On Friday, 25th May 2018, the General Data Protection Regulation (GDPR) replaced the Data Protection Act 1998. This new law requires us to be clear about the information (data) we hold and our reason for holding it, as well as taking steps to ensure that all the data we store is held securely and protected.

Afifah School is the data controller of the personal information you provide to us. This means the school determines the purposes for which, and the manner in which, any personal data relating to pupils and their families is to be processed. In some cases, we may share your data will be outsourced to a third-party processor; however, this will only be done with your consent, unless the law requires the school to share your data. Where the school outsources data to a third-party processor, the same data protection standards that Afifah School upholds are imposed on the processor.

Mrs Zebulnisa Butt is our data protection office (DPO). Her role, in conjunction with the Senior school staff, is to oversee and monitor the school’s data protection procedures, and to ensure they are compliant with the new GDPR law. To contact and arrange a meeting with the DPO, please contact the school on 0161 8721516.


The privacy notice along with the policy and the letters sent to our parents and students are listed below:

GDPR – Policy

GDPR – Letter to parents

GDPR – Parent – Photo consent form

GDPR – Parents – Privacy Notice

GDPR – Students