Like all organisations we have a GDPR policy, with loads of words,
all boring but essential and which we take seriously - so here it is is in all it's glory!
Brixham Baptist Church, Market Street, Brixham, TQ5 8EU
This notice applies to former, and current church members and members of the congregation with whom Brixham Baptist Church wish to engage with.
This notice does not form part of any contract or agreement to provide the activities, events, support and services we offer to members of the community.
We may update this notice at any time. It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
2. Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).
We will collect, store, and use the following categories of personal information about you:
Personal contact details such as name, title, telephone numbers, address and email addresses. Current and historical records of activities linked and associated to the data subject.
There are no special categories of more sensitive personal information that we collect or process about you.
3. Who are we?
Brixham Baptist Church is the data controller (contact details below). This means it decides how your personal data is processed and for what purposes. We are committed to protecting the privacy and security of your personal information. We will use this privacy notice to describe how we collect and use personal information about you during and after your relationship with us, in accordance with the General Data Protection Regulation (GDPR).
4. How do we process your personal data?
Brixham Baptist Church complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data. We are required under data protection legislation to notify you of the information contained in this privacy notice.
5. We use your personal data for the following purposes: -
To enable us to provide a voluntary service for the benefit of the public in a particular geographical area as specified in our constitution;
To administer membership records and the support we offer;
To fundraise and promote the interests of the charity;
To manage our employees and volunteers;
To personalise our communication
To engage with the local community
To maintain our own accounts and records (including the processing of gift aid applications);
To inform you of news, events, activities and services running at Brixham Baptist Church;
Where we need to comply with a legal obligation.
Where it is necessary for our legitimate interests (or those of a third party) and your interests or fundamental rights and freedoms do not override those interests.
Where it is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.
We may also use your personal information in the following situations, which are likely to be rare: where we need to protect your interests or someone else’s interests or where it is needed in the public interests
6. If you fail to provide personal information
If you fail to provide certain information, we may not be able to pursue our legitimate interests, provide the activities, support and services required, be able to communicate with you or take the steps to enable the support and services to be offered or we may be prevented from complying with our legal obligations.
7. Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis or legitimate interest which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law or our legitimate interests and where your interests and fundamental rights or freedoms do not override those interests.
8. What is the legal basis for processing your personal data?
Explicit consent of the data subject (Church and Congregation Members) so that we can keep you informed about news, events, activities and services and keep you informed about church activities.
Processing is necessary for carrying out legal obligations in relation to Gift Aid or under employment, social security or social protection law, or a collective agreement;
Processing is carried out by a not-for-profit body with a political, philosophical, religious or trade union aim provided: -
the processing relates only to members or former members (or those who have regular contact with it in connection with those purposes); and
there is no disclosure to a third party without consent.
9. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with other members of the church in order to carry out a service to other church members or for purposes connected with the church. We will only share your data with third parties outside of the church with your consent. We require third parties to respect the security of your data and to treat it in accordance with the law.
10. How long do we keep your personal data?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will keep your personal data for as long as you are in regular contact with us. We will review this regularly and, except for the matters of gift aid stated below, we will remove your data 2 years after any contact has ceased.
Specifically, we retain gift aid declarations and associated paperwork for up to 6 years after the calendar year to which they relate and marriage registers permanently.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
11. Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: -
The right to request a copy of your personal data which the Brixham Baptist Church holds about you;
The right to request that Brixham Baptist Church corrects any personal data if it is found to be inaccurate or out of date;
The right to request your personal data is erased where it is no longer necessary for the Brixham Baptist Church to retain such data;
The right to withdraw your consent to the processing at any time
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to lodge a complaint with the Information Commissioners Office.
12. No fee usually required
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
13. Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
14. Data security
Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those members of the church who have a genuine need to know.
They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
15. Contact Details
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
To exercise all relevant rights, queries of complaints please in the first instance contact the
Acting Church Secretary, Brixham Baptist Church,
Market Street, Brixham, TQ5 8EU.
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.