Grace Church Wolverhampton (GCW)
Privacy Policy
1. Scope
This notice applies to all persons whose data is processed by GCW.
2. Responsibilities
GCW is responsible for ensuring that all potential data subjects have sight of this notice prior to the collection and/or processing of their personal data by GCW.
All employees of GCW who interact with data subjects are also required to ensure that this notice is brought to the attention of all data subjects, securing their consent for the processing of their personal data.
3. Fair Processing Notice
GCW will use the personal data collected from you for the following purposes:
· to keep you informed and up-to-date with what is happening in the life of the church;
· to provide the Wolverhampton Church Shelter Service to you;
· to answer a query, to register your interest in participating in an event, or in volunteering (for the Wolverhampton Church Shelter) to make donations or any similar feature that would require the collection of personal information.
· to send information which we think may be of interest to you by email or similar technology.
GCW does not and will not under any circumstance use your personal data for marketing purposes or fundraising campaigns.
You may withdraw your consent at any time by reading our Right to Withdraw Consent Procedure.
4. What is Personal Data?
The EU’s General Data Protection Regulation (“GDPR”) defines “personal data” as:
“any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
The GDPR classifies certain data as belonging to “special categories”, as follows:
· Racial origin;
· Ethnic origin;
· Political opinions;
· Religious beliefs;
· Membership to a trade-union;
· Genetic data;
· Biometric data;
· Health data;
· Data concerning a natural person's sex life;
· Sexual orientation; and
· Other.
The GDPR requires that consent is provided by the data subject for all types of personal data, including those pertaining to the special categories set out above and otherwise. Consent must be explicitly provided.
When GCW requests sensitive data from data subjects, it is required to confirm why the information is required and how it will be used.
5. Why does GCW need to collect and store personal data?
GCW is committed to ensuring that all personal information collected and processed is appropriate for the stated purpose(s) and shall not constitute an invasion of your privacy. We may share your personal data with third party service providers who are contracted by us and we shall ensure that they will hold your personal data securely and shall use it only in order to fulfill the service for which they are contracted. When there is no longer a service need, or the contract comes to an end, the third party will dispose of all personal data according to our procedures. We will never share your personal data with third parties until we have received your consent, unless we are required do so by law.
6. How GCW uses your information
GCW will process your data (i.e. collect, store and use) according to the requirements of the GDPR at all times and shall endeavor to keep your personal data up-to-date, ensuring its accuracy and will not keep it for longer than it is required. In some situations, there are set legal requirements for the length of time that GCW will retain your personal data but usually GCW will use its discretion, ensuring that personal data is not kept outside of our usual business requirements.
We shall never be intrusive or invasive of your personal privacy and shall not ask you to provide data that is irrelevant or unnecessary and we will enact strict measures and processes to ensure that the risk of unauthorised access or disclosure of your personal data is minimised as much as possible. In the event of a personal data breach, if a high risk to your personal rights and freedoms has been identified you will be notified immediately in accordance with our personal data breach policy.
We will only use your personal data for the following purposes:
· to keep you informed and up-to-date with what is happening in the life of the church;
· to provide the Wolverhampton Church Shelter Service to you;
· to answer a query, to register your interest in participating in an event, or in volunteering (for the Wolverhampton Church Shelter) to make donations or any similar feature that would require the collection of personal information.
· to send information which we think may be of interest to you by email or similar technology.
Please note that we do carry out any form of automated processing or profiling and your information will not be used for any such purpose.
Online Donations
If you decide to make a donation via the website to GCW (or the Wolverhampton Church Shelter which is run by GCW), your personal information will be processed by our third party supplier Stewardship (via www.give.net) on our behalf for the purpose of taking a payment and processing gift aid. Your personal information collected to process your donation is used uniquely for that purpose.
The email address and any other personal information that you submit to Stewardship will not be stored within this website’s own database or in any of our internal computer systems. A copy of Stewardship’s privacy notice can be found here:
https://secure.stewardship.org.uk/ancillary/Privacy.aspx.
7. Your rights
Under GDPR you have the following rights to which we are hereby drawing your attention:
(a) The right to access personal information and/or amend personal data:
(b) The right to withdraw consent;
(c) The right to amend personal data:
(d) The right to request that personal data be permanently deleted;
(e) The right to strict processing; and
(f) The right to raise an official complaint with the relevant authority;
Should you wish to be provided with further information or exercise any of these rights, please contact us using the ‘Contact Us’ form on the website or by emailing This email address is being protected from spambots. You need JavaScript enabled to view it. stating your full name and providing us with sufficient information to verify your identity. Please also help us to respond quickly by indicating why you think we hold Personal Information about you and what information you think we may hold. Sometimes there may be a reason why access will not be possible. If that is the case, you will be told why.
8. How we use cookies
A cookie is a small file, which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.
Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
9. Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information, which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
10. Document owner
The Data Processor is the owner of this policy document and must ensure that it is periodically reviewed according to the review requirements contained herein.
The latest version of this policy document dated 12th September will be made available to all employees and volunteers of GCW by request.
This policy document was approved by GCW’s Board of Trustees and is issued by the Chair of Trustees.
Name of Chair of Trustees: Matthieu Lambert Date: 12th September 2018