Skip to main content

Breakfast Club Privacy Notice

Privacy notice relating to the processing of personal data by Rhondda Cynon Taf County Borough Council for the provision of a Breakfast Club at the School

Breakfast Club Provision

Under the School Standards and Organisation (Wales) Act 2013, Local Authorities have a statutory duty to provide free breakfasts to all children who go a primary school which is mantined by a Local Authority.

In Rhondda Cynon Taf, free breakfasts are provided to children by the Local Authiority (Rhondda Cynon Taf Country Borough Council), at the school in which the child attends, through the provision of a Breakfast Club.

Whilst the Breakfast Club is hosted on school premises the club is provided by the Local Authority and not the School. As such, the Local Authroty (RCTCBC) is the ‘data controller’ for any personal data processed in the course of providing Breakfast Club provision at the School.

This privacy notice is therefore provided by RCTCBC via the School. Any queries regarding this privacy notice or the use of personal data for Breakfast Club provision should be directed to the Council (contact details of which are provided below.


This privacy notice is intended to provide information about how Rhondda Cynon Taf County Borough Council (‘RCTCBC’, ‘Council’, ‘Local Authority’ ‘we’) will use (or ‘process’) personal data about individuals including its current, past and prospective pupils and their parents, carers or guardians (referred to in the notice as ‘parents’) for the provision of a Breakfast Club at the School.

When processing the personal data, only the minimum amount necessary in relation to the purpose is processed.

This privacy notice should be read in conjunction with the Councils general data protection privacy notice which can be found on the Councils website;

The personal data we process;

The Council processes the following categories of personal data in the course of providing Breakfast Club provision at the School.

Pupil personal data;

  • School the pupil attends
  • Name
  • Date of birth
  • Year group
  • Preferred days of attendance at breakfast club / attendance record
  • Dietary needs

Parent personal data;

  • Contact details such as name, address, email address, telephone number

Why we process the personal data;

We process the personal data in order undertake our statutory functions in the course of providing Breakfast Club provision at the School. This includes but is not limited to;

  • Adminstration relating to a pupils attendance at the breakfast club
  • Recording attendance
  • Managing dietry needs of the pupil
  • Recording and managing incidents (e.g. any accident that may arise)
  • Planning breakfast club provision at Schools

Our lawful basis for processing the personal data;

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis for processing personal data to undertake our statutory function in the course of providing Breakfast Club provision at the School is;

  • Public Task - Article 6 (e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The legislation that supports this is;

  • School Standards and Organisation (Wales) Act 2013

Who and where we get the personal data from;

We may receive the personal data from;

  • Parents
  • Pupils
  • Breakfast Club staff
  • The School

Who we share personal data with;



The School


Statutory purpose – to co-ordinate Breakfast Club provision at the School

How long we retain the personal data;

The Council retains records relating to Breakfast Club provision at School for a period of 3 years following the data of birth of the pupil.

Following the retention period expiry, personal data will be permanently and securely destroyed.

NOTE: In keeping with the General Data Protection Regulation storage limitation principle records are periodically reviewed. Only key information that is relevant to the record is retanined for the entire retention period. Information that has no long term or evidential value is routinely destroyed in the normal course of business.   

Your Information Rights

The General Data Protection Regulation (GDPR) gives you important rights.

Please refer to the ‘Your Information Rights’ section of the Councils general privacy notice for further information on your information rights and how to exercise them.


If you would like to discuss anything in this privacy notice, please contact the Council directly as Data Controller;