Privacy policy

Last Updated: 8th October 2026

Introduction

This privacy policy explains how West Heath School ("we", "us", "our") collects, uses, and protects your personal information when you use our website https://westheathschool.com and any related services.

Who we are

West Heath School is located at Ashgrove Road, Sevenoaks, Kent, TN13 1SR and is a data controller registered with the Information Commissioner's Office.

The information we collect

We collect and process the following types of personal information:

Information you provide

  • Contact details (such as name, email address, phone number)
  • Communications you send to us
  • Any other information you choose to provide

Information automatically collected

  • Device information (browser type, operating system)
  • IP address
  • Website usage data
  • Cookies and similar technologies (see our Cookie Policy section below)

Legal basis for processing

We process your personal data on the following legal grounds:

  • Contract fulfillment: When necessary to provide our services
  • Legitimate interests: To improve our services and maintain security
  • Consent: For marketing communications and non-essential cookies
  • Legal obligation: To comply with legal requirements

How we use your information

We use your information to:

  • Provide and maintain our services
  • Communicate with you about your requests
  • Improve and optimize our website
  • Detect and prevent fraud
  • Comply with legal obligations

Data sharing

We may share your information with:

  • Service providers who assist in our operations
  • Professional advisers (lawyers, auditors)
  • Regulatory authorities when required by law
  • Law enforcement when legally required

We require all third parties to respect the security of your data and treat it in accordance with the law.

Your rights

Under data protection law, you have rights including:

  • Access your data
  • Correct inaccurate data
  • Request erasure (right to be forgotten)
  • Object to processing
  • Data portability
  • Withdraw consent

To exercise these rights, contact us.

Data security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data
  • Regular security assessments
  • Staff training
  • Access controls

Data retention

We keep your personal data for as long as necessary to fulfill the purposes we collected it for, including:

  • Legal requirements
  • Accounting and reporting
  • Handling disputes
  • Enforcing our agreements

Cookies

We use cookies and similar technologies to:

  • Maintain your session
  • Remember your preferences
  • Analyze website usage
  • Enable certain website functions

You can control cookies through your browser settings. Below is a detailed list of the cookies we use:

Name Purpose Expires
z_session_id

Necessary cookie
PHP Session ID. This is a unique identifier that is automatically created when a Session starts for a given visitor.

This cookie is deleted when browser is closed.
z_cookies_accepted

Functionality cookie
This is set if you accept all cookies or certain types of non-necessary cookie. 

3 months
_ga

Analytics cookies
Used to distinguish users.

2 years
_ga_<container-id>

Analytics cookies
Used to persist session state.

2 years
_pk_id.<site-id>.<hash>

Analytics cookies
Used to distinguish users.

13 months
_pk_ses.<site-id>.<hash>

Analytics cookies
Used to persist session state.

30 minutes

Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect information such as:

  • How long you spend on our website
  • Which pages you visit
  • How you arrived at our site
  • Basic technical information about your device

The data collected is anonymized and we have enabled IP anonymization. You can prevent Google Analytics from tracking you by:

  • Using the Google Analytics Opt-out Browser Add-on
  • Declining non-essential cookies in our cookie consent banner
  • Configuring your browser to block third-party cookies

For more information about how Google Analytics uses cookies, please visit Google's privacy policy and terms.

Use of Matomo

Our website also uses Matomo, a web analytics service. Unlike Google Analytics, Matomo stores data on our own servers (or via a hosted instance), giving us greater control over visitor data.

Matomo uses a set of cookies to collect information and report site usage statistics. The _pk_id cookie stores a unique visitor ID and information about previous visits, whilst the _pk_ses cookie identifies whether a visit is part of an ongoing session.

Learn more about how Matomo uses cookies

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by posting on our website and/or sending you an email.

Contact us

For questions about this policy or your personal data:

You have the right to make a complaint to the Information Commissioners' Office (ICO) at https://ico.org.uk if you believe we have not handled your personal data in accordance with data protection law.