Bourne Baptist Church Data Privacy Notice
Bourne Baptist Church is committed to respecting your privacy and to complying with data protection and privacy laws.
In the course of our work, we may collect and process personal data about many different people (data subjects). Personal data relates to a living individual who can be identified from that data and is governed by the Genera Data Protection Regulations (GDPR). This includes data we receive straight from the person it is about, for example, where they complete forms or contact us. We may also receive information about data subjects from other sources including, for example, previous employers and personal referees.
Bourne Baptist Church is the data controller (see contact details below). This means that it decides how your personal data is processed and for what purposes.
The reasons Bourne Baptist Church holds and processes personal data are to:
- Maintain our list of church members and regular attendees
- Provide pastoral support for members and others connected with the church
- Provide services to the community, for example toddler groups, youth groups, counselling care etc
- Safeguard children, young people and adults at risk
- Recruit supporting and managing staff and volunteers
- Undertake research e.g. questionnaires
- Maintain our accounts and records
- Promote our activities and services
- Maintain the security of property and premises
- Respond effectively to enquiries and handling any complaints
- Preserve historical/legal documents
Bourne Baptist Church holds personal data in the following ways
- Church computers and storage devices
- Paper copies
- iKnow: third party church administration application, see http://www.iknowchurch.co.uk/privacy-policy
- MailChimp: third party marketing application, see https://mailchimp.com/legal/privacy/
- Website: third party hosting application, see https://www.dreamhost.com/legal/privacy-policy/
Bourne Baptist Church will only share personal data with other organisations or people when we have a legal basis to do so and if we have informed the data subject about the possibility of the data being shared, unless legal exemptions apply to informing data subjects about the sharing. Only authorised and properly instructed staff are allowed to share personal data.
Bourne Baptist Church will keep records of information shared with a third party, which will include recording any exemptions which have been applied, and why they were applied. We will follow the ICO’s statutory Data Sharing Code of Practice (or any replacement code of practice) when sharing personal data with other data controllers. Legal advice will be sought as required.
Bourne Baptist Church will not hold information relating to criminal proceedings or offences or allegations of offences unless there is an overarching safeguarding requirement to process this data for the protection of children and adults who may be put at risk in our church. This processing will only every be carried out on advice from the Ministries Team of the Baptist Union of Great Britain or our Regional Association Safeguarding contact person.
Data subjects (you) have rights and we will process personal data in line with these rights.
Data subjects have the right to:
- Request access to any of their personal data held by us (known as a Subject Access Request);
- Ask to have inaccurate personal data changed;
- Restrict processing, in certain circumstances;
- Object to processing, in certain circumstances, including preventing the use of their data for direct marketing;
- Data portability, which means to receive their data, or some of their data, in a format that can be easily used by Another person (including the data subject themselves) or organisation;
- Not be subject to automated decisions, in certain circumstances; and
- Withdraw consent when we are relying on consent to process their data.
For information on how we store, protect and retain data please see our data protection policy and procedure which is held in folders in the church office and back hall kitchen.
If a colleague receives any request from a data subject that relates or could relate to their data protection rights, this will be forwarded to our Data Protection Lead immediately.
We will act on all valid requests as soon as possible, and at the latest within one calendar month, unless we have reason to, and can lawfully extend the timescale. This can be extended by up to two months in some circumstances.
All data subjects’ rights are provided free of charge.
Any information provided to data subjects will be concise and transparent, using clear and plain language.
If you have any queries about the Bourne Baptist Church’s data protection policy and procedures please contact the Data Protection Lead on firstname.lastname@example.org or write to: Data Protection Lead Bourne Baptist Church, West Street Bourne PE10 9NE. Tel. 01778 424206