Privacy and Cookie Policy

Website-specific Privacy Notice

Intent

The information you provide is intended to be used in the context of the website and the activities New Street Church undertakes, and it’s not intended to be used outside that context.

Information collected

Where a registration and login facility is available, your details will be recorded and used to identify you in order to provide appropriate access to resources.

Other data may also be recorded (comments, contact information), which will be used in the context of the associated application.

The Internet works by sending information between servers and clients (eg browsers) identified with ‘IP Addresses’. The IP addresses are logged together with time, page requested and browser type as part of the site’s normal operation, and are used to record general activity on the site. No direct personal information is stored.

Cookies

Cookies are small pieces of data that are used internally by the web application software to maintain sessions and in some cases to associate users with preferences on the site. Most browsers have the ability to report, block, or remove cookies, if you wish, though this can affect your experience of the site.

Webforms

People provide information when signing up for different activities at New Street Church, eg the Alpha course. We keep this information on the site for a limited period, and send it to the people managing the activity.

Location

All data is stored in the UK (except for as mentioned in Google Analytics below, and email list subscription and management information – which is stored in the US).

Google Analytics

The website uses Google Analytics to determine how the site is used. Here is Google’s description of the privacy aspect of that:

“This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.”


1. Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the GDPR).

2. Who are we?

The Board of Trustees of New Street Church is the data controller. This means it decides how your personal data is processed and for what purposes.

New Street Church is also affiliated to the Diocese of Truro

3. How do we process your personal data?

The Board of Trustees of New Street Church complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

We use your personal data for the following purposes: –

4. What is the lawful basis for processing your personal data?

5. Sharing your personal data

Your personal data will be treated as strictly confidential and will only be shared with other members of the church in order to carry out a service to other church members or for purposes connected with the church.

We will only share your data with third parties outside of the parish in accordance with one or other of the lawful bases stated in 4. above

6. How long do we keep your personal data?

We keep data in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website 1.
Specifically, we retain electoral roll data for a minimum of three years or while it is still current; gift aid declarations and associated paperwork for up to 6 years after the calendar year to which they relate; and parish registers (baptisms, marriages, funerals) permanently.

7. Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

8. Further processing

If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

9. Contact Details

To exercise all relevant rights, queries of complaints please in the first instance contact the New Street Church at hello@newstreetchurch.org
You can contact the Information Commissioners Office on 0303 123 1113 or via email
or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

1 Details about retention periods can currently be found in the Record Management Guides located on the Church of England website at: https://www.churchofengland.org/more/libraries-and-archives/records-management-guides

This policy applies from 20th December 2018.