What is GDPR?

The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the collection and processing of personal information of individuals within the European Union (EU) which comes into force on May 25 2018.

Key Details

Bluefish Education Design Ltd develops and supplies the LunchHound Cashless Catering system.

We will be GDPR compliant on 25th May 2018.

Under the GDPR definitions, we are considered to be a Data Processor, with the school as the Data Controller.

We process data about school students, staff and parents in order to provide an efficient Cashless Catering service to schools. We use only data relevant to this process.

The legal basis on which we use this data is determined by the customer and is typically described as;  ‘processing is necessary for the performance of a task carried out in the public interest’.

What information do we process and why?

In brief, this information is used to identify individuals using the system thereby allowing students, staff and parents to pre-order meals and school catering staff to quickly identify the student, or staff member, at the point of service, view their meal selection and process their order, at which point their account is debited with the appropriate amount.

The LunchHound Data Map details exactly what information is used, how and what other third party systems it might be shared with. To request a copy, contact us on this email: info@bluefished.co.uk

Your rights under Data Protection Law

You have the right to request to Access, Rectify, Erase, Data Portability, Object to processing and Restrict processing of your personal data; we may or may not be obliged to action this request and you may have to contact your child’s school, to correct the data held by them and provided to us for processing.

You have the right to complain to a supervisory authority.

If you wish to exercise any of the above rights, send an email to: info@bluefished.co.uk

How long do we process your data for?

We only require your information for the school’s cashless catering service and therefore will only process and retain it for as long as the service operates. Following that, the school, as controller, removes our access to the data.

Changes to our Privacy Policy

Changes to the Bluefish Education Ltd Privacy Policy are posted on our website.

Contact Details

If you would like to discuss any aspects of our GDPR compliance, contact us as follows:

Email: info@bluefished.co.uk

Telephone: 0845 5441673