Skip to main content

{{ root_page.title }}

Privacy notice for the Emotional Literacy Support Assistant programme


This privacy notice explains what types of personal data we may hold about you, how we collect it, how we use it and who we may share information with. We are required to give you this information under data protection law.

Who we are

Achieving for Children delivers children’s services and the local authority statutory responsibilities relating to children aged up to 25 years across the boroughs of Kingston, Richmond and Windsor and Maidenhead. Achieving for Children is registered as a controller with the Information Commissioner’s Office (ICO) (registration number ZA045069) and is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.  

The Emotional Literacy Support Assistant (ELSA) programme is an initiative developed and supported by educational psychologists. Teaching assistants are offered training to develop and deliver individualised support programmes to meet the emotional needs of children and young people.  Providing on-going professional supervision helps to ensure safe practice for both the ELSA and children alike and to maintain high quality in the work undertaken by ELSAs. 

Personal data we collect 

We collect the following personal information when you contact us to register for the programme: 

  • Name
  • Email address
  • Name of school where you are employed
  • ELSA attendance information 

How we use your personal data

We use the personal information we collect from you to:

  • contact you about ELSA training and supervision sessions
  • record your details to the register of trained and qualified ELSAs
  • check if you are eligible for additional training or supervision
  • meet our safeguarding responsibility by preventing unregistered ELSAs from practising or registering for supervision with our service
  • Lawful basis for processing your personal data 

The lawful basis we rely upon for collecting and processing your personal information are: 

  • consent (article 6(1)(a)  UK GDPR
  • performance of a contract  (article 6(1)(b) UK GDPR
  • compliance with a legal obligation (article 6(1)(c) UK GDPR

Who we share your personal information with

We will only share information where it is appropriate and legal to do so. Where this is necessary, we are required to comply with all aspects of the Data Protection Act 2018. 

From time to time an employer may request details of course attendance by their staff. We will disclose this information only where the employer has paid for the course or has allowed staff time off work for this purpose. In all other situations, we will seek your written consent. 

How long will we keep your information

We will retain your details on the register of qualified ELSAs for 10 years to enable us to validate your training.

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

Achieving for Children’s email service has been configured to Government Digital Service and we encrypt and authenticate email in transit using Transport Layer Security (TLS) and Domain-based Message Authentication, Reporting and Conformance (DMARC). We will ensure that when we send emails containing your personal information they are sent using appropriate security measures to encrypt the data in transit. This may involve the use of a third party encryption tool where appropriate.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Your rights and access to information 

Under data protection legislation you have the right to request access to the information that we hold about you. To request a copy of your data, please read the Individual Rights Requests page on this website and then submit your request using your preferred method of contact. 

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress
  • have inaccurate personal data rectified, blocked, erased or destroyed
  • prevent processing for the purpose of direct marketing object to decisions being taken by automated means
  • in certain circumstances have inaccurate personal data rectified, blocked, erased or destroyed; and 
  • a right to seek redress, either through the ICO, or through the courts

If you have any questions or concerns about the way we process personal data, or would like to discuss anything in this privacy notice, please contact our Data Protection Officer: [email protected]

If you want to make a complaint about how we handle your personal data, we ask that you give our Data Protection Officer the opportunity to respond in the first instance but you are not obliged to do this. You can make a complaint directly to the Information Commissioner’s Office at