We gather and process your personal information (including pictures and videos), in accordance with this privacy notice and in compliance with the relevant data protection regulation and laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
How To Contact Us About Your Personal Data
Please contact the Church Administrator by email at info@rccgoasisofmercy.org
Information That We Collect
We process your personal information to meet our legal, statutory and contractual obligations and to provide you with our services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice. We also collect information (including personal information) when you contact us through our website, filled out forms (print and online), all of which may or may not be submitted via the website, via social media links, from partner agencies we work with and directly from you through other interactions such as events, volunteering, community projects and initiatives, networking, your supplying services to us etc. We collect information in the below ways: – Online form, website orders, employment CV’s, information by telephone, paper forms, etc.
How We Use Your Personal Data (Lawful Basis For Processing)
We take your privacy very seriously and will never disclose or share your data without your consent, unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time. On our website, other data may also be collected automatically such as details of your visits to our site (time/date/pages viewed), including but not limited to your IP address, browser type and version, how you got to our site and links you click on to leave our site, location data, traffic data, [weblogs] and other communication about your use of our site and viewing of any videos we offer. The purposes and reasons for processing your personal data are detailed below: –
- We collect your personal data in the performance of a contract or to provide a service and to ensure that orders are completed and can be sent out to your preferred address.
- We collect and store your personal data as part of our legal obligation for business accounting and tax purposes
- We will occasionally send you marketing information where we have assessed that it is beneficial to you as a member and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interests.
- We collect and process your personal data with your consent when you become a member of the organisation. We also collect for other purposes as disclosed to you at the point of collection with your consent.
Your Rights
The right to be informed – you have the right to be told about the collection and use of the personal data you provide.
Right of access – you have the right to know whether we are processing your personal data, and to a copy of that data.
Right to rectification – you have the right to have any incorrect personal data corrected or completed if it is incomplete.
Right to erasure – this right, often referred to as the right to be forgotten, allows you to ask us to erase personal data where there is no valid reason for us to keep it.
Right to restrict processing – you have the right to ask us to restrict processing of your data.
Right to data portability – you have the right to move, copy or transfer your personal data from one IT environment to another.
Right to object – you have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (ii) direct marketing (including profiling); and (iii) for purposes of scientific/historical research and statistics.
Rights relating to automated decision making including profiling – you have rights in respect of automated decision making, including profiling.
Sharing And Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. From time to time we use third-parties to provide the below services and business functions; however, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.
Safeguarding Measures
We take your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place, including: –
Transfers Outside The EU
Personal data in the European Union is protected by the General Data Protection Regulation (GDPR) but some other countries may not necessarily have the same high standard of protection for your personal data.
We utilise some products or services (or parts of them) that may be hosted/stored in non-EU countries, which means that we may transfer any information which is submitted by you through the website outside the European Economic Area (“EEA”) for the below purposes:
You are not obligated to provide your personal information to us, however, as this information is required for us to provide you with our services/deliver your products/legitimate interests, we will not be able to offer some/all our services without it. The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us. Such staff may be engaged in, among other things the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will however take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
Legitimate Interests
As noted in the ‘How We Use Your Personal Data’ section of this notice, we may process your personal information under the legitimate interests’ lawful basis. Where this is the case, we have carried out a thorough Legitimate Interests’ Assessment (LIA) to ensure that we have weighed your interests and any risk posed to you against our own interests, ensuring that they are proportionate and appropriate. We assist our members, volunteers and supporters informed of its charitable and religious activities. There is a genuine basis for processing this information.
We use the legitimate interests’ lawful basis for processing and have identified that our interests are membership services. Providing your data to us will enable us to provide you with information that will be beneficial to you. Without your consent, we cannot provide you with such information.
How Long We Keep Your Data
We only ever retain personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. Full contact and activity records are maintained whilst your membership is active. After your membership has ceased, your record is flagged as inactive and your contact details are omitted from our routine church communications. We have a retention policy that can be made available upon request. Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent.
Special Categories Data
We sometimes need to process sensitive personal information (known as special category data) about you, such as your religious beliefs. Also, where children are concerned, information about allergies are captured. We periodically offer health checks. Where we collect such information, we will only request and process the minimum necessary for the specified purpose and identify a compliant lawful basis for doing so. We will ensure that adequate measures are put in place to protect your data.
Where we rely on your consent for processing special category data, we will obtain your explicit consent. You can modify or withdraw consent at any time, which we will act on immediately, unless there is a legitimate or legal reason for not doing so.
Complaint Procedure
We only process your personal information in accordance with this privacy notice and with the relevant data protection laws. However, if you wish to raise a complaint regarding the processing of your personal data or are dissatisfied with how we have handled your information, please contact us at info@rccgoasisofmercy.org.
Cookie Notice
We collect data using cookies. A cookie is an alphanumeric text file that is sent from a website and stored on your computer’s hard drive by your web browser. Most browsers allow you to turn off the cookie function but if you opt to do this you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies as soon you visit our site.
Respecting Your Privacy
We do not sell, rent or pass on any information about you to other organisations. However, we may share your data with our partners or affiliates subject to this policy including those who assist us to perform our services. We may also need to pass on information when required by law or by a regulatory body (for example, for a Gift Aid audit by the Inland Revenue or if asked for details by a law enforcement agency). We may provide third parties with overall information about visitors and users to our site, but this information, other than as explained above, is both aggregate and anonymous. Occasionally, we employ agents to carry out tasks on our behalf such as processing donations but they are bound by contract to protect your privacy just as we would ourselves. We aim to keep the data we hold about you up to date. If you no longer wish to receive information from us, please let us know.
Safe And Secure
We maintain a high level of physical and electronic security in relation to the collection, storage and disclosure of your information. We take reasonable steps to ensure that any information we hold about you is protected. Our intention is to use Secure Socket Layer (SSL) software, which encrypts information given over the internet to protect all personal data as soon as it is possible.
While we make every reasonable effort to ensure that information sent to us is done securely, we cannot warrant the security of information transmitted to us through the internet. When you transmit information to us via the internet, you do so at your own risk.
Your Rights
You have the right to request details of the information we hold about you. To exercise that right, you should contact us by email at info@rccgoasisofmercy.org. We will respond within 30 days of receiving your email or as otherwise required by law.
Changes To Our Privacy Statement
From time to time, we will make changes to this statement to keep it up to date and relevant. You should therefore ensure that you check regularly to see what has changed. Effective May 2018