NEW STREET BAPTIST CHURCH PRIVACY NOTICE
How New Street Baptist Church (“We”) use your information.
Last Updated: 30th June 2020
New Street Baptist Church care about doing everything we can to protect your privacy and making sure the personal data you provide us with is kept safe.
This privacy notice explains how we use the personal data we collect from you when you use our website or make contact with us.
It is important that you read this privacy notice together with any other privacy notices we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.
Data Controller
New Street Baptist Church is the data controller and responsible for the personal information we process, unless otherwise stated.
Our Data Protection Manager is Steve Todd. You can contact him at GDPR@nsministry.co.uk or via our postal address. Please mark the envelope ‘Data Protection Manager’.
Third Party Links
Please be aware that this website contains links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policies of the website you visit.
1. INFORMATION WE COLLECT
We collect personal information directly from when you:
Make an enquiry using one of our contact forms on the website or via email.
Give online or fill out a Stewardship Form.
Sign up to be a volunteer on one of our teams.
Sign up to attend an event, course or service.
Register your children to participate in a Youth or Children’s Work session.
Engage with our Safeguarding process.
Subscribe to our E-Newsletter.
Apply for a role on the Staff Team.
Or otherwise provide your personal details.
We also store non-personally identifiable information when you visit our website such as IP addresses, technical information about your browser, network and device, details of pages visited and files downloaded.
2. WHAT PERSONAL INFORMATION DOES THE CHURCH PROCESS?
The personal information we hold varies greatly depending on what information you have submitted. For example, it may be as little as just your email address, or as much as given in a detailed application form or Gift-Aided donations. This could include:
Names, titles and aliases.
Contact details such as telephone numbers, postal address and email addresses.
Photographs and Videos.
Demographic information such as gender, age, date of birth, marital status, nationality, education/work histories, academic/professional qualifications, hobbies, family composition and dependents.
Financial information such as your bank details or payment card numbers.
Whether you are a UK taxpayer.
The General Data Protection Regulation recognises some information as ‘sensitive personal data’. The information we process is likely to constitute ‘sensitive personal data’ because as a church, the fact that we process your information at all may be suggestive of your religious beliefs. Where you provide this information, we may also process other categories of sensitive personal data, including but not limited to: racial or ethnic origin, sex life, mental and physical health, details of injuries, medication/treatment received, data concerning sexual orientation, children’s data and criminal records, fines and other similar judicial records.
3. WHAT DO WE DO WITH YOUR DATA?
We highly value the personal information you share with us. We will endeavour to keep your information up to date, to store and destroy it securely, to protect it from loss, misuse, unauthorised access and disclosure and to ensure that appropriate technical measures are in place to protect it. We will not collect or retain excessive amounts of data.
We may use your personal information for some or all of the following purposes:
To enable us to meet all our legal and statutory obligations.
To carry out comprehensive safeguarding procedures (including due diligence and complaints handling) in accordance with best safeguarding practice, with the aim of ensuring that all children and adults at risk are provided with safe environments.
To provide pastoral and spiritual care and to perform services such as weddings and funerals.
To connect you with the church community.
To deliver the church’s mission to our community and carry out any other voluntary or charitable activities for the benefit of the wider community.
To run Sunday and Midweek meetings, courses, groups and events.
To maintain the church’s accounts and records.
To process donations you have made (including contacting you regarding Gift Aid information).
To seek your views or comments.
To notify you of changes to our meetings, events and role holders.
To send you communications which you have requested and that may be of interest to you.
To process a grant or application for a role.
To manage our employees and volunteers.
To operate the New Street Baptist Church website and deliver the services that individuals have requested.
To contact you about any children or young people in your care and their involvement in our Children’s or Youth Work.
4. WHO DO WE SHARE YOUR INFORMATION WITH?
We will not share your information with any third parties for the purposes of direct marketing. Your personal information will be treated as strictly confidential. It will only be shared with third parties where it is necessary for the performance of tasks or where you first give us your prior consent.
We may need to share your information with statutory organisations such as the police, the local authority and the health service.
We use Squarespace as a website hosting provider who are a third party. The technical information and personal information you provide on this website is shared with them for the purpose of them providing website and donation services for us as well as analytics which help us improve the website experience.
You can read their own privacy policy here: https://www.squarespace.com/privacy
This website also uses front files from Google Fonts and Adobe Fonts. To properly display this site to you, servers where font files are stored may receive technical information about you, including:
Information about your browser, network or device.
Your IP address.
5. SECURITY
We have put in place appropriate security measures to prevent your personal data form being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We may store your personal data using a cloud service (such as G Suite, by Google). The cloud service provider may be based in a country outside the European Economic Area EEA). We will only store your personal data using a cloud service when we are satisfied that in the particular circumstances there is an adequate level of protection.
6. HOW LONG DO WE KEEP YOUR DATA FOR?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
7. MARKETING
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. You will receive marketing communications from us if you have requested information from us or purchased goods, attended an event or course with us and, in each case, you have not opted out of receiving that marketing.
8. CHANGES TO OUR PRIVACY NOTICE
We keep our privacy policy under regular review and will place any updates on this webpage.
9. YOUR LEGAL RIGHTS
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing
your information.
Your right of access
You have the right to ask us for copies of your personal information.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
10. YOUR CONSENT
By using our site, you consent to our website privacy notice.
11. CONTACT DETAILS
If you would like to exercise any of the above rights, please contact our Data Protection Manager using the email: GDPR@nsministry.co.uk
You can also write to us at:
Data Protection Manager
New Street Baptist Church
22 New Street,
St Neots,
Cambridgeshire.
PE19 6GT.
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first
instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/