Data Protection Policy (Under English Law)

1. Introduction

This Data Protection Policy explains how All Saints’ Church, Cottenham with Rampton handles personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are committed to respecting your privacy and ensuring that any personal data collected is processed lawfully, fairly, and transparently.

2. What Data We Collect

We may collect the following types of personal data:

• Contact details (e.g., name, email, phone number) when you communicate with us.
• Membership and volunteer information for those involved in church activities.
• Donation records (if applicable) for financial and gift aid processing.
• Website usage data to help improve our services.

3. Lawful Basis for Processing Data

We process personal data based on one or more of the following legal grounds:

• Consent (when you provide explicit permission).
• Legitimate interests (to fulfill church operations and outreach).
• Legal obligation (for compliance with UK laws, e.g., safeguarding requirements).

4. How We Use Your Data

Your personal data is used only for specific purposes, including:

• Communicating with members and visitors.
• Managing events, services, and pastoral care.
• Processing donations and maintaining financial records.
• Ensuring compliance with safeguarding and legal obligations.

5. Data Security & Retention

We take appropriate security measures to protect your data from unauthorized access, alteration, or loss. Personal data is retained only for as long as necessary, in line with legal and operational requirements.

6. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Restrict or object to data processing.
• Withdraw consent for data processing at any time.

To exercise your rights, please contact [insert contact email].

7. Data Sharing & Third Parties

We do not sell or share personal data with third parties, except when required by law or necessary for church operations (e.g., gift aid processing with HMRC).

8. Updates to This Policy

We may update this policy periodically to reflect changes in legal requirements or church practices. The latest version will always be available on our website.

9. Contact Us

If you have any questions or concerns about our Data Protection Policy please contact us.