Wellington Baptist Church Privacy Policy - Wellington Baptist Church

Here at Wellington Baptist Church we take your privacy seriously. This statement sets out how we will deal with any personal information we collect from you or that you provide to us.

Who are we?

Wellington Baptist Church will collect and deal with your personal information in accordance with the General Data Protection Regulations. The Trustees of Wellington Baptist Church is the Data Controller of the personal data we hold about you; this means we decide how your personal data is processed and for what purposes. The church Data Protection Officer is currently The Trustees of Wellington Baptist Church.

How we collect personal information

We collect personal information directly from you. We may also collect information from others about you from time to time including from other members and friends of the church or your previous church.

What information might we collect from you?

We may collect and process the following information about you:

Your contact details – title, name, address, telephone number and email address.
Your attendance at church and participation in rotas for service in the church.
Information contained in emails or other correspondence from you and records of telephone calls or meetings with you.
Your church membership status.
Details of money that you give to the church, your bank details and gift aid declarations.
Information contained in checks provided by the Disclosure & Barring Service.
Information that you share with us for the purposes of pastoral care, encouragement, training and prayer.
Video surveillance information via the CCTV system installed on-site.
Your image captured as part of the live-streaming of our services.

Special Category Data

The Data Protection Act recognises some information as Special Category Data. This includes, but is not limited to, information which reveals your religious beliefs, health issues, race or ethnic origin. We will always treat any sensitive personal data we process with the greatest care and in accordance with Data Protection Regulation.

In-service live streaming

> We are collecting your personal information for the purpose of live-streaming services from our church, via YouTube, to reach out to those who are unable to attend in person, or who wish to participate in our services remotely.

The categories of personal data we collect are as follows:

We may capture your image whilst filming the church service;
By taking part in the service this may indicate your religious belief and this will be treated as special category data.

You may avoid your image being captured whilst services are being live-streamed by sitting in a film-free area of the church. Such areas will be clearly marked by notices in the church and it is your responsibility to sit in the right place.

How may we use your personal information?

Personal information that we collect may be used by us in a number of ways:

To maintain our lists of church members, regular attenders and friends, including on Churchbuilder.
To provide pastoral care and support for members and others connected with our church.
To help us provide services to the community including children’s and youth groups and the Warm Place, and otherwise engage with our community.
To help us organise rotas and groups and to communicate with you, ensuring the smooth running of the church.
To recruit, support and manage staff, contractors and volunteers.
To enable us to maintain appropriate safeguarding arrangements for our children, young people and vulnerable adults.
To tell you about events that the church or other relevant churches or organisations are running which we think may be of interest to you.
To maintain our accounts, financial and other records.
To maintain the security of our property and premises and to prevent and detect crime (for example the use of CCTV on our premises) .
To rent out our residential premises, and license or hire out rooms within our existing church premises, and the management and maintenance of all our premises;
To respond effectively to enquirers and to properly handle any complaints.
Exceptionally, to deal with church discipline in accordance with the church’s constitution.

What is the legal basis for processing your personal data?

All personal data which we collect must be fairly and lawfully processed. Data protection legislation allows us to process most of the information we hold as we regard it as being in the church’s legitimate interest.

All personal data which we collect must be fairly and lawfully processed. Personal data may be processed in accordance with any of the following conditions:

With your explicit consent. Where this is necessary, we have sought your consent.
If it is in the legitimate interests of the church, provided that this is not unwarranted by reason of prejudice to your rights and freedoms or legitimate interests. Most of the personal information we hold is permitted under this condition.
Where processing is necessary for carrying out obligations under contract between you and the church (for example in the case of employment).
Where necessary for the church to meet its legal obligations.
Where necessary to protect your vital interests.

Sharing your personal data

Your personal data will be treated as strictly confidential and will only be shared with other members, regular attendees and friends of the church appropriately for purposes connected with the church. For example,

your personal data uploaded to Churchbuilder (as summarised above) to assist us with arranging church rotas and help with the smooth running of the church, is accessible by all church members and regular attendees.
your financial and gift aid information is password protected and is only accessed by me as Pastor and the member(s) of the Church’s designated Finance Team responsible for processing gift aid declarations.
sensitive personal data, to the extent it is in hard copy form, is stored in locked cabinets within the church office.

We will share your data with third parties outside of Wellington Baptist Church only when we have a legal basis to do so. For example, our use of Churchbuilder in the life of the church as summarised above. We have entered into an agreement with the developer of Churchbuilder: Concordant Systems Limited, in which it confirms it in turn complies with the General Data Protection Regulations.

Your data may from time to time be transferred outside the EU, for example through use by the Church leadership team of a password protected Dropbox facility. We will only do so where permitted by the General Data Protection Regulations.

We will take all reasonable and necessary steps to ensure that your data is treated securely and in accordance with this privacy statement.

How long do we keep your personal data?

We will store your personal information for no longer than is reasonably necessary. For example:

In terms of your contact details, we keep this information whilst you are attending the church and for a period of 6 months after have ceased to be a member and you have stopped attending church (unless you ask for such information to be deleted more quickly after leaving).
Church financial records, gift aid declarations and all associated documentation is retained for a period of 7 years after the calendar year to which the data relates.
Church general meeting and trustee minutes are kept for a period of 10 years.
Church records for baptisms, marriages and funerals are retained permanently.

Your rights regarding your personal data

The rights you have with respect to your personal data include:

The right to be informed about the collection and use of your personal data – as detailed in this Privacy Notice.
The right of access to a copy of the personal data we hold about you.
The right to require that we correct any personal information if it is found to be inaccurate.
The right to request that your personal data is erased from our records.
Where your personal data is being processed with your consent, the right to withdraw your consent at any time without detriment.
The right to complain to the Information Commissioner’s Office (ICO) if you believe that the church has not handled your personal data in accordance with data protection law.

Contact Details

To exercise all relevant rights, queries or complaints please contact the church Data Protection Officer through the church office or by emailing dataprotectionofficer@wbchurch.biz.