Hello,

We are hoping to start a new project with a local primary school. The students will write letters and the school will send them to some of our clients here at Age UK Lambeth (mostly elderly or vulnerable adults) and the clients will send them back to the school. 

I just wanted to ensure that as an organisation we are conscious of the correct processes to ensure we comply with GDPR and safeguarding. I would say that the school is responsible for safeguarding the students and us, the charity clients. We would say that the teacher should open the letter first before giving it to the student and have clear channels to report any concerns to us as an organisation. Also, the teacher should read the students letter before sending to the client. The student's address isn't shared with the client. The client will consent to share their personal data with the school as part of this project. Should we have a written agreement with the school.

Any advice on this and other things to consider would be great.

Thanks, Kellie