Introduction

Garden City Vineyard, Milton Keynes (“the Church”) recognises the right of people to keep their personal information private. This policy covers personally identifiable information you provide and information we collect or hold, including through your use of this website.

If you disagree with any part of this policy, please do not provide personal information or use our website.

Data protection

This policy explains how the Church and website comply with the Data Protection Act, UK GDPR and the Privacy and Electronic Communications Regulations. Where you provide personal details, we may contact you by post, email, telephone, text or messaging services in connection with our charitable purposes, based on your consent or our legitimate interests.

How we collect information

We collect personal information each time you are in contact with us, including when you:

• Visit our website or register with MyChurchSuite.
• Register your details or your family details, including for Garden City Kids or Youth.
• Give contact details to staff or volunteers, in writing or orally.
• Purchase goods or services or make payments through a service provider.
• Attend church activities, training or events.
• Communicate with the Church by email, letter, telephone, social media or face-to-face meetings.

The Church does not hold debit or credit-card details for online donations or payments. Card payments are handled by service providers that encrypt card information.

How we use your information

We use personal information for the purpose disclosed at collection or as set out in this policy. This includes:

• Keeping you informed about services, activities, resources, conferences, prayer requests, news and encouragement.
• Providing pastoral care and support to you and your family.
• Maintaining records of church involvement, serving rotas, events attended, donations and requested products or services.
• Responding to enquiries, requests for information and complaints.
• Registering you or family members for activities, events and conferences.
• Improving our services and ability to support church attendees and the wider community.

Who sees your information

Information may be held in ChurchSuite and accessed by authorised Church staff, volunteers and service providers acting on our behalf. We do not sell personal information.

Where information is shared with a service provider, restrictions are placed on its use and it must be stored securely and retained only as necessary. Sensitive personal information, including health information provided for pastoral support, is kept confidential unless disclosure is required by law.

Keeping data up to date and your access rights

Please tell us when your details change. You may change your contact preferences or unsubscribe from regular communications at any time. MyChurchSuite users can update their own contact details.

You can request access to information held about you, ask for inaccurate data to be corrected, and ask for information to be deleted where practicable. We normally respond to access requests within one month. We may refuse a request where legally permitted and will explain the reason.

Security and retention

We take reasonable steps to protect personal information and keep it accurate. Electronic information is stored on secure servers or in secure files. Internet transmission is not completely secure, so we cannot guarantee the security of information sent over the Internet.

Information is retained for a reasonable period or as long as the law requires or permits.

Data breaches

A data breach is an incident that may compromise the confidentiality, integrity or availability of systems or data. Examples include loss or theft of equipment or records, unauthorised access or disclosure, website defacement and hacking.

The Privacy Officer will investigate suspected breaches, determine corrective action and notify the Information Commissioner’s Office and affected individuals where required. A record of breaches will be maintained.

Cookies, links and social media

Cookies may be used to support login, monitor traffic and personalise content. You can configure your browser to reject cookies, although some site features may not work correctly. Read our Cookies Policy.

The website may contain links and embedded content from third-party services such as YouTube, Vimeo or analytics providers. Their own privacy and cookie policies apply. Use social-media sharing tools at your own risk and verify that social-media accounts are authentic before providing information.

Your individual rights

• The right to be informed.
• The right of access.
• The right to rectification.
• The right to erasure.
• The right to restrict processing.
  
• The right to data portability.
  
• The right to object.
  
• Rights relating to automated decision-making and profiling.
  

For more information, visit the Information Commissioner’s Office.

Changes to this policy

We may amend this policy to reflect legal or operational changes. The current version will be available on this website.

Contact details