Privacy Notice A
Church members, attendees and community users
This is a summary of how we process and store your information in line with the General Data Protection Regulation (GDPR).
We are committed to GDPR compliance and value the information you share with us, therefore we will endeavour to keep your information up-to-date, to store and destroy it securely, to protect it from loss, misuse, unauthorised access and disclosure. We will not collect or retain excessive amounts of data and will ensure that appropriate operational and technical measures are in place to protect the information we hold.
We review our privacy policies and may update this notice periodically; the most recent copy can be found on the Kings website. If we make any significant changes this will be communicated on our website or via ChurchSuite; by continuing to use these, you will be deemed to have accepted these changes.
The Frontiers Charitable Trust and Kings Centre (Eastbourne) Ltd, hereafter known as Kings, is a member of the Evangelical Alliance, and is part of newfrontiers / New Ground sphere of churches.
Our principle address is 27 Edison Road, Eastbourne, BN21 4PY
Registered charity number is 1065086
Registered company number is 3404789
VAT registered number 803770735
Our Information and Privacy Co-Ordinator is David Gamester, if you have any concerns regarding the contents of this notice or require further information please contact email@example.com or if the matter is of an urgent matter please call 01323 521125.
We may collect several types of personal information, such as;
The GDPR recognises some information as ‘sensitive personal data’. The information we process may constitute ‘sensitive personal data’ because, as a church, the fact that we hold your information may be suggestive of your religious beliefs.
Other ‘sensitive personal data’ includes (but is not limited to) racial or ethnic origin, sex life, mental and physical health, details of injuries or medial treatment received, data concerning sexual orientation, children’s data and criminal records, fines and other judicial records. If you provide any ‘sensitive personal data’ we will ensure that it is processed in accordance with the GDPR guidelines, and only for the purposes for which it was provided.
We use your information so that we can best serve you and the community. Your information may be used in several ways, such as;
We collect personal information directly from you when you (but not limited to);
We may also collect information from other sources, such as;
We look to keep your information as secure as possible, however to undertake some of our processes or to comply with our legal obligations we may have to share certain information with third party organisations (data processors). If this is the case we limit the information we share to that which is required to undertake the task for which they were appointed, or that is required by law. Where we have appointed a data processor we will have confidentiality agreements in place that restrict the use of your information and ensure that they comply with GDPR. We do not sell on your information.
Information may be shared with (but not limited to);
There are several legal basis for processing your information, in the main Kings will process your personal information on the basis of consent. This means you will be asked to consent to us using and processing your personal information as detailed above, or to provide additional consent for a specific purpose if it falls out of our normal remit of work.
Other processing based on legitimate interest may be necessary to carry out our obligations under employment, social security or social protection law, or a collective agreement.
Legitimate interest is also the basis for our processing relating to attendees / former attendees and for claiming back tax under the governments Gift Aid scheme as we are a not-for-profit body with religious aims.
If we wish to use your information for a new ongoing purpose, not covered by this policy, then we will provide you with a new privacy notice, explaining the changes, prior to processing your information.
We have taken appropriate operational and technical measures to ensure your information is secure. All information is stored within the EU, or on systems complying with measures giving equivalent protections of personal rights through international agreements or contracts approved by the European Union*. Your information will only be processed by appropriately trained staff, volunteers and appointed data processors. We store information in several ways, such as;
Our website is accessible from overseas so on occasion some personal data (images etc) may be accessed from outside the EU.
We have additional measures in place where personal information concerns a child or young adults under the age of 18.
The Kings website may provide links to other sites, this privacy notice only applies to Kings website and therefore if you select a link we would encourage you to read their privacy notice or policy.
Kings uses ChurchSuite to advertise upcoming events and communicate news, changes or rotas directly to its members, attendees and community users. Therefore, you do not need access to social media or messaging groups such as Facebook or WhatsApp to partake in church life. We do utilise social media to communicate with the wider community and if you choose to communicate in this way your personal information would fall under their privacy notice.
We will keep your information only as long as we need to.
For most records this will include the period you are waiting to access services, are attending services or are a member of Kings, and then for a maximum of 2 years following your last interaction with Kings.
However, we are required to retain some records for an extended period of time including (but not limited to) financial transactions, employment records and information regarding safeguarding, in these cases we will retain records in accordance with the current UK legislation or guidelines.
All information following this time will be deleted (if electronic record) or securely disposed of (if paper record).
We use ChurchSuite as our principle place to store information. If you use ChurchSuite you can manage your own account to ensure;
You can do this by logging on to MyChurchSuite, selecting ‘My Details’ and then choosing the relevant tab.
If you wish to update any other information, including financial information we may have, or you wish to withdraw your consent please email firstname.lastname@example.org
If you withdraw your consent, Kings will aim to deleted (if electronic record) or securely disposed of (if paper record) your information within 72 hours, or within a maximum of 1 month from the date of your request. If for any reason this is not possible you will be informed in writing.
You have several rights over the information we hold on you, such as;
You may request a copy of the personal information we hold on you, and information concerning why we use it, where we obtained it from and who we share it with. Your first request is free of charge, any future requests may incur a charge.
You may request that we delete your personal information. We will respond within one month confirming if this has been possible and if not the reason why it has not been deleted.
You may update, or request your information to be updated, if you believe it is inaccurate.
You have the right to request that we restrict processing if there is a disagreement about its accuracy or legitimate use.
You have the right to request that we stop processing your data, unless we can demonstrate compelling and legitimate grounds for processing, which may override your own personal interests.
If you provide personal information, by completely automated / electronic means, for the purpose of providing us with your consent for processing information or in order to enter into a contract with us, you have the right to have a copy of the information provided to you in a portable format.
You have the right not to be subject to a decision based solely on automated processing of your personal information.
Introduction: What is a cookie?
“Cookies” are text-only pieces of information that a website transfers to an individual’s hard drive or other website-browsing equipment for record-keeping purposes. Cookies allow the Website to remember important information that will make your use of the site more convenient. A cookie will typically contain the name of the domain from which the cookie has come, the “lifetime” of the cookie, and a randomly generated unique number or other value.
Session Cookies are temporary cookies that remain in the cookie file of your browser until you leave the Website.
Persistent Cookies remain in the cookie file of your browser for much longer (though how long will depend on the lifetime of the specific cookie). When we use session cookies to track the total number of visitors to our Website, this is done on an anonymous aggregate basis (as cookies do not in themselves carry any personal data).
Google Analytics collects information about your computer and about your visits to and use of this website (these are information about your browser, your IP address, your general location as determined from your IP address and provided by your browser, the site from which you come, and the links followed when leaving our site). This information is also collected through cookies.
The information is used for statistical purposes and analysis in order to administer the website or improve our services. All of our activity falls within the bounds of the Google Analytics Terms of Service.
Want to opt out of tracking? You can opt out of Google’s advertising tracking cookie or use a browser plugin to opt out of all Google Analytics tracking software.