Data Protection

Data Protection

DDAT has two legal entities, each governed by an academy trust (DDAT and DDAT2). Please click on the links below to access data protection and privacy notices for each trust.

To identify which Trust your school belongs to, please click here.

Derby Diocesan Academy Trust Track and Trace Update

Please click here for an update regarding the NHS ‘Track and Trace’ scheme and its implications for data protection Derby Diocesan Academy Trust Track & Trace Update

Freedom of Information

The public has the right of access to information the Trust produces in the course of its work. The DDAT Freedom of Information Policy commits the Trust to make information available to the public as part of its normal business activities. Requests should be sent to or by writing to us.

Subject Access Request (SAR)

Individuals have the right to access their personal data and supplementary information held by DDAT and our academies. The GDPR and the Data Protection Act 2018 clarifies that the reason for allowing individuals to access their personal data is so that they are aware of, and can verify, the lawfulness of the processing (please refer to this guidance from the Information Commissioners Office).

If you wish to request information we hold about you, please complete and submit the online Subject Access Request form below. Alternatively, the form can be downloaded and sent to the relevant Trust School or DDAT Trust Office or you can email the Data Protection Officer at Any request in writing from the individual (Data Subject) will be considered as a valid request, whatever the format as long as it contains the relevant information to enable us to deal with your request.

Subject Access Request Form

Please fill out the form below with the requested information. It will be sent to the Trust’s Data Protection Officer and you will also be emailed a copy for your records. Alternatively, please download the Subject Access Request Form PDF here and post it to us.


This form contains personal data as defined by the Data Protection Act 2018. As Data Controller, Derby Diocesan Academy Trust (DDAT) will protect the personal data provided and ensure that it is not passed to anyone who is not authorised to see it. The information provided will be processed in accordance with the regulations contained in the Act and the DDAT Data Protection Policy which is available above. By submitting this form, you agree that DDAT may process your information in accordance with these terms.