top of page

Privacy Statement

 

 

Barlestone Baptist Church Privacy Statement

 

 

Barlestone Baptist Church (BBC) is committed to protecting personal data and respecting the rights of our members, congregation and visitors; the people whose personal data we collect and use. We value the personal information entrusted to us and we respect that trust, by complying with all relevant laws, and adopting good practice. Our data controller is Aimie. You can contact her at barlestonebaptistchurch@outlook.com or contact the Barlestone Baptist Church Pastor at pastorbarlbc@gmail.com or by calling 07970 590678.

What personal data is held and why?

BBC holds the following personal data for the reasons given:

Contact Details for:

Members and regular attenders:

  • Pastoral (telephoning, emailing and visiting etc.),

  • Administrative (distributing rotas and information related to events and activities within or directly connected with BBC, managing giving and Gift Aid etc.), and

  • Safeguarding purposes.

  • Other church users:

  • communication & administration.

  • health & safety (e.g. health related information about children

  • Contact Details only for running of that event.

Other people: (e.g. suppliers, expense claimants, use of building forms etc.):

  • Any or all of the following:  Contact details, bank account, etc. - for communication and administration.

BBC Directory

BBC also distributes a paper copy list of members and regular attenders to members. Only those who give consent for their details to be included on the list, will be on the list; and the list will only be given to members. Those who receive the list will be asked to keep the list secure and not disclose it to others. However, BBC has no jurisdiction over this list and cannot guarantee it will be kept secure.

How will the data be used?

Personal data of each of the above will only be used for the purposes as listed above. No data will be passed on to others for any other purposes without the permission of the person concerned.

What is the ‘legal basis’ for processing data?

BBC may hold personal data under any combination of the following legal basis:

  1. the processing is necessary for a contract with the data subject, e.g. employment contracts or when entering into contracts with suppliers;

  2.  the processing is necessary for us to comply with a legal obligation;

  3. the processing is necessary for legitimate interests pursued by BBC, unless these are overridden by the interests, rights and freedoms of the data subject.

  4. If none of the other legal conditions apply, the processing will only be lawful if the data subject has given their clear consent.

The right to access and update personal data (Parents please note you also have these rights over the data of your children if they are under 16).

Anyone whose personal data (the ‘data subject’) is held by BBC has the right to know that their data is being processed and to know what data is held about them. Requests must be confirmed in writing. BBC will endeavour to respond to the request as quickly as possible, and at the latest within one month of receipt. You have the right to update and correct any data we hold on you. To do so, please contact us.

The right to obtain erasure of personal data

The ‘data subject’ also has the right to obtain the erasure of personal data where:

a) the personal data is no longer required for the purposes for which they were collected, or

b) consent is withdrawn and there is no other ground for processing, or

c) the original reason was ‘legitimate interest’ and the data subject requests erasure.

How long will your data be kept by us?

If you are a member and decide to leave BBC we will delete your personal information within six months of you leaving (except where it relates to Safeguarding), but if you want it deleted sooner then do get in touch. You can view the full BBC Data Retention Schedule here.

Data Security

We will use appropriate measures to keep personal data secure at all points of the processing. Keeping data secure includes protecting it from unauthorised or unlawful processing, or from accidental loss, destruction or damage. Note that BBC cannot guarantee the security of the data of those members who consent for their details to be included in the BBC Directory. The list will only be given church members.

 

Data Breach

A ‘personal data breach’ is broadly defined as a security incident that has affected the confidentiality, integrity or availability of personal data. If a potential personal data breach is detected it will be investigated and reported. Note that if data in the BBC Directory is passed on to others, it does not constitute a ‘data breach’. If a ‘data breach’ occurs, BBC will establish if the risk to individual’s rights and freedoms is likely and severe (see www.ico.org.uk – Personal Data Breaches for more information). If the risk is deemed to be likely and severe then the ICO will be notified within 72hrs. If not, the justification for not reporting it will be documented.

Complaints

You have the right to lodge a complaint with the Information Commissioner’s Office if you think we’ve done something wrong with your personal data. You can view BBC’s full set of Data Protection Arrangements here.

BBC Privacy Statement – Version 1.1. Date of issue: Feb 2024

bottom of page