Catch up literacy privacy notice

This Privacy Notice is designed to help you understand how and why the catch up literacy project – in conjunction with NYC’s virtual school processes your personal data. This notice should be read in conjunction with our corporate privacy notice.

Who are we?

North Yorkshire Council is an ‘independent data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). We are also working in conjunction with another independent controller – Catch Up – and our shared partners NIESR, IES and WWCSC who are joint controllers for the purpose of these activities. The virtual school is a specialist support team responsible for raising the attainment, progress and aspirations of North Yorkshire's children in care and previously in care children.

The council has appointed Veritau to be its data protection officer. Their contact details are:

Information Governance Office


West Offices

Station Rise


North Yorkshire



Tel: 01904 552848

What personal information do we collect?

In order to deliver the catch up literacy project, we will need to collect both personal and special category data, specifically:

Personal data collected:


  1. Personal information (name, DoB, age, sex)
  2. School information (Unique pupil reference number (UPN), school name and school contact information)
  3. Free School Meal eligibility status
  4. Social worker's name and contact details


  1. Personal information (name, address, email, telephone)
  2. Carer status (e.g. foster carer, kinship carer)
  3. Number of dependents

Special category data collected:

Children only

  1. Information relating to your educational needs (including emotional or behavioural difficulties)
  2. Confirmation of the services you are receiving support from
  3. First Language (and any associated requirements)
  4. Total number of care placements/time in current placement

Why do we collect your personal information?

We collect your personal information specifically for the following purposes:

  • to improve the achievement of children who find literacy difficult
  • to improve children’s ability and attitudes to reading
  • to deliver training to foster carers which prepares them to deliver improvement sessions and carry out assessments with children
  • to conduct an exploration of whether the Intervention has the potential to raise educational, social and emotional outcomes for children who are children In Need and those with child protection plans

Who do we share this information with?

In the course of delivering this service, we may share some of your personal information with other agencies who are key to delivering the service.

Within the council:

  • our teams responsible for the provision of the catch up literacy project

External agencies we share information with:

  • catch up
  • what works for children’s social care (WWCSC)
  • national institute of economic and social research (NIESR)
  • institute for employment studies (IES)
  • QA Research

How long do we keep your information for?

Data held

Retention period

Personal data relating to children involved in the project and their social carers

All personal data will be deleted by March 2024

Contact details of trained foster carers

Foster carers are given, ‘lifetime membership’ for access to learning materials on their catch up account. Carers may request the erasure of their account data at any time. Requests for erasure will be acknowledged by catch up within one calendar month. Actual deletion of data will occur within 1 calendar month of the acknowledgement (for a maximum retention period of 2 months after the erasure request).

What is our lawful basis for processing your information?

North Yorkshire Council relies on the following lawful basis to process your personal data:

UK GDPR Article 6(1)(e) public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.

When processing special category data, the council will rely on the following lawful basis:

UK GDPR Article 9(2)(g) substantial public interest (with a basis in law).

  • DPA Schedule 1 Condition: (6) Statutory and government purposes.

Supporting legislation:

  • Children and Young Persons Act 2008

For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.