Privacy Policy

2. Who is the data controller?

360Life Church, Stockport, is the data controller (contact details below) and determines the purposes and means of processing personal data.

3. What data do we collect?

The personal information that we collect depends on the context of your interactions with us. The personal information we collect may include the following:

• Contact information: Name, address, phone number, email.
• Demographic details: age, gender, marital status, family relationships.
• Communication preferences.
• Attendance records: Services, training, classes, events and groups attended.
• Register of major life events and religious ceremonies: Births, deaths, marriages, baptisms.
• Financial information: Donation records, Gift Aid declarations, masked payment details.
• Pastoral Care information: health information, allergies, religious beliefs.
• Volunteer information: Roles, skills, qualifications, availability, preferences.
• Emergency Contact information.

Some categories of data above may only be collected specifically for children to ensure their well-being during church activities and events, for example, emergency contact information and allergies.

4. How do we collect personal data?

We collect your data only when you provide it to us voluntarily. Any data we acquire will be verified, and we will seek your explicit consent for its use. If your consent is not given, the data will be deleted.

Any data we collect on children and young people will only be gathered and retained with the explicit consent of their parents or guardians.

5. How do we use personal data?

We use your data for various purposes related to the operation and mission of 360Life Church, including to:

• Provide pastoral care, including prayer groups.
• Ensure your safety and well-being.
• Facilitate groups, gatherings, training and events.
• Administer membership records.
• Maintain a register of major life events and religious ceremonies.
• Manage our employees and volunteers.
• Carry out DBS checks in accordance with our Safeguarding Policy.
• Maintain our financial accounts and records, including processing Gift Aid applications and managing donations.
• Provide cards and gifts.
• Inform you of our news, events, activities and services.
• Deliver services that individuals have requested.

6. How we secure your data

We take the security of your data seriously. Here are the key measures we have in place:

• Access Control: Access to your data is restricted to authorised personnel only. We use password protection to secure our systems and computers.
• Encryption: Where it’s possible, we use encryption to safeguard your information during storage and transmission.
• Regular Review: We regularly review and update our security measures to ensure your data remains protected.

If you have any questions about how we protect your data, please contact our Data Protection Coordinator.

7. What is the legal basis for processing your data?

Most of our data processing is based on your explicit consent. This allows us to use your data to facilitate the services we offer. Additionally, we rely on the following legal bases under the GDPR:

• Explicit Consent: You have given us explicit consent to process your data.
• Legal Obligations: Processing is necessary to fulfil our legal obligations.
• Legitimate Interests: As a charity with religious aims, sometimes we need to hold and process data related to our members and former members.

8. Data sharing

We respect your privacy and are committed to protecting your personal data. We will only share your data with third parties when it is necessary to provide our services or fulfil our legal obligations. The circumstances under which we may share your data include:

• Service Providers: We may share your data with third-party service providers who assist us in various functions, such as IT support, cloud storage, email communication services, and payment processing. These providers are bound by confidentiality agreements and data protection requirements that comply with GDPR standards. These Data Processors are outlined below.
• Legal and Regulatory Requirements: We may disclose your data to comply with applicable laws, regulations, and legal processes. This includes sharing information with law enforcement agencies, regulatory bodies, or other governmental authorities when required. For example, we share donor information with HMRC for Gift Aid claims to comply with tax regulations.
• Partner Organizations: We may share data with affiliated churches, religious organisations, and partner charities to facilitate joint events, activities, or initiatives. Such sharing is done following data protection principles and with your explicit consent where necessary.
• Consent: We will share your data with third parties when you have given us explicit consent to do so, for specific purposes.

We do not sell, trade, or otherwise transfer your personal data to outside parties without your consent, except as outlined above.

9. Data processors.

A data processor is an organisation that is given the ability to process personal data on our behalf as the data controller. Below is a list of the key data processors we use and how we use them:

10. How long do we keep your data?

We retain your data for as long as necessary to fulfil the purposes for which it was collected.

• We will retain your data if you are connected to 360Life Church. This could be through active membership, participation in church activities, or communication with the church community.
• Data on attendance records, major life events and religious ceremonies may be retained for historical, statistical and archival purposes and will be anonymised where possible.
• Donation records, Gift Aid declarations, financial information and associated paperwork are kept for up to 6 years after the tax year to which they relate, following HMRC regulations

We regularly review our data retention practices ensuring that personal data is securely deleted or anonymised when it is no longer needed for specified purposes or when you request its removal.

11. Further processing

We will inform you if we intend to use your data for a purpose not covered by this Data Privacy Notice. We will issue a notice before commencing the processing of your data for this new purpose. The notice will outline any new purposes and processing conditions. Whenever necessary, we will seek your consent before processing your data for any new purpose.

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal data.
• Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to fix information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.
• Your right to complain - If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the bottom of this privacy notice. If you remain unhappy with how we’ve used your data after making a complaint with us, you can also complain to the ICO.

You can also contact the Information Commissioner's Office (ICO) for further assistance:

Telephone: 0303 123 1113

Website

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

You can download a copy of this privacy notice in pdf format.