust Office or you can email the Data Protection Officer at Any request in writing from the individual (Data Subject) will be considered as a valid request, whatever the format as long as it contains the relevant information to enable us to deal with your request.


This form contains personal data as defined by the Data Protection Act 2018. As Data Controller, Derby Diocesan Academy Trust (DDAT) will protect the personal data provided and ensure that it is not passed to anyone who is not authorised to see it. The information provided will be processed in accordance with the regulations contained in the Act and the DDAT Data Protection Policy which is available above. By submitting this form, you agree that DDAT may process your information in accordance with these terms.