PRIVACY POLICY

OUR CHURCH IS OPEN
10am – 4pm daily

(Privacy Policy, last updated: 30.09.2024)

Data Privacy Policy

St John the Baptist Church, High Street, Scampton, Lincoln LN1 2SE.

Your privacy is very important to us. Accordingly, we have developed this Policy in order for you to understand how we collect, use, communicate and disclose and make use of personal information. The following outlines our privacy policy.

  • Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.
  • We will collect and use personal information solely with the objective of fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law. If members of the congregation do not wish photographs of church activities, in which they appear, to be published they should notify a member of the leadership team. A notice to this effect is displayed at the back of church.
  • We will only retain personal information as long as necessary for the fulfilment of those purposes.
  • We will collect personal information by lawful means and, with the knowledge or consent of the individual concerned. We use Mailchimp for the circulation of our newsletter which complies fully with the General Data Protection Regulations EU 2016. This legislation allows you more control over how your data is used and how you are contacted. Information is never passed on or sold.
  • Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.
  • We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.
  • We will make readily available to the congregation information about our policies and practices relating to the management of personal information.
  • We are committed to conducting our church website in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.

1. Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR” – details can be found on the UK Government’s website at https://www.gov.uk/data-protection).

2. Who are we?

St John the Baptist Church, Scampton, is the data controller (contact details: St John the Baptist Church, High Street, Scampton, Lincoln LN1 2SE). This means it decides how your personal data is processed and for what purposes.

3. How do we process your personal data?

St John the Baptist Church, Scampton, complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

We use your personal data for the following purposes: –

  • To enable us to provide a voluntary service for the benefit of the public in a particular geographical area as specified in our constitution;
  • To administer membership records;
  • To fundraise and promote the interests of the charity;
  • To manage our employees and volunteers;
  • To maintain our own accounts and records (including the processing of Gift Aid applications);
  • To inform you of news, events, activities and services run by St John the Baptist Church, Scampton.

4. What is the legal basis for processing your personal data?

  • Explicit consent of the data subject so that we can keep you informed about news, events, activities and services and process your gift aid donations and keep you informed about diocesan events.
  • Processing is necessary for carrying out obligations under employment, social security or social protection law, or a collective agreement;
  • Processing is carried out by a not-for-profit body with a political, philosophical, religious or trade union aim provided: –
    • the processing relates only to members or former members (or those who have regular contact with it in connection with those purposes); and
    • there is no disclosure to a third party without consent.

5. Sharing your personal data

Your personal data will be treated as strictly confidential and will only be shared with other members of the church in order to carry out a service to other church members or for purposes connected with the church. We will only share your data with third parties outside of the parish with your consent.

6. How long do we keep your personal data*?

We keep data in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website [see footnote for link].

Specifically, we retain electoral roll data while it is still current; gift aid declarations and associated paperwork for up to 6 years after the calendar year to which they relate; and parish registers (baptisms, marriages, funerals) permanently.

7. Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: –

  • The right to request a copy of your personal data which St John the Baptist Church, Scampton, holds about you;
  • The right to request that St John the Baptist Church, Scampton, corrects any personal data if it is found to be inaccurate or out of date;
  • The right to request your personal data is erased where it is no longer necessary for St John the Baptist Church, Scampton, to retain such data;
  • The right to withdraw your consent to the processing at any time
  • The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable) [Only applies where the processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated means].
  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
  • The right to object to the processing of personal data, (where applicable) [Only applies where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics]
  • The right to lodge a complaint with the Information Commissioner’s Office.

8. Further processing

If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

9. Cookies

Cookies are small text files placed on your computer’s hard drive by your web browser when you visit any website. They allow information gathered on one web page to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and the website owner with statistics about how you use the website so that it can be improved.

Some cookies may last for a defined period of time, such as one day or until you close your browser. Others last indefinitely.

Your web browser should allow you to delete any cookies you choose and prevent or limit their use.

Our website uses cookies. They are placed by software that operates on our web servers, and by software operated by third parties whose services we use.

When you first visit our website, we ask you whether you wish us to use cookies. If you choose not to accept them, we shall not use them for your visit except to record that you have not consented to their use for any other purpose.

If you choose not to use cookies or prevent their use through your browser settings, you will not be able to use all the functionality of our website.

We use cookies in the following ways:
9.1. COOKIE CONSENT (Cookie name: Cookie Notice): to store your preferences in relation to the use of cookies.

Most modern browsers allow you to refuse to accept cookies and delete cookies. The methods used to refuse or delete cookies differ depending on the browser used and its version. Up-to-date information on these methods can be found using these links:
CHROME
SAFARI
FIREFOX
OPERA
EDGE and INTERNET EXPLORER

10. Contact Details

To exercise all relevant rights, queries, or complaints, please first contact the Church Minister or Parish Administrator by email using our contact form or in writing at St John the Baptist Church, High Street, Scampton, Lincoln LN1 2SE.

You can contact the Information Commissioner’s Office on 0303 123 1113 or via email at https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

* Details about retention periods can currently be found in the Record Management Guides located on the Church of England website at: – https://www.churchofengland.org/about/libraries-and-archives/records-and-information-management