Privacy Notice for Biometrics 

We use biometric data to provide cashless payment for school meals and manage library accounts.  

We do this to enable students and staff to purchase and consume their lunch within the available lunchtime period easily and quickly. There are clear benefits to the student which include that they cannot mislay their biometric data, and they are no longer required to bring cash into school which could be lost. 

All staff, students and parents will be provided with a factsheet to explain how the biometric process works to enable them to provide informed consent. If a parent or student withdraws consent, or does not consent initially, we will not collect and use their biometric data for this purpose. We will ensure that there is an alternative method for students to purchase a school lunch who prefer us not to process their biometric data. 

The software we use turns physical characteristics (fingerprint or facial image – delete as appropriate) into an encrypted code of characters known as a template (no fingerprint or facial image is ever stored). Even if someone were to be able to gain access to the data and break the encryption, this template does not contain enough information to reverse engineer into a usable fingerprint or facial image.  These scans will be checked against available funds in the payment account to enable the purchase of school meals, and a deduction will be made from payment accounts.  

Additionally, scans will record booking out and checking in of library items updating the library system. 

This information is shared with our system provider who works for us under contract.  The school is the data controller.  Our legal basis for using personal data for this purpose is explicit consent.  As we are relying on the consent of the parent and student, either can withdraw consent at any time by contacting the school. If consent is withdrawn from any party the processing will cease and the biometric data will be securely deleted. 

This information will be deleted when the staff member or pupil leaves the school, or when consent to use it is withdrawn. 

No personal information is routinely available outside of the UK.  Should a transfer of personal information be necessary we will only do so where it is permitted by law and where appropriate safeguards are in place. 

For information about your rights in relation to this use of your personal information please see section 5 of our overarching privacy notice.