Whisper Service Flowchart
The service is an open reporting route for any concerns that a whole school community might have, but in particular issues that affect the safety and well-being of children, young people and staff. It can be used by students, pupils, parents, local community or staff; or indeed anyone who needs to report an issue to the school anonymously.
Whisper can be accessed by users through a unique URL which we assign to each for you setup within the Whisper system. You may link to your form on your own website by installing a anchor to your unique link, we provide a facility to generate the required HTML code to achieve this.
By accessing your unique link, either through the school website, via an email, or directly, users will be taken to the school's reporting form that is hosted on our website. See our form to see how it looks.
There is also a way for users to use SMS to report issues to your school using our dedicated SMS number and prefixed with your SMS code (Generated when you setup your form), which you can show on your website. The school will not know if the user accessed the system by the web or SMS; each route creates a notification email to administrators assigned to the receiving inbox.
A School will be involved in the education of its user community as to what the service is to be used for but we have designed this so that a user can share anything.
Where this is a student it may be some of the issues we highlight below but it could be anything that a user considers might be helped by telling a responsible adult at the school and they would prefer to message than having a face to face meeting.
This might include:
The system may filter and block things like swear words and stop messages getting to the school Whisper account and so users need to be educated about that and also some other use information.
We have produced a short document which is made available when the user makes a report to cover this off together with important data protection information. This User Notice can be viewed here.
SWGfL Whisper has been designed for users to be able to report electronically and in private through an online or SMS system that is accessible to staff through an online portal. Personal details are not shared with the school unless a user chooses to include them in the body of the message or adds their name when submitting a message.
When making a report the user can complete contact info boxes; in doing so the system can alert the user by email or SMS of certain system information such as a URI for the message / connected messages or when the school has responded. Save for the user’s name (if provided), this contact data is not made available to the school save under limited circumstances of which the user is aware by way of a notice we give to each user.
See data protection section for more information.
Message content is not transmitted via email, and is only available to view through the Whisper administration system, which is encrypted using standard TLS encryption. Whilst we make every effort for messages to be secure and confidential, there may be occasions when it could be recorded on school security or other systems. Users must be aware that monitoring systems may be able to decrypt and monitor traffic flowing across the school network and that email is not 100% secure. Also the system could be accessed by unauthorised persons should an account password be compromised.
A school will decide how they wish to deal with the subject of the message and sometimes in really serious cases (e.g. someone is at risk of harm) the school may share the information a user has provided with the police. The school is solely responsible for the actions it takes and we consider that it is for the school to act in accordance with its own guidelines on policies as relevant.
We appreciate that the data we hold may be important when a serious case is reported but we shall not be able to provide this unless under limited circumstances.
This depends. The school has a duty of care to deal with any issues that involve the safety or well-being of students or pupils, so a user can expect it to be acted upon. If a user wanted to pass on information about someone or something that they are concerned about, the school will investigate the issue further using the information provided. This could mean talking to the people directly involved or any other possible bystanders.
The school will make their best judgements as to how to respond to the user, but should send messages back to the person who submitted a report during or after an investigation, using the messaging facility provided by the Whisper system.
We advise schools using SWGfL Whisper to respond to any reports within 24 hours during school time. At weekends this may very well be longer and during school holidays when the school is closed, the service may not be available. To fully investigate issues will take longer depending on the complexity of the case, so users should be informed of progress through the messaging facility of the Whisper system if no other contact details have been provided.
You can provide more information on how quickly you expect to respond to reports using the free text boxes provided in the Whisper Forms setup dialogue.
Reports, messages, contact data and some location data is stored by us as we require it to provide the service.
Reports will be available to access by the designated member(s) of the school for as long as the report is deemed to still be active, plus the period as specified by the data retention policy specified as part of the setup process.
Reports will be exportable from the system and once in the hands of the school the school is responsible for storage and retention of these outside of the system.
We will process contact data and some location data as required for the service provision and analytical purposes.
Regarding data retention, we have an automated process in place. The school can choose how long personal data is retained for (6/12/24/36 months), and after the selected period, the names, reports, chat messages, email addresses, telephone numbers, IP addresses are erased.
The records are retained with the report categories, dates, APNs, locations (i.e. no personal data) and we use this for analytical purposes.
If you end the service we will work with you to provide you with the text of messages which have not yet been erased.
We consider that SWGfL and a school are both data controllers in respect of the message content and so we “share” this data and we each have obligations under the data protection laws to the users and, for the school this extends policies for their duties to other data subjects who may be identified by the user in the body of the message;
SWGfL’s involvement is limited to processing the message / responses in each chain (an Interaction) and sharing this with the school. We do not monitor the content of any messages. We will share this data as relevant for providing the Services and store it safely.
The school is solely responsible for acting on the information it receives from the User in accordance with its own policies and procedures (eg. Bullying / safeguarding etc).
The school may save the message content in its own systems and in doing so is responsible for these aspects of processing as a controller outside of the confines of the system (i.e. the School is responsible for putting in place appropriate information and notices for its user community) taking into account that messages may include personal data concerning the user but other data subjects from time to time.
We are the data controller in respect of this data and we will use these details only to provide the email notifications and other functionality in the system. We are aware that a School may wish us to provide contact details where a message causes concern (i.e. that a user is at risk of harm or similar for the person they have identified in the message); and we will do under limited circumstances such as where this is ordered by a court, the police of any other administrative body outside of the School or the user gives consent.
The messages will also generate some other types of data such as locations data, IP etc and we are the data controller of this and apply the same principles as for user contact data to this.
We explain all this to the user in the User Notice [URL].
There are currently two entry points into the Whisper system for reports, and the data that could be collected is as follows:
You can read our full Terms of Service here. In contrast to the promises of anonymity, a reporting process often equates to varying levels of transparency, accountability and communication How will an anonymous reporting tool increase awareness of issues and improve safeguarding
What is Anonymous Reporting?
Why Should You Use an Anonymous Reporting Tool?
In contrast to the promises of anonymity, a reporting process often equates to varying levels of transparency, accountability and communication
How will an anonymous reporting tool increase awareness of issues and improve safeguarding