Introduction

The UK General Data Protection Regulation (UK GDPR) is the law designed to protect your personal data. This data includes:

• Name
• Date of Birth
• Family details
• Emergency contacts
• Home address and contact information
• Email address
• School details
• Health information
• Languages spoken
• Educational needs
• Incident records

Northstar Constellation Limited acts as a "data controller," meaning we collect and use your personal information, primarily to provide transportation services to you and your school. As a data controller, we are responsible for safeguarding your information and using it appropriately.

Data Protection Principles

UK GDPR mandates several key principles to ensure your data is protected:

• We must use your data lawfully and inform you of its usage.
• Data collected for a specific purpose can only be used for that purpose.
• We must keep your information accurate and up-to-date.
• Information should only be retained for as long as necessary.
• We must protect and secure your data.

Why Do We Collect and Use Your Information?

We collect your data mainly to provide safe transportation. Additionally, we may use your information to:

• Communicate with your school
• Contact your parents or guardians
• Ensure your welfare
• Evaluate the quality of our service
• Comply with legal data-sharing requirements
• Process CCTV footage
• Administer bus passes
• Schedule school bus services

Do You Have to Give Us Your Information?

While much of the information we collect is necessary, some information is optional. When we request optional information, we will ask for your consent and explain why we need it and how we will use it. You have the right to decline providing optional information.

How Long Will We Keep Your Information?

We retain your data only as long as necessary for its intended purpose. Our retention policy dictates when to securely dispose of your information.

Will Your Information Be Shared?

We will not share your data without your consent, except as required or permitted by law. Typically, we may share your information with your school, local authorities, and healthcare providers.

What Are Your Rights?

You have the right to:

• Be informed about how your information is used.
• Request access to the information we hold about you.
• Ask us to correct any inaccuracies.
• Request the deletion of information when it is no longer needed.
• Restrict how we use your information.
• Object to the processing of your data.

In some cases, your guardian can exercise these rights on your behalf. If we are collecting optional information, you can withdraw your consent at any time.

If you have concerns about how your data is collected and used, you can contact our Data Protection Manager, Daniel Graham, at dan@northstarbus.co.uk.

If you wish to lodge a complaint about our use of your personal data, you can contact the Information Commissioner’s Office. More information can be found here.