Reasons for processing and legal basis
We only hold data that either we are legally obliged to or that helps us fulfil our missional and charitable aims as a church. We are a membership organisation and good communication with our membership and the extended community is an essential part of being church.
Therefore we will hold and process data to:
- Enable us to meet all legal and statutory obligations;
- Comply with and facilitate our comprehensive safeguarding procedures (including due diligence and complaints handling) in accordance with best safeguarding practice from time to time with the aim of ensuring that all children and adults-at-risk are provided with safe environments (please see our safeguarding policy and procedures);
- Provide you with pastoral and spiritual care;
- Administer our membership records;
- Enable us to follow up membership, course and event enquiries;
- Fundraise and promote the interests of the Church and charity;
- Maintain our own accounts and records;
- Process and record financial donations that you have made (including Gift Aid information);
- Process a booking you make for an event and then administer the event;
- Communicate with you about your views or comments;
- Update you about our services, events, role holders and any matters of interest related to your church community;
- Process a grant or application for a role.
What is our legal basis for processing your personal data?
Most of our data is processed because it is necessary for our legitimate interests to enable our charitable and missional aims. For example, maintaining membership records, safeguarding our children, because you are a part of a particular group and need information about that, recording our financial donations and operating team rotas for the effective function of Sunday services.
- Some of our processing is necessary for compliance with a legal obligation. Retaining safeguarding records and gift aid declarations are examples of this.
- We may also process data if it is necessary for the performance of a contract with you, or to provide a direct service to you. For example, if you buy tickets for a church event.
- As a religious organisation, we are permitted to process information about your religious beliefs to administer membership or contact details.
- Where your information is used other than in accordance with one of these legal bases, we will first obtain your consent to that use. For example, obtaining your consent to keep you informed of future church events after you have joined us at another event.
Storing and sharing your data The information you supply will be stored within the church’s secured I.T. systems. Paper copies of data will be held securely in locked metal boxes in the church and community office.
We produce an annual Church Directory of contact details for those involved at WLBC which will be available in hard copy. As well as electronically. Consent will be sought from you when the directory is produced regarding what contact information you are happy to have included. Copies will be available to members and regular attenders of WLBC. We will not make available copies of the directory to outside parties, though we cannot guarantee that other parties will not indirectly access it. If you request that we no longer hold your details we would not include you in any future Church directories printed for that year, but cannot obviously remove you from hard copies in existence.
Retention of data Where you are actively involved in the life of the church and/or are a Church member, unless we are required to hold your information in accordance with our data retention schedule, your contact details will be removed from the database once you are no longer attending the church (more than 6 months) and/or have resigned from membership, if applicable, unless you ask to remain as one of our “church community friends”.
Where the above does not apply and you solely attend an event we will delete your contact details after the event unless you opt in to be kept updated of other events.
As a church community friend, if you have consented to receive information about the church and its activities and subsequently wish to be removed from our mailing lists you can contact us and we will delete your data.
Right to access You have the right to ask to see any information we hold about you by submitting a ‘Subject Access Request’ to the Church Secretary who is the Data Protection Trustee. You also have the right to ask for information which you believe to be incorrect to be rectified. If you are concerned about the way your information is being handled please contact our Data Protection Trustee (in the first instance email ). If you are still unhappy you have the right to complain to the Information Commissioners Office.
Dated: 9th March 2020. Charity number: 505183