At the HEARTS Academy Trust we take data security very seriously. Our pupils, parents, carers, staff, governance members and stakeholders have the right to be informed, to object, to rectification, to erasure, to restrict processing and to data portability. Our strategy for GDPR is now in place.