Your data and your privacy

Scope

This notice applies to all data subjects. A data subject is a person whose data is processed by Unity Church Orpington. In this notice we refer to a data subject as "a person", "anyone" or "everyone".

Responsibilities

The Unity Church Orpington Trustees/Directors are responsible for making sure everyone sees this notice before Unity Church Orpington collects or processes their personal data.

All employees and volunteers who collect data from people taking part in church ministries must make sure people are aware of this notice and give their consent to their personal data being processed. This can be done using check-boxes on any form where data is collected.

Fair processing notice

Unity Church Orpington will use the personal data collected from you to provide information on our ministries, activities and events, for fundraising, and for pastoral care, now or in the future.

You have given your explicit consent for Unity Church Orpington to use your personal information for these purposes. You can withdraw your consent at any time by emailing admin@unitychurch.uk, and you will be removed from all our contact lists straight away.

We may store your data in a third-party application where this is a secure way of keeping it safe. We will never share your data with a third-party organisation for any other purpose without your express consent.

What is personal data?

The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable living person. That includes anyone who can be identified directly or indirectly, for example by name, an identification number, location data, an online identifier, or factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

GDPR requires consent to be given for all types of personal data, including special categories. Consent must be given explicitly. When Unity Church Orpington asks for sensitive data, we must explain why we need it and how it will be used.

Why we collect and store personal data

We are committed to making sure all personal information we collect and process is appropriate for its stated purpose and does not invade your privacy. In some circumstances we may need to share your personal data with a third-party service provider as part of our pastoral ministry. We will make sure they hold it securely, use it only for the service concerned, and dispose of it according to our procedures when it's no longer needed. We will never share your personal data with third parties without your consent, unless the law requires us to.

How we use your information

We will process your data (collect, store and use it) in line with GDPR at all times. We will keep it up to date and accurate, and we won't keep it for longer than we need to. In some cases the law sets how long we must keep data; otherwise we use our discretion, and never keep personal data beyond our normal requirements.

We will never be intrusive, and we won't ask for data that is irrelevant or unnecessary. We take strict measures to keep the risk of unauthorised access to, or disclosure of, your personal data as low as possible.

We generally only hold your personal details to keep you informed of our ministries, activities and events. Occasionally we may need to hold other details for a specific purpose, and we'll tell you why and to what extent. You have a legal right to see the personal data we hold about you. To ask for it, contact us for a Subject Access Request form. Our full Privacy Policy (Fair Processing Policy) is available on request.

Data Protection Officer

Neil Maltman, as Chair of Trustees, is our Data Protection Officer, registered with the ICO. Please send any questions to neil@unitychurch.uk.