East Finchley Baptist Church Privacy Notice
How East Finchley Baptist Church (“we”) use your personal data
Your privacy is important to us. We are committed to safeguarding the privacy of your personal data.
It is important that you read this privacy notice together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.
Data Controller
Under Data Protection legislation the Church Trustees of East Finchley Baptist Church are the Data Controller. This means they are responsible for how your data is processed.
What is your personal data?
Personal data is any information about a living individual which allows them to be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession.
Why do we collect and use your information?
We may collect and use your personal data for some or all of the following purposes:
- To maintain contact lists of church members, regular attenders and others connected to the church. These lists may be used by church members and regular attenders to contact each other;
- To send you information regarding church news and details of our church services, events and activities;
- To enable us to run and administer church activities and events including our children and youth work and Toddler Group;
- To provide appropriate pastoral care;
- To carry out safeguarding procedures for children, young people and adults at risk;
- To respond effectively to enquirers;
- To process applications for church membership;
- To maintain our accounts and records(including the processing of Gift Aid information);
- To recruit, support and manage staff, volunteers and placement students in theological training;
- To comply with applicable laws and regulations(including that of data sharing),and requests from statutory agencies;
- To monitor and assess the quality of our services.
We do not share your information with others except as described in this notice.
The categories of information that we may collect, hold and share include:
- Personal information (such as name, telephone number, address and email address, date of birth)
- Characteristics (such as gender, ethnicity, language, nationality, country of birth)
- Special categories of personal data (such as your religious beliefs)
Legal basis for processing your data
We process your data on the basis that:
- Express and informed consent has been given by you; and/or
- We have a legitimate interest to process the data; and/or
- The processing is necessary to enter into and perform a contract with you; and/or
- Processing is required in order for us to comply with a legal obligation; and/or
- Processing is necessary to protect your vital interests.
Where we rely solely on your consent as the basis for processing your personal data you may modify or withdraw your consent at any time.
Storing your data
We hold your data for varying lengths of time depending on the type of information in question but in doing so we always comply with Data Protection legislation. We will not keep personal data longer than is necessary for the purposes it was collected for including for the purposes of satisfying any legal, accounting or reporting requirement.
Details of retention periods are available in our retention policy which can be requested by contacting us as indicated at the bottom of this privacy notice.
Security of your data
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those individuals who need to know. They will only process your personal data on our instructions.
We have put in place procedures to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.
Our email services are provided by a third party, Google, who may store our emails outside of the European Economic Area (EEA). We are satisfied that appropriate safeguards are in place regarding the storage of such emails.
Who do we share your information with?
We will not share your personal data with third parties without your consent unless the law requires us to do so.
Our church fellowship database, containing personal contact details, is hosted by an external company called ChurchSuite, who process personal data on our behalf. This third party may collect personal data on our behalf via their system, or we may share personal data with them directly.
Our church website is hosted by an external company called Hubb.Church, who may collect and process personal data on our behalf through our website. We may also share personal data with this third party directly for individuals who are managing our church website.
Requesting access to your personal data
Under Data Protection legislation, you have the right to request access to information about you that we hold. To make a request for your personal data, contact our church office using the contact details below.
Your rights and your personal data
In addition to your right to access information we hold on you, as outlined above, you also have the right to:
- have us correct and update information we hold on you;
- have your information erased ( subject to our right to retain data due to our legitimate interests or for regulatory purposes);
- object to us processing your personal data (we may have legitimate grounds to continue to process your data)
- prevent processing for the purpose of direct marketing
- object to decisions being taken by automated means
- request we transfer some of your data to another data controller (the right to data portability)
- withdraw your consent at any time for any processing of your personal data for which you gave us consent
- lodge a complaint with the Information Commissioner’s Office; and
- claim compensation for damages caused by a breach of the Data Protection regulations.
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/
Contact Details:
If you would like to discuss anything in this privacy notice, have further information on how your personal data is used and how we maintain the security of your personal data and to exercise all your relevant rights, please contact us via the church office as below:
Telephone: 020 8883 1544
Email: office@eastfinchleybc.org.uk
Post: East Finchley Baptist Church, Creighton Avenue, London N2 9BD