Online Safety Policy

Sept 2020

1. Creating an Online Safety Ethos

1.1 Aims and policy scope

St John’s believes that online safety (e-Safety) is an essential element of safeguarding children and adults in the digital world, when using technology such as computers, tablets, mobile phones or games consoles. We identify that the internet and information communication technologies are an important part of everyday life, so children must be supported to be able to learn how to develop strategies to manage and respond to risk and be empowered to build resilience online.

St John’s has a duty to provide the community with good quality Internet access to raise education standards,

promote achievement, support professional work of staff and enhance management functions.

St John’s identifies that there is a clear duty to ensure that all children and staff are protected from potential

harm online.

The purpose of St John’s online safety policy is to:

Clearly identify the key principles expected of all members of the community with regards to the safe and responsible use of technology to ensure that St John’s is a safe and secure environment.
Safeguard and protect all members of St John’s community online.
Raise awareness with all members of St John’s community regarding the potential risks as well as benefits of technology.
Enable all staff to work safely and responsibly, to role model positive behaviour online and be aware of the need to manage their own standards and practice when using technology.
Identify clear procedures to use when responding to online safety concerns that are known by all members of the community.

This policy applies to all staff including the governing body, teachers, support staff, external contractors, visitors, volunteers and other individuals who work for or provide services on behalf of the school (collectively referred to as ‘staff‘ in this policy) as well as children and parents/carers.

This policy applies to all access to the internet and use of information communication devices, including personal devices, or where children, staff or other individuals have been provided with school issued devices for use off-site, such as a work laptops, tablets or mobile phones.

This policy must be read in conjunction with other relevant school policies including (but not limited to) safeguarding and child protection, anti-bullying, behaviour, data security, image use, Acceptable Use Policies, confidentiality, screening, searching and confiscation and relevant curriculum policies including computing,

Personal Social Health and Economic Education (PSHE), Citizenship and Relationship and Sex Education (RSE).

1.2 Writing and reviewing the online safety policy

The Designated Safeguarding Lead (DSL) is Sarah Price. Back-up DSLs are Helen Bibby, Victoria Mayor and Helen Cameron.

The Online safety (e-Safety) lead for the Governing Body is Mr M Mulrooney.

St John’s online safety policy has been written by the school, involving staff, pupils and parents/carers, building on the Kent County Council (KCC) online safety policy template, with specialist advice and input as required.
The policy has been approved and agreed by the Leadership Team.
The online safety (e–Safety) Policy and its implementation will be reviewed by the school/setting at least annually or sooner if required.

1.3 Key responsibilities for the community

1.3.1 The key responsibilities of the school/setting management and leadership team are:

Developing, owning and promoting the online safety vision and culture to all stakeholders, in line with national and local recommendations with appropriate support and consultation throughout the school community.
Ensuring that online safety is viewed by the whole community as a safeguarding issue and proactively developing a robust online safety culture.
Supporting the Designated Safeguarding Lead (DSL) by ensuring they have sufficient time and resources to fulfil their online safety role and responsibilities.
Ensuring there are appropriate and up-to-date policies and procedures regarding online safety including an Acceptable Use Policy which covers appropriate professional conduct and use of technology.
To ensure that suitable and appropriate filtering and monitoring systems are in place to protect children from inappropriate content which meet the needs of the school community whilst ensuring children have access to required educational material.
To work with and support technical staff in monitoring the safety and security of school/setting systems and networks and to ensure that the school/setting network system is actively monitored.
Ensuring all members of staff receive regular, up-to-date and appropriate training regarding online safety roles and responsibilities and provide guidance regarding safe appropriate communications.
Ensuring that online safety is embedded within a progressive whole school/setting curriculum which enables all pupils to develop an age-appropriate understanding of online safety and the associated risks and safe behaviours.
To be aware of any online safety incidents and ensure that external agencies and support are liaised with as appropriate.
Receiving and regularly reviewing online safeguarding records and using them to inform and shape future practice.
Ensuring there are robust reporting channels for the school/setting community to access regarding online safety concerns, including internal, local and national support.
Ensure that appropriate risk assessments are undertaken regarding the safe use of technology, including ensuring the safe and responsible use of devices.
To ensure a member of the Governing Body is identified with a lead responsibility for supporting online safety.

1.3.2 The key responsibilities of the Designated Safeguarding Lead are:

Acting as a named point of contact on all online safeguarding issues and liaising with other members of staff and other agencies as appropriate.
Keeping up-to-date with current research, legislation and trends regarding online safety.
Coordinating participation in local and national events to promote positive online behaviour, e.g. Safer Internet Day.
Ensuring that online safety is promoted to parents and carers and the wider community through a variety of channels and approaches.
Work with the school/setting lead for data protection and data security to ensure that practice is in line with current legislation.
Maintaining a record of online safety concerns/incidents and actions taken as part of the schools safeguarding recording structures and mechanisms.
Monitor the school/settings online safety incidents to identify gaps/trends and use this data to update the school/settings education response to reflect need
To report to the school management team, Governing Body and other agencies as appropriate, on online safety concerns and local data/figures.
Liaising with the local authority and other local and national bodies, as appropriate.
Working with the school/setting leadership and management to review and update the online safety policies, and other related policies on a regular basis (at least annually) with stakeholder input.
Ensuring that online safety is integrated with other appropriate school policies and procedures.
Leading an online safety team/group with input from all stakeholder groups.
Meet regularly with the governor/board/committee member with a lead responsibility for online safety.

1.3.3 The key responsibilities for all members of staff are:

Contributing to the development of online safety policies.
Reading the school policies and adhering to them.
Taking responsibility for the security of school/setting systems and data.
Having an awareness of a range of different online safety issues and how they may relate to the children in their care.
Modelling good practice when using new and emerging technologies.
Embedding online safety education in curriculum delivery wherever possible.
Identifying individuals of concern and taking appropriate action by following school safeguarding policies and procedures.
Knowing when and how to escalate online safety issues, internally and externally.
Being able to signpost to appropriate support available for online safety issues, internally and externally.
Maintaining a professional level of conduct in their personal use of technology, both on and off site.
Demonstrating an emphasis on positive learning opportunities.
Taking personal responsibility for professional development in this area.

1.3.4 In addition to the above, the key responsibilities for staff managing the technical environment are:

Providing a safe and secure technical infrastructure which support safe online practices while ensuring that learning opportunities are still maximised.
Taking responsibility for the implementation of safe security of systems and data in partnership with the leadership and management team.
To ensure that suitable access controls and encryption is implemented to protect personal and sensitive information held on school-owned devices.
Ensuring that the schools filtering policy is applied and updated on a regular basis and that responsibility for its implementation is shared with the DSL.
Ensuring that the use of the school/setting’s network is regularly monitored and reporting any deliberate or accidental misuse to the DSL.
Report any breaches or concerns to the DSL and leadership team and together ensure that they are recorded and appropriate action is taken as advised.
Developing an understanding of the relevant legislation as it relates to the security and safety of the technical infrastructure.
Report any breaches and liaising with the local authority (or other local or national bodies) as appropriate on technical infrastructure issues.
Providing technical support and perspective to the DSL and leadership team, especially in the development and implementation of appropriate online safety policies and procedures.
Ensuring that the school’s ICT infrastructure/system is secure and not open to misuse or malicious attack.
Ensuring that appropriate anti-virus software and system updates are installed and maintained on all setting machines and portable devices.
Ensure that appropriately strong passwords are applied and enforced for all but the youngest users.

1.3.5 The key responsibilities of children and young people are:

Contributing to the development of online safety policies.
Reading the school/setting Acceptable Use Policies (AUPs) and adhering to them.
Respecting the feelings and rights of others both on and offline.
Seeking help from a trusted adult if things go wrong, and supporting others that may be experiencing online safety issues.

At a level that is appropriate to their individual age, ability and vulnerabilities:

Taking responsibility for keeping themselves and others safe online.
Taking responsibility for their own awareness and learning in relation to the opportunities and risks posed by new and emerging technologies.
Assessing the personal risks of using any particular technology, and behaving safely and responsibly to limit those risks.

1.3.6 The key responsibilities of parents and carers are:

Reading the school/setting policies, encouraging their children to adhere to them, and adhering to them themselves where appropriate.
Discussing online safety issues with their children, supporting the school in their online safety approaches, and reinforcing appropriate safe online behaviours at home.
Role modelling safe and appropriate uses of technology and social media.
Identifying changes in behaviour that could indicate that their child is at risk of harm online.
Seeking help and support from the school, or other appropriate agencies, if they or their child encounters online problems or concerns.
Contributing to the development of the school/setting online safety policies.
Using school systems, such as learning platforms, and other network resources, safely and appropriately.
Taking responsibility for their own awareness and learning in relation to the opportunities and risks posed by new and emerging technologies.

2. Online Communication and Safer Use of Technology

2.1 Managing the school/setting website

The school will ensure that information posted on the school website meets the requirements as identified by the Department for Education (DfE).
The contact details on the website will be the school/setting address, email and telephone number. Staff or pupils’ personal information will not be published.
The head teacher will take overall editorial responsibility for online content published and will ensure that information is accurate and appropriate.
The website will comply with the school’s guidelines for publications including accessibility respect for intellectual property rights, privacy policies and copyright.
The administrator account for the school website will be safeguarded with an appropriately strong password.
The school will post information about safeguarding, including online safety, on the school website for members of the community.

2.2 Publishing images and videos online

The school/setting will ensure that all images and videos shared online are used in accordance with the school image use policy.
The school/setting will ensure that all use of images and videos take place in accordance other policies and procedures including data security, Acceptable Use Policies, Codes of Conduct, social media, use of personal devices and mobile phones etc.
In line with the image policy, written permission from parents or carers will always be obtained before images/videos of pupils are electronically published.

2.3 Managing email

Pupils may only use school/setting provided email accounts for educational purposes.
All members of staff are provided with a specific school/setting email address to use for any official communication.
The forwarding of any chain messages/emails etc. is not permitted. Spam or junk mail will be blocked and reported to the email provider.
Any electronic communication which contains any content which could be subject to data protection legislation (e.g. sensitive or personal information) will only be sent using secure and encrypted email.
Access to school/setting email systems will always take place in accordance to data protection legislation and in line with other appropriate school/setting policies e.g. confidentiality.
Members of the community must immediately tell a designated member of staff if they receive offensive communication and this will be recorded in the school safeguarding files/records.
Whole -class or group email addresses may be used for communication outside of the school.
Staff will be encouraged to develop an appropriate work life balance when responding to email, especially if communication is taking place between staff and pupils and parents.
Excessive social email use can interfere with teaching and learning and will be restricted. Access in school to external personal email accounts may be blocked.
Email sent to external organisations should be written carefully and authorised before sending, in the same way as a letter written on school headed paper would be.
The school will have a dedicated email for reporting wellbeing and pastoral issues. This inbox will be managed by designated and trained staff.
School email addresses and other official contact details will not be used for setting up personal social media accounts.

2.4 Official videoconferencing and webcam use for educational purposes

The school acknowledges that videoconferencing is a challenging activity with a wide range of learning benefits. Preparation and evaluation are essential to the whole activity.
All videoconferencing equipment will be switched off when not in use and where appropriate, not set to auto answer.
Equipment connected to the educational broadband network will use the national E.164 numbering system and display their H.323 ID name.
External IP addresses will not be made available to other sites.
Videoconferencing contact details will not be posted publically.
Video conferencing equipment will be kept securely and, if necessary, locked away when not in use.
School videoconferencing equipment will not be taken off school premises without permission.
Staff will ensure that external videoconference opportunities and/or tools are suitably risk assessed and will ensure that accounts and systems used to access events are appropriately safe and secure.

Users

Pupils will ask permission from a teacher before making or answering a videoconference call or message.
Videoconferencing will be supervised appropriately for the pupils’ age and ability.
Parents and carers consent will be obtained prior to children taking part in videoconferencing activities.
Video conferencing will take place via official and approved communication channels following a robust risk assessment.
Only key administrators will be given access to videoconferencing administration areas or remote control pages.
Unique log on and password details for the educational videoconferencing services will only be issued to members of staff and kept secure.

Content

When recording a videoconference lesson, written permission will be given by all sites and participants. The reason for the recording must be given and the recording of videoconference should be clear to all parties at the start of the conference. Recorded material will be stored securely.
If third party materials are to be included, the school will check that recording is acceptable to avoid infringing the third party intellectual property rights.
The school will establish dialogue with other conference participants before taking part in a videoconference. If it is a non-school site the school will check that they are delivering material that is appropriate for the class.

2.5 Appropriate and safe classroom use of the internet and any associated devices

Internet use is a key feature of educational access and all children will receive age and ability appropriate education to support and enable them to develop strategies to respond to concerns as part of an embedded whole school curriculum. Please access specific curriculum policies for further information.
The school/setting’s internet access will be designed to enhance and extend education.
Access levels to the internet will be reviewed to reflect the curriculum requirements and the age and ability of pupils.
All members of staff are aware that they cannot rely on filtering alone to safeguard children and supervision, classroom management and education about safe and responsible use is essential.
Supervision of pupils will be appropriate to their age and ability. At Early Years Foundation Stage and Key Stage 1 pupils’ access to the Internet will be by adult demonstration with occasional directly supervised access to specific and approved online materials which supports the learning outcomes planned for the pupils’ age and ability.
At Key Stage 2 pupils will be supervised. Pupils will use age-appropriate search engines and online tools and online activities will be teacher-directed where necessary. Children will be directed to online material and resources which support the learning outcomes planned for the pupils’ age and ability.
Members of staff will always evaluate websites, tools and apps fully before use in the classroom or recommending for use at home.
Pupils will be educated in the effective use of the Internet in research, including the skills of knowledge location, retrieval and evaluation.
The school will use age appropriate search tools (e.g. Google Safe Search or CBBC safe search) as decided by the school following an informed risk assessment to identify which tool best suits the needs of our community.
The school will ensure that the use of Internet-derived materials by staff and pupils complies with copyright law and acknowledge the source of information.
Pupils will be taught to be critically aware of the materials they read and shown how to validate information before accepting its accuracy.
The evaluation of online materials is a part of teaching and learning in every subject and will be viewed as a whole-school/setting requirement across the curriculum.
The school will use the internet to enable pupils and staff to communicate and collaborate in a safe and secure environment.

3. Social Media Policy

3.1 General social media use

Expectations regarding safe and responsible use of social media will apply to all members of St John’s community and exist in order to safeguard both the school/setting and the wider community, on and offline. Examples of social media may include blogs, wikis, social networking sites, forums, bulletin boards, multiplayer online gaming, apps, video/photo sharing sites, chatrooms, instant messenger and many others.
All members of St John’s community will be encouraged to engage in social media in a positive, safe and responsible manner at all times.
Information about safe and responsible use of social media will be communicated clearly and regularly to all members of our community.
All members of our community are advised not to publish specific and detailed private thoughts, concerns, pictures or messages on any social media services, especially content that may be considered threatening, hurtful or defamatory to others.
The school/setting will control pupil and staff access to social media and social networking sites whilst on site and when using school provided devices and systems
The use of social networking applications during school hours for personal use is permitted but only in the Staff Room, Meeting Room or Headteacher’s Office during break/lunch times.
Inappropriate or excessive use of social media during school/work hours or whilst using school/setting devices may result in disciplinary or legal action and/or removal of Internet facilities.
Any concerns regarding the online conduct of any member of St John’s community on social media sites should be reported to the leadership team and will be managed in accordance with policies such as antibullying, allegations against staff, behaviour and safeguarding/child protection.
Any breaches of school/setting policy may result in criminal, disciplinary or civil action being taken and this will depend upon the age of those involved and the circumstances of the wrong committed. Action taken will be in accordance with relevant policies, such as anti-bullying, allegations against staff, behaviour and safeguarding/child protection.

3.2. Official use of social media

Relevant for all settings who use social media officially as a communication channel.

St John’s official social media channels are: our website and our twitter account.
Official use of social media sites by the school/setting will only take place with clear educational or community engagement objectives with specific intended outcomes e.g. increasing parental engagement.
Official use of social media sites as communication tools will be risk assessed and formally approved by the Headteacher.
Official school/setting social media channels will be set up as distinct and dedicated social media site or account for educational or engagement purposes.
Staff will use school/setting provided email addresses to register for and manage any official approved social media channels.
All communication on official social media platforms will be clear, transparent and open to scrutiny.
Any online publication on official social media sites will comply with legal requirements including the Data Protection Act 1998, right to privacy conferred by the Human Rights Act 1998, or similar duty to protect private information and will not breach any common law duty of confidentiality, copyright etc.
Official social media use will be in line with existing policies including anti-bullying and safeguarding.
Images or videos of children will only be shared on official social media sites/channels in accordance with the image use policy.
Information about safe and responsible use of social media channels will be communicated clearly and regularly to all members of the community.
Official social media sites, blogs or wikis will be suitably protected (e.g. password protected) and where possible/appropriate, run and/or linked to from the school/setting website and take place with written approval from the Leadership Team.
Leadership staff must be aware of account information and relevant details for social media channels in case of emergency, such as staff absence.
Parents/Carers and pupils will be informed of any official social media use, along with expectations for safe use and action taken to safeguard the community.
Public communications on behalf of the school/setting will, where possible, be read and agreed by at least one other colleague.
Official social media channels will link back to the school/setting website and/or Acceptable Use Policy to demonstrate that the account is official.
The school/setting will ensure that any official social media use does not exclude members of the community who are unable or unwilling to use social media channels.

3.3 Staff personal use of social media

The safe and responsible use of social networking, social media and personal publishing sites will be discussed with all members of staff as part of staff induction and will be revisited and communicated via regular staff training opportunities.
Safe and professional behaviour will be outlined for all members of staff (including volunteers) as part of the school induction and introduction to Code of Conduct.
All members of staff are advised not to communicate with or add as ‘friends’ any current or past children/pupils or current or past pupils’ family members via any personal social media sites, applications or profiles. Any pre-existing relationships or exceptions that may compromise this will be discussed with Designated Safeguarding Lead and/or the headteacher.
If ongoing contact with pupils is required once they have left the school roll, then members of staff will be expected to use existing alumni networks or use official school provided communication tools.
All communication between staff and members of the school community on school business will take place via official approved communication channels.
Staff will not use personal social media accounts to make contact with pupils or parents, nor should any contact be accepted, except in circumstance whereby prior approval has been given by the Headteacher/manager.
Any communication from pupils/parents received on personal social media accounts will be reported to the schools designated safeguarding lead.
Information and content that staff members have access to as part of their employment, including photos and personal information about pupils and their family members, colleagues etc. will not be shared or discussed on personal social media sites.
All members of staff are strongly advised to safeguard themselves and their privacy when using social media sites. This will include being aware of location sharing services, setting the privacy levels of their personal sites as strictly as they can, opting out of public listings on social networking sites, logging out of accounts after use and keeping passwords safe and confidential.
All members of staff are encouraged to carefully consider the information, including text and images, they share and post online and to ensure that their social media use is compatible with their professional role and is in accordance with schools policies (safeguarding, confidentiality, data protection etc.) and the wider professional and legal framework.
Members of staff will be encouraged to manage and control the content they share and post online. Advice will be provided to staff via staff training and by sharing appropriate guidance and resources on a regular basis.
Members of staff will notify the Leadership/Management Team immediately if they consider that any content shared or posted via any information and communications technology, including emails or social networking sites conflicts with their role in the school/setting.
Members of staff are encouraged not to identify themselves as employees of St John’s on their personal social networking accounts. This is to prevent information on these sites from being linked with the school/setting and also to safeguard the privacy of staff members and the wider community.
Members of staff will ensure that they do not represent their personal views as that of the school/setting on social media.
School/setting email addresses will not be used for setting up personal social media accounts.
Members of staff who follow/like the school/settings social media channels will be advised to use dedicated professionals accounts, where possible, to avoid blurring professional boundaries.

3.4 Staff official use of social media

If members of staff are participating in online activity as part of their capacity as an employee of the school/setting, then they are requested to be professional at all times and to be aware that they are an ambassador for the school/setting.
Staff using social media officially will disclose their official role/position but always make it clear that they do not necessarily speak on behalf of the school/setting.
Staff using social media officially will be responsible, credible, fair and honest at all times and consider how the information being published could be perceived or shared.
Staff using social media officially will always act within the legal frameworks they would adhere to within the workplace, including libel, defamation, confidentiality, copyright, data protection as well as equalities laws.
Staff must ensure that any image posted on any official social media channel have appropriate written parental consent.
Staff using social media officially will be accountable and must not disclose information, make commitments or engage in activities on behalf of the school/setting unless they are authorised to do so.
Staff using social media officially will inform their line manager, the Designated Safeguarding Lead and/or the head teacher/manager of any concerns such as criticism or inappropriate content posted online.
Staff will not engage with any direct or private messaging with children or parents/carers through social media and will communicate via official communication channels.

3.5 Pupils use of social media

Safe and responsible use of social media sites will be outlined for children and their parents as part of the Acceptable Use Policy.
Personal publishing on social media sites will be taught to pupils as part of an embedded and progressive education approach via age appropriate sites which have been risk assessed and approved as suitable for educational purposes.
Pupils will be advised to consider the risks of sharing personal details of any kind on social media sites which may identify them and / or their location. Examples would include real/full name, address, mobile or landline phone numbers, school attended, Instant messenger contact details, email addresses, full names of friends/family, specific interests and clubs etc.
Pupils will be advised not to meet any online friends without a parent/carer or other responsible adult’s permission and only when they can be present.
Pupils will be advised on appropriate security on social media sites and will be encouraged to use safe passwords, deny access to unknown individuals and be supported in learning how to block and report unwanted communications.
Pupils will be encouraged to approve and invite known friends only on social networking sites and to deny access to others by making profiles private/protected.
Parents will be informed of any official social media use with pupils and written parental consent will be obtained, as required.
Any official social media activity involving pupils will be moderated by the school where possible.
The school is aware that many popular social media sites state that they are not for children under the age of 13, therefore the School will not create accounts within school specifically for children under this age.
Any concerns regarding pupils’ use of social networking, social media and personal publishing sites, both at home and at school, will be dealt with in accordance with existing school policies including anti-bullying and behaviour.
Any concerns regarding pupils’ use of social networking, social media and personal publishing sites, both at home and at school, will be raised with parents/carers, particularly when concerning any underage use of social media sites.

4. Use of Personal Devices and Mobile Phones

4.1 Rationale regarding personal devices and mobile phones

The widespread ownership of mobile phones and a range of other personal devices among children, young people and adults will require all members of St John’s community to take steps to ensure that mobile phones and personal devices are used responsibly.
The use of mobile phones and other personal devices by young people and adults will be decided by the school.
St John’s recognises that personal communication through mobile technologies is an accepted part of everyday life for children, staff and parents/carers but requires that such technologies need to be used safely and appropriately within schools/settings.

4.2 Expectations for safe use of personal devices and mobile phones

All use of personal devices and mobile phones will take place in accordance with the law and other appropriate school policies.
Electronic devices of all kinds that are brought in on site are the responsibility of the user at all times. The school/setting accepts no responsibility for the loss, theft or damage of such items. Nor will the school/setting accept responsibility for any adverse health effects caused by any such devices either potential or actual.
Mobile phones and personal devices are not permitted to be used in any areas other than the staff room, meeting room or Headteacher’s office. The Office Manager may use mobile phones in the main office on occasion e.g. to communicate with the Headteacher when she is off-site, or to communicate with staff when they are on school trips. Staff will be allowed to use mobile phones in the presence of pupils whilst on a school trip in order to make contact with school.
The sending of abusive or inappropriate messages or content via mobile phones or personal devices is forbidden by any member of the community and any breaches will be dealt with as part of the discipline/behaviour policy.
Members of staff will be issued with a work phone number and email address where contact with pupils or parents/carers is required.
All members of St John’s community will be advised to take steps to protect their mobile phones or devices from loss, theft or damage.
All members of St John’s community will be advised to use passwords/pin numbers to ensure that unauthorised calls or actions cannot be made on their phones or devices if they are lost or stolen. Passwords and pin numbers should be kept confidential. Mobile phones and personal devices should not be shared.
All members of St John’s community will be advised to ensure that their mobile phones and personal devices do not contain any content which may be considered to be offensive, derogatory or would otherwise contravene the school/settings policies.
School/setting mobile phones and devices used for communication with parents and pupils must be suitably protected via a passcode/password/pin and must only be accessed and used by members of staff.

4.3 Pupils use of personal devices and mobile phones

Pupils will be educated regarding the safe and appropriate use of personal devices and mobile phones.
Pupils are not allowed to bring personal devices and mobile phones into school. In exceptional circumstances, agreed with the parents, a pupil may bring a mobile phones or personal device into school. If they do, it will be switched off and kept out of sight in the main office until the end of the day when it can be collected.
If a pupil needs to contact his/her parents/carers they will be allowed to use a school/setting phone.
Parents are advised not to contact their child via their mobile phone during the school day, but to contact the school office. Exceptions may be permitted in exceptional circumstances on a case-by-case basis and as approved by the headteacher.
Pupils should protect their phone numbers by only giving them to trusted friends and family members.
Pupils will be instructed in safe and appropriate use of mobile phones and personal devices and will be made aware of boundaries and consequences.
If a pupil breaches the school policy then the phone or device will be confiscated and will be held in a secure place in the Headteacher’s office. Mobile phones and devices will be released to parents/carers.
School staff may confiscate a pupil’s mobile phone or device if they believe it is being used to contravene the schools behaviour or bullying policy or could contain youth produced sexual imagery (sexting). The phone or device may be searched by a member of the Leadership team with the consent of the pupil or parent/carer and content may be deleted or requested to be deleted, if appropriate. Searches of mobile phone or personal devices will only be carried out in accordance with the schools policy.https://www.gov.uk/government/publications/searching-screening-and-confiscation)

If there is suspicion that material on a pupil’s personal device or mobile phone may be illegal or may provide evidence relating to a criminal offence then the device will be handed over to the police for further investigation.

4.5 Staff use of personal devices and mobile phones

Members of staff are not permitted to use their own personal phones or devices for contacting children, young people and their families within or outside of the setting in a professional capacity. Any pre existing relationships which could compromise this will be discussed with leaders/managers.
Staff will not use personal devices such as mobile phones, tablets or cameras to take photos or videos of children and will only use work-provided equipment for this purpose.
Staff will not use any personal devices directly with children and will only use work-provided equipment during lessons/educational activities.
Members of staff will ensure that any use of personal phones and devices will always take place in accordance with the law e.g. data protection as well as relevant school policy and procedures e.g.confidentiality, Code of Conduct.
Staff personal mobile phones and devices will be switched off/switched to ‘silent’ mode during lesson times.
Staff may use personal devices and mobile phones only in the following areas: staff room, meeting room or Headteacher’s office. See Code of Conduct for what to do if you are expecting an urgent personal call.
Bluetooth or other forms of communication should be “hidden” or switched off during lesson times.
Personal mobile phones or devices will not be used during teaching periods unless permission has been given by a member of the Leadership Team in emergency circumstances.
Staff will ensure that any content brought on site via mobile phones and personal devices are compatible with their professional role and expectations.
If a member of staff breaches the school/setting policy then disciplinary action will be taken.
If a member of staff is thought to have illegal content saved or stored on a mobile phone or personal device or have committed a criminal offence then the police will be contacted.
Any allegations against members of staff involving personal use of mobile phone or devices will be responded to following the school/settings allegations management policy.

4.6 Visitors use of personal devices and mobile phones

Parents/carers and visitors must use mobile phones and personal devices in accordance with the school’s acceptable use policy.
Use of mobile phones or personal devices by visitors and parents/carers to take photos or videos must take place in accordance with the school image use policy.
Visitors may on occasion be allowed to use personal devices and mobile phones in other areas by prior arrangement with the Headteacher. E.g. IT Technician may need to use personal device or mobile phone when working in Computer Suite.
Staff will be expected to challenge concerns when safe and appropriate and will always inform the Designated Safeguarding Lead of any breaches of use by visitors.

5. Policy Decisions

5.1 Reducing online risks

St John’s is aware that the Internet is a constantly changing environment with new apps, tools, devices, sites and material emerging at a rapid pace.
Emerging technologies will be examined for educational benefit and the school leadership team will ensure that appropriate risk assessments are carried out before use in school is allowed.
The school will ensure that appropriate filtering and monitoring systems are in place to prevent staff and pupils from accessing unsuitable or illegal content, this is through LCC Lightspeed Filtering.
The school will take all reasonable precautions to ensure that users access only appropriate material. However, due to the global and connected nature of Internet content, it is not always possible to guarantee that access to unsuitable material will never occur via a school/setting computer or device.
The school will audit technology use to establish if the online safety (e–Safety) policy is adequate and that the implementation of the policy is appropriate.
Methods to identify, assess and minimise online risks will be reviewed regularly by the schools leadership team.

5.2 Internet use throughout the wider school/setting community

Relevant for all settings within their own local context

The school will liaise with local organisations to establish a common approach to online safety.
The school will work with the local community’s needs (including recognising cultural backgrounds, languages, religions and ethnicity) to ensure internet use is appropriate.
The school will provide an Acceptable Use Policy for any guest/visitor who needs to access the school computer system or internet on site.

5.3 Authorising internet access

Relevant for all settings who facilitate internet access

The school will maintain a current record of all staff and pupils who are granted access to the school’s devices and systems.
All staff, pupils and visitors will read and sign the Acceptable Use Policy before using any school resources.
Parents will be informed that pupils will be provided with supervised Internet access which is appropriate to their age and ability.
Parents will be asked to read the Acceptable Use Policy for pupil access and discuss it with their child, where appropriate.
When considering access for vulnerable members of the community (such as with children with special education needs) the school will make decisions based on the specific needs and understanding of the pupil(s).

6. Engagement Approaches

6.1 Engagement and education of children and young people

An online safety (e-Safety) curriculum will be established and embedded throughout the whole school, to raise awareness regarding the importance of safe and responsible internet use amongst pupils.
Education about safe and responsible use will precede internet access.
Pupils input will be sought when writing and developing school online safety policies and practices, including curriculum development and implementation.
Pupils will be supported in reading and understanding the Acceptable Use Policy in a way which suits their age and ability.
All users will be informed that network and Internet use will be monitored.
Online safety (e-Safety) will be included in the PSHE, SRE, Citizenship and Computing programmes of study, covering both safe school and home use.
Online safety (e-Safety) education and training will be included as part of the transition programme across the Key Stages and when moving between establishments.
Safe and responsible use of the Internet and technology will be reinforced across the curriculum and within all subject areas.
External support will be used to complement and support the schools internal online safety (e-Safety) education approaches.

6.2 Engagement and education of children and young people considered to be vulnerable

St John’s is aware that some children may be considered to be more vulnerable online due to a range of factors.
St John’s will ensure that differentiated and ability appropriate online safety (e-Safety) education is given, with input from specialist staff as appropriate (e.g. SENCO, Looked after Child Coordinator).

6.3 Engagement and education of staff

The online safety (e-Safety) policy will be formally provided to and discussed with all members of staff aspart of induction and will be reinforced and highlighted as part of our safeguarding responsibilities.
Staff will be made aware that our Internet traffic can be monitored and traced to the individual user.
Discretion and professional conduct is essential when using school systems and devices.
Up-to-date and appropriate staff training in safe and responsible Internet use, both professionally and personally, will be provided for all members of staff in a variety of ways, on a regular (at least annual) basis.
All members of staff will be made aware that their online conduct out of school could have an impact on their role and reputation within school. Civil, legal or disciplinary action could be taken if they are found to bring the profession or institution into disrepute, or if something is felt to have undermined confidence in their professional abilities.
Members of staff with a responsibility for managing filtering systems or monitor ICT use will be supervised by the Leadership Team and will have clear procedures for reporting issues or concerns.
The school/setting will highlight useful online tools which staff should use according to the age and ability of the pupils.

6.4 Engagement and education of parents and carers

St John’s recognises that parents/carers have an essential role to play in enabling children to become safe and responsible users of the internet and digital technology.
Parents’ attention will be drawn to the school online safety (e-Safety) policy and expectations in newsletters, letters, school prospectus and on the school website.
A partnership approach to online safety at home and at school with parents will be encouraged. This may include offering parent evenings with demonstrations and suggestions for safe home Internet use or highlighting online safety at other well attended events e.g. parent evenings, transition events, fetes and sports days.
Information and guidance for parents on online safety will be made available to parents in a variety of formats.
Parents will be encouraged to role model positive behaviour for their children online.

7. Managing Information Systems

7.1 Managing personal data online

Personal data will be recorded, processed, transferred and made available according to the Data Protection Act 1998.
Full information regarding the schools approach to data protection and information governance can be found in the schools information security policy.

7.2 Security and Management of Information Systems

The security of the school information systems and users will be reviewed regularly.
Virus protection will be updated regularly.
Personal data sent over the Internet or taken off site (such as via portable media storage) will be encrypted or accessed via appropriate secure remote access systems.
Portable media may not be used without specific permission followed by an anti-virus /malware scan.
Unapproved software will not be allowed in work areas or attached to email.
Files held on the school’s network will be regularly checked.
The computing coordinator/IT Technician will review system capacity regularly.
The appropriate use of user logins and passwords to access the school network will be enforced for all but the youngest users.
All users will be expected to log off or lock their screens/devices if systems are unattended.

Password policy

All users will be informed not to share passwords or information with others and not to login as another user at any time.
All pupils must always keep their password private and must not share it with others or leave it where others can find it.
All members of staff will have their own unique username and private passwords to access school systems. Members of staff are responsible for keeping their password private.
From Year R all pupils are provided with their own unique username and private passwords to access school systems. Pupils are responsible for keeping their password private.
We require staff and pupils to use STRONG passwords for access into our system.

7.3 Filtering and Monitoring

The governors/proprietors will ensure that the school has age and ability appropriate filtering and monitoring in place whilst using school devices and systems to limit children’s exposure to online risks.
The school’s internet access strategy will be dependent on the need and requirements of our community and will therefore be designed to suit the age and curriculum requirements of our pupils, with advice from technical, educational and safeguarding staff.
All monitoring of school owned/provided systems will take place to safeguard members of the community.
All users will be informed that use of school systems can be monitored and that all monitoring will be in line with data protection, human rights and privacy legislation.
The school uses Light Speed filtering system which blocks sites that fall into categories such as pornography, racial hatred, extremism, gaming, sites of an illegal nature, etc.
The school will work with LCC and the Schools Broadband team or broadband/filtering provider to ensure that filtering policy is continually reviewed.
The school will have a clear procedure for reporting breaches of filtering which all members of the school community (all staff and all pupils) will be made aware of.
If staff or pupils discover unsuitable sites, the URL will be reported to the School Designated Safeguarding Lead and will then be recorded and escalated as appropriate.
The School filtering system will block all sites on the Internet Watch Foundation (IWF) list.
Changes to the school filtering policy will be risk assessed by staff with educational and technical experience prior to any changes and where appropriate with consent from the Leadership Team.
All changes to the school filtering policy will be logged and recorded.
The Leadership Team will ensure that regular checks are made to ensure that the filtering methods selected are effective and appropriate.
Any material that the school believes is illegal will be reported to appropriate agencies such as IWF, Lancashire Police or CEOP immediately.

7.4 Management of applications (apps) used to record children’s progress

The headteacher/manager is ultimately responsible for the security of any data or images held of children.
Apps/systems which store personal data will be risk assessed prior to use.
Only school/setting issued devices will be used for apps that record and store children’s personal details, attainment or photographs. Personal staff mobile phones or devices will not be used to access or upload content to any apps which record and store children’s personal details, attainment or images.
Devices will be appropriately encrypted if taken off site to prevent a data security breach in the event of loss or theft.
Users will be advised on safety measures to protect all members of the community such as using strong passwords, logging out of systems etc.
Parents will be informed of the schools expectations regarding safe and appropriate use (e.g. not sharing passwords or sharing images) prior to being given access.

8. Responding to Online Incidents and Safeguarding Concerns

All members of the community will be made aware of the range of online risks that are likely to be encountered including sexting, online/cyber bullying etc. This will be highlighted within staff training and educational approaches for pupils.
All members of the school/setting community will be informed about the procedure for reporting online safety (e-Safety) concerns, such as breaches of filtering, sexting, cyberbullying, illegal content etc.
The Designated Safeguarding Lead (DSL) will be informed of any online safety (e-Safety) incidents involving child protection concerns, which will then be recorded.
The DSL will ensure that online safety concerns are escalated and reported to relevant agencies in line with the Lancashire Safeguarding Children Board thresholds and procedures.
Complaints about Internet misuse will be dealt with under the School’s complaints procedure.
Complaints about online/cyber bullying will be dealt with under the School’s anti-bullying policy and procedure
Any complaint about staff misuse will be referred to the headteacher.
Any allegations against a member of staff’s online conduct will be discussed with the LADO (Local Authority Designated Officer).
Pupils, parents and staff will be informed of the schools complaints procedure.
Staff will be informed of the complaints and whistleblowing procedure.
All members of the school community will need to be aware of the importance of confidentiality and the need to follow the official school procedures for reporting concerns.
All members of the school community will be reminded about safe and appropriate behaviour online and the importance of not posting any content, comments, images or videos online which cause harm, distress or offence to any other members of the school community.
The school will manage online safety (e-Safety) incidents in accordance with the school discipline/behaviour policy where appropriate.
The school will inform parents/carers of any incidents of concerns as and when required.
After any investigations are completed, the school will debrief, identify lessons learnt and implement any changes as required.
Where there is cause for concern or fear that illegal activity has taken place or is taking place then the school will contact the Education Safeguards Team or Lancashire Police via 101 or 999 if there is immediate danger or risk of harm.
The use of computer systems without permission or for inappropriate purposes could constitute a criminal offence under the Computer Misuse Act 1990 and breaches will be reported to Lancashire Police.
If the school is unsure how to proceed with any incidents of concern, then the incident will be escalated to the Education Safeguarding Team.
If an incident of concern needs to be passed beyond the school/setting community, then the concern will be escalated to the Education Safeguarding Team to communicate to other schools/settings in Lancashire.
Parents and children will need to work in partnership with the school to resolve issues.

Appendix A

9. Procedures for Responding to Specific Online Incidents or Concerns

9.1 Responding to concerns regarding Youth Produced Sexual Imagery or “Sexting”

St John’s ensures that all members of the community are made aware of the potential social, psychological and criminal consequences of sharing, possessing and creating youth produced sexual imagery (known as “sexting”).
The school will implement preventative approaches via a range of age and ability appropriate educational approaches for pupils, staff and parents/carers.
St John’s views “sexting” as a safeguarding issue and all concerns will be reported to and dealt with by the Designated Safeguarding Lead.
The school will follow the guidance as set out in the non-statutory UKCCIS advice ‘Sexting in schools and colleges: responding to incidents and safeguarding young people’ and KSCB “Responding to youth produced sexual imagery” guidance.
If the school are made aware of incident involving creating youth produced sexual imagery the school will:
Act in accordance with the schools child protection and safeguarding policy and the relevant Lancashire Safeguarding Child Boards procedures.
Immediately notify the designated safeguarding lead.
Store the device securely.
Carry out a risk assessment in relation to the children(s) involved.
Consider the vulnerabilities of children(s) involved (including carrying out relevant checks with other agencies).
Make a referral to children’s social care and/or the police (as needed/appropriate).
Put the necessary safeguards in place for children e.g. offer counselling support and immediate protection and offer appropriate pastoral support for those involved.
Implement appropriate sanctions in accordance with the schools behaviour policy but taking care not to further traumatise victims where possible.
Review the handling of any incidents to ensure that the school is implementing best practice and the leadership team will review and update any management procedures where necessary.
Inform parents/carers about the incident and how it is being managed.
The school will not view images suspected of being youth produced sexual imagery unless there is no other possible option or there is a clear need or reason to do so (in these cases the image will only be viewed by the Designated Safeguarding Lead).
The school will not send, share or save content suspected to be an indecent image of children and will not allow or request children to do so.
If an indecent image has been taken or shared on the school/settings network or devices then the school will take action to block access to all users and isolate the image.
The school will take action regarding creating youth produced sexual imagery, regardless of the use of school/setting equipment or personal equipment, both on and off the premises.
The school will ensure that all members of the community are aware of sources of support regarding youth produced sexual imagery.

9.2 Responding to concerns regarding Online Child Sexual Abuse and

Exploitation

St John’s will ensure that all members of the community are made aware of online child sexual abuse, including exploitation and grooming including the consequences, possible approaches which may be employed by offenders to target children and how to respond to concerns.
The school will implement preventative approaches for online child sexual abuse via a range of age and ability appropriate educational approaches for pupils, staff and parents/carers.
St John’s views online child sexual abuse as a safeguarding issue and all concerns will be reported to and dealt with by the Designated Safeguarding Lead.
If the school is unclear if a criminal offence has been committed then the Designated Safeguarding Lead will obtain advice immediately through the Education Safeguarding Team and/or Lancashire Police.
If the school is made aware of intelligence or information which may relate to child sexual exploitation (on or offline) then it will be passed through to the CSET team by the DSL.
If the school are made aware of incident involving online child sexual abuse of a child then the school will:

Act in accordance with the schools child protection and safeguarding policy and the relevant Lancashire Safeguarding Child Boards procedures.
Immediately notify the designated safeguarding lead.
Store any devices involved securely.
Immediately inform Lancashire police via 101 (using 999 if a child is at immediate risk).
Where appropriate the school will involve and empower children to report concerns regarding online child sexual abuse e.g. using the Click CEOP report form: www.ceop.police.uk/safetycentre/
Carry out a risk assessment which considers any vulnerabilities of pupil(s) involved (including carrying out relevant checks with other agencies).
Make a referral to children’s social care (if needed/appropriate).
Put the necessary safeguards in place for pupil(s) e.g. offer counselling support and immediate protection and offer appropriate pastoral support for those involved.
Inform parents/carers about the incident and how it is being managed.
Review the handling of any incidents to ensure that the school is implementing best practice and the school leadership team will review and update any management procedures where necessary.

The school will take action regarding online child sexual abuse regardless of the use of school equipment or personal equipment, both on and off the school premises.
The school will ensure that all members of the community are aware of sources of support regarding online child sexual abuse.
If pupils at other schools are believed to have been targeted then the school will seek support from the Education Safeguarding Team to enable other schools to take appropriate action to safeguarding their community.
The school will ensure that the Click CEOP report button is visible and available to pupils and other members of the school community, for example including the CEOP report button the school website homepage and on intranet systems.

9.3 Responding to concerns regarding Indecent Images of Children (IIOC)

St John’s will ensure that all members of the community are made aware of the criminal nature of Indecent Images of Children (IIOC) including the possible consequences.
The school will take action regarding of Indecent Images of Children (IIOC) regardless of the use of school/setting equipment or personal equipment, both on and off the premises.
The school will take action to prevent access to accidental access of Indecent Images of Children (IIOC) for example using an Internet Service Provider (ISP) which subscribes to the Internet Watch Foundation block list, implementing appropriate web filtering, implementing firewalls and anti-spam software.
If the school is unclear if a criminal offence has been committed then the Designated Safeguarding Lead will obtain advice immediately through the Education Safeguarding Team and/or Lancashire Police.
If the school/setting is made aware of Indecent Images of Children (IIOC) then the school will:

Act in accordance with the schools child protection and safeguarding policy and the relevant Lancashire Safeguarding Child Boards procedures.
Immediately notify the school Designated Safeguard Lead.
Store any devices involved securely.
Immediately inform appropriate organisations e.g. the Internet Watch Foundation (IWF), Lancashire police via 101 (using 999 if a child is at immediate risk) and/or the LADO (if there is an allegation against a member of staff).

If the school are made aware that a member of staff or a pupil has been inadvertently exposed to indecent images of children whilst using the internet then the school will:
- Ensure that the Designated Safeguard Lead is informed.
- Ensure that the URLs (webpage addresses) which contain the suspect images are reported to the Internet Watch Foundation via www.iwf.org.uk.
- Ensure that any copies that exist of the image, for example in emails, are deleted.
If the school are made aware that indecent images of children have been found on the schools electronic devices then the school will:
- Ensure that the Designated Safeguard Lead is informed.
- Ensure that the URLs (webpage addresses) which contain the suspect images are reported to the Internet Watch Foundation via www.iwf.org.uk.
- Ensure that any copies that exist of the image, for example in emails, are deleted.
- Inform the police via 101 (999 if there is an immediate risk of harm) and children’s social services (as appropriate).
- Only store copies of images (securely, where no one else has access to them and delete all other copies) at the request of the police only.
If the school are made aware that a member of staff is found in possession of indecent images of children on their electronic device provided by the school, then the school will:
- Ensure that the Designated Safeguard Lead is informed or another member of staff in accordance with the school whistleblowing procedure.
- Contact the police regarding the images and quarantine any devices involved until police advice has been sought.
- Inform the Local Authority Designated Officer (LADO) and other relevant organisations in accordance with the schools managing allegations policy.
- Follow the appropriate school policies regarding conduct.

9.4 Responding to concerns regarding radicalisation and extremism online

The school will take all reasonable precautions to ensure that children are safe from terrorist and extremist material when accessing the internet in schools and that suitable filtering is in place which takes into account the needs of pupils.
When concerns are noted by staff that a child may be at risk of radicalisation online then the Designated Safeguarding Lead (DSL) will be informed immediately and action will be taken in line with the safeguarding policy.
Online hate content directed towards or posted by specific members of the community will be responded to in line with existing school policies, including anti-bullying, behaviour etc. If the school is unclear if a criminal offence has been committed then the Designated Safeguarding Lead will obtain advice immediately via the Education Safeguarding Team and/or Lancashire Police.

9.5 Responding to concerns regarding cyberbullying

Cyberbullying, along with all other forms of bullying, of any member of St John’s community will not be tolerated. Full details are set out in the school policies regarding anti-bullying and behaviour.
All incidents of online bullying reported will be recorded.
There are clear procedures in place to investigate incidents or allegations and support anyone in the school community affected by online bullying.
If the school is unclear if a criminal offence has been committed then the Designated Safeguarding Lead will obtain advice immediately through the Education Safeguarding Team and/or Lancashire Police.
Pupils, staff and parents/carers will be advised to keep a record of cyberbullying as evidence.
The school will take steps to identify the bully where possible and appropriate. This may include examining school system logs, identifying and interviewing possible witnesses, and contacting the service provider and the police, if necessary.
Pupils, staff and parents/carers will be required to work with the school to support the approach to cyberbullying and the schools e-Safety ethos.
Sanctions for those involved in online or cyberbullying may include:

O Those involved will be asked to remove any material deemed to be inappropriate or offensive.

A service provider may be contacted to remove content if those involved refuse to or are unable to delete content.
Internet access may be suspended at school for the user for a period of time. Other sanctions for pupils and staff may also be used in accordance to the schools anti-bullying, behaviour policy or Acceptable Use Policy.
Parent/carers of pupils involved in online bullying will be informed.
The Police will be contacted if a criminal offence is suspected.

9.6 Responding to concerns regarding online hate

Online hate at St John’s will not be tolerated. Further details are set out in the school policies regarding anti-bullying and behaviour.
All incidents of online hate reported to the school will be recorded.
Members of the community will be advised to report online hate in accordance with relevant school policies and procedures e.g. anti-bullying, behaviour etc.
The Police will be contacted if a criminal offence is suspected. If the school is unclear if a criminal offence has been committed then the Designated Safeguarding Lead will obtain advice immediately through the Education Safeguarding Team and/or Lancashire Police.