Privacy Policy and Data Protection

In accordance with the General Data Protection Regulations (GDPR), we have implemented this privacy notice to inform you of the types of data that we process about you. We also include within this notice the reasons for processing your data, the lawful basis that permits us to process it, how long we keep your data for and your rights regarding your data.

Data Protection Principles

Under GDPR, all personal data obtained and held by us must be processed according to a set of core principles. In accordance with these principles, we will ensure that:

1. processing is fair, lawful and transparent
2. data is collected for specific, explicit, and legitimate purposes
3. data collected is adequate, relevant and limited to what is necessary for the purposes of processing
4. data is kept accurate and up to date. Data which is found to be inaccurate will be rectified or erased without delay
5. data is not kept for longer than is necessary for its given purpose
6. data is processed in a manner that ensures appropriate security of personal data including protection against unauthorised or unlawful processing, accidental loss, destruction or damage by using appropriate technical or organisation measures
7. we comply with the relevant GDPR procedures for international transferring of personal data

Your personal data – what is it?

“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, email address, or address). Identification can be by the information alone or in conjunction with any other information.

This privacy notice is provided by Church Service Planner (a website created and run by Jack Barber Limited), which is the data controller for your data. In the rest of this notice “we” refers to Church Service Planner.

Your privacy is important to us and we are committed to safeguarding the privacy of your information.

Types of Data Held

We keep several categories of personal data in order to carry out effective and efficient processes.

The categories of information that we collect, hold and share include:

• Personal details such as name, titles, aliases, photographs;
• Contact details such as telephone numbers, addresses, and email addresses;

Why are we collecting your data?

The law on data protection allows us to process your data for certain reasons only. We collect and store limited personal data in order to provide an efficient church service booking facility for churches.

How do we process your personal data?

We, as the data controllers, will comply with the legal obligations to keep personal data up to date; to store and destroy it securely; to not collect or retain excessive amounts of data; to keep personal data secure, and to protect personal data from loss, misuse, unauthorised access and disclosure and to ensure that appropriate technical measures are in place to protect personal data.

Storing your data

We hold your data for varying lengths of time depending on the type of information in question but in doing so we always comply with Data Protection legislation.

Who do we share your information with?

We will not share your information with third parties without your consent unless the law requires us to do so. Your personal data will be treated as strictly confidential. It will only be shared with third parties where it is necessary for the performance of our tasks or where you first give us your prior consent. It is likely that we will need to share your data with some or all of the following (but only where necessary):

• Internally: Your data will be stored on our secure server and only accessed when neccessary in order to validate the correct functioning of our systems or to answer a specific query from one of the churches using our website.
  
• Legal compliance: We are legally obliged to share some information to adhere to UK law. For example, as we are a registered charity, we must submit our accounts, which need to be audited by a third part accountant. We must also fulfil our legal requirements for safeguarding, for which it may be necessary to share your information with law enforcement entities.
• Approved 3rd Parties: When we use the term 3rd party, we mean systems or organisations that are necessary for Church Service Planner to function. We will carefully vet these before use to ensure they will in turn keep personal data secure in line with the law. We do not give, sell, trade or share any of your personal data to organisations that we think may be of interest to you, ever.

Examples of our approved 3rd parties are:

• Partner Churches: We will make your information available to the church that you
  

Your details will never be shared with anyone outside of Church Service Planner and the churches you interact with via our website (such as when you book seats at a service or meeting) without your express advance permission, except in certain limited situations, such as where we are required to do so by law or to protect members of the public from serious harm.

Requesting access to your personal data

Under Data Protection legislation, you have the right to request access to information about you that we hold. To make a request for your personal information contact our Operations Director.

You also have the right to:

• object to processing of personal data that is likely to cause, or is causing, damage or distress
• prevent processing for the purpose of direct marketing
• object to decisions being taken by automated means
• in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
• claim compensation for damages caused by a breach of the Data Protection regulations.

Where you have provided consent to our use of your data, you also have the right to withdraw that consent at any time. This means that we will stop processing your data.

For further information on how your information is used, how we maintain the security of your information and your rights to access information we hold on you please contact the Operations Director.

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/

Contact:
If you would like to discuss anything in this privacy notice, please contact:

Jack Barber
Director
jack@churchserviceplanner.co.uk