Bethel All Saints Apostolic Church Privacy Policy

 

Purpose

It is our aim that we are able to support members of our church and those who may visit with pastoral care. To do this effectively it may mean that we collect information from you to enable us as a church to keep in touch with you. Data Protection legislation allows us to process this information as we regard it as being in the churches legitimate interest. This policy provides information on the types of data we may collect and informs you how it will be stored. Further, it highlights how you can request to see any information we hold about you.

 

General Principles

Your privacy is important to us at Bethel All Saints Apostolic Church (BASAC). Under Data Protection legislation, we need to let you know how we care for your information.

 

Data Stored About You

Your name, contact details and other information you provide to us may be stored electronically or securely in paper form, this will enable us to provide adequate pastoral support to you and your family. Moreover, we may also record information about you which may be regarded as sensitive. All information will be stored securely, either electronically with password protection (encryption), or in locked drawers/cabinets. This information will NOT be disclosed to anyone else without your consent, except as required by Law.

​

Your name and contact details will be entered into our church membership database which is stored electronically and accessible only by authorised users.  Your contact details will be removed from our membership database, 24 months after our last contact with you, when you inform us that you are no longer a member of our church. You have ongoing access to your own membership record and this request must be received in writing and sent to the Data Protection Officer via email bethelallsaints@gmail.com.

The Data Protection Officer will then provide this information to you within 14 days from the date of request.

 

Personal data relating to you is stored in line with our GDPR Data Protection Policy. In accordance with the GDPR, we do not store personal data indefinitely; data is only stored for as long as is necessary to complete the task for which it was originally collected. For further information about this, please refer to the GDPR Data Protection Policy.

​

Requesting Your Information

You have the right to request for information that is stored about you to be removed and again this request must be received in writing and sent to the Data Protection Officer (named above). Please note, there may be occasions where your request for removal may not be able to be actioned. Full details of the reasons why we cannot remove the information will be provided to you by the Data Protection Officer.

​

Enhanced DBS Checks

If you are appointed or ordained within our church, you will also have to complete an enhanced DBS check through our umbrella company thirtyone:eight. In cases like this, we will request further information about you, such as your address (or previous addresses up to 5 years) DOB, any criminal convictions that may be pending or in your name, your passport/driving/bank statements/license as proof of identity, or any other information that is relevant. This information will be stored securely, and although we do not keep paper copies of your proof of address/identity, we will need to see this and may take details from each one as proof for our records. For further information about the DBS process, please refer to that policy.

​

Information Sharing

We will not share your data with third parties without your consent, except as you might reasonably expect or when legally required to do so, for example; if safeguarding concerns have been raised. There may be instances where information we store about you is shared with district or national leads, you will be required to sign our information sharing form, unless there is a legal/ legitimate reason that we need to share this information. For more information about information sharing, please refer to that policy.

                                                                                            

Your Rights Under GDPR

Under Data Protection legislation, you have the right to request access to information about you that we hold.

You also have the right to:

• Object to processing of personal data that is likely to cause, or is causing, damage or distress

• Prevent processing for the purpose of direct marketing

• Object to decisions being taken by automated means

• In certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed

• Claim compensation for damages caused by a breach of the Data Protection regulations

 

Employees

If our church employs you in any capacity, we will collect the following personal information - your name, telephone number, address, email address and bank account details and any other information required by Law.  The personal data you provide in your application and as part of the recruitment process will only be held and processed for the purpose of selection processes and in connection with any subsequent employment or placement, unless otherwise indicated. Your data will be retained only for as long as is permitted by UK legislation and then destroyed.

​

Raising

If you have any questions or queries that you would like to raise about this policy, please contact,

the Data Protection Officer via email bethelallsaints@gmail.com 

​

Raising Concerns

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance and if these issues have not been rectified you have a right to contact the Information Commissioner’s Office directly at https://ico.org.uk/concerns