Light House symbol

The Light House Church

Portland, UK

Experiencing the Love, Authority and Power of Jesus Christ

The Light House Church

Privacy Policy

General Data Protection

Regulations

1st February 2022 v3

To be reviewed March 2024.

The Light House Church Privacy Policy

Our contact details

Name: Mrs Stephanie Wells

Address: c/o The Portland Community Venue

               Three Yards Close,

               Fortuneswell

               Portland

               Dorset

               DT5 1JN

E-mail: lighthousechurchportland@gmail.com

 

  1. The Light House Church Privacy Policy

(General Data Protection Regulation (GDPR) for The Light House Church.)

The Light House Church recognises and is committed to its responsibilities under the Data Protection Act 1998 in relation to its handling of personal data.

This policy was agreed by the Church Team Leaders on 1st March 2022

This policy will be reviewed by 1st March 2024.

 

  1. Introduction

The Light House Church needs to gather and use certain information about individuals.

These can include suppliers, business contacts, church members and other people the organisation has a relationship with or may need to contact.

This policy describes how this personal data must be collected, handled and stored to meet the organisation’s data protection standards — and to comply with the law.

  1. Why this policy exists

This data protection policy ensures compliance with data protection law and follows good practice

  • Protects the rights of the Pastors, Team Leaders, church members and companies that do contracted work for the church.
  • Is open about how it stores and processes individuals’ data.
  • Protects itself from the risks of a data breach.
  1. Data Protection Law

The Data Protection Act 1998 describes how organisations- including- The Light House Church must collect, handle and store personal information.

These rules apply regardless of whether data is stored electronically, on paper or on other materials.

To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully.

The Data Protection Act is underpinned by eight important principles. These say that personal data must:

  1. Be processed fairly and lawfully
  2. Be obtained only for specific, lawful purposes
  3. Be adequate, relevant and not excessive
  4. Be accurate and kept up to date
  5. Not be held for any longer than necessary
  6. Processed in accordance with the rights of data subjects
  7. Be protected in appropriate ways
  8. Not be transferred outside the European Economic Area (EEA), unless that country or territory also ensures an adequate level of protection
  9. The type of personal information we collect

We currently collect and process the following information:

  • Personal identifiers, contacts and characteristics (for example, name and contact details, home address, email address, phone numbers etc.)
  • Bank details from its members, other churches, organisations and contractors due to any payments or gifts made to, or from, the church.
  1. How we get the personal information and why we have it
  2. Most of the personal information we process is provided to us directly by you for one of the following reasons:
  • For the Pastors, Church Team Leaders or church members to be able to contact a church member, another organisation or contractor.
  • To be able to receive finances and confidential tithe gifts to the church.
  1. We use the information that you have given us in order to:
  2. Contact you to inform you or notify you of events that the church or other organisations are organising.
  3. Contact you to in order to notify you of any cancellations or changes to church services or events.
  4. Enquiring upon your health in times of sickness or absence.
  5. Maintain up to date financial details for church members tithing purposes to the church.

The information in points 1 to 3 could be shared with the appropriate Pastors and Church Team Leaders. Information in point 4 is held in extreme confidence by the Finance Officer for The Light House Church only.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting Mrs Stephanie Wells, contact details at the front of this policy.

(b) We have a contractual obligation.

(c) We have a legal obligation.

(d) We have a vital interest.

(e) We have a legitimate interest.

Personal information could be passed on to a third party, such examples are:

  • The church bank. Banking details when dealing with standing orders for regular giving.
  • The DBS. If an individual is going to work with vunerable adults and young people, details would be passed on for the creation of Disclosure and Barring Service, (DBS), application.
  1. How we store your personal information

Your information is securely stored. The church Lap Top is secured by passwords and a security application. Any hard drive is stored in a secure locked box.

Where data is stored on paper, it should be kept in a secure place where unauthorised people cannot see it.

Data printouts should be shredded and disposed of securely when no longer required.

We keep personal and bank details for two years after somebody leaves the church. We will then dispose of your information by deletion of data from any IT equipment or shredding of paper documents.

 

  1. Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at lighthousechurchportland@gmail.com or write to the address in the front of the policy if you wish to make a request.

  1. How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at The Light House Church, (details at the front of this policy).

You can also complain to the Information Commisions Office if you are unhappy with how we have used your data.

The ICO’s address:            

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk