DATA PRIVACY NOTICE This is the privacy notice of All Saints Church, Hartford. In this document, "we", "our", or "us" refer to the PCC at All Saints Church, Church Lane, Hartford, a registered charity. Introduction This privacy notice aims to inform you about how we collect and process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information. It tells you about your privacy rights and how the law protects you. We are committed to protecting your privacy and the confidentiality of your personal information. Our policy is not just an exercise in complying with the law, but a continuation of our respect for you and your personal information. We undertake to preserve the confidentiality of all information you provide to us, and hope that you reciprocate. Our policy complies with UK law accordingly implemented, including that required by the EU General Data Protection Regulation (GDPR). The law requires us to tell you about your rights and our obligations to you in regards to the processing and control of your personal data. We do this now, by requesting that you read the information provided at http://www.knowyourprivacyrights.org Except as set out below, we do not share, or sell, or disclose to a third party, any information collected through our website. Your personal data – what is it? Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”). Who are we? All Saints Church Hartford PCC is the data controller (contact details pcc@allsainsthartford.org.uk). This means it decides how your personal data is processed and for what purposes. How do we process your personal data? All Saints Church Hartford complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data. We use your personal data for the following purposes: - For members of the clergy – To provide pastoral care to my parishioners For PCCs – To enable us to provide a voluntary service for the benefit of the public in a particular geographical area as specified in our constitution To administer membership records To fundraise and promote the interests of the charity To manage our employees and volunteers To maintain our own accounts and records To operate the All Saints Church Hartford web site and deliver the services that individuals have requested To inform individuals of news, events, activities or services running at All Saints Church Hartford To share your contact details with the diocesan office so they can keep you informed about news, events, activities and services that will be occurring in the diocese and which are relevant to the role you are undertaking. To process gift aid applications. To contact individuals via surveys to conduct research about their opinions of current services or of potential new services that may be offered. Website usage. Cookies. We use Google Analytics to give us statistics about website visitors, for our interest. Google Analytics stores cookies on your device. If you do not wish to have this information tracked you can install the Google Analytics Opt-out Browser Add-on that prevents data being tracked by Google. You can obtain the add on from the link below. https://tools.google.com/dlpage/gaoptout With the exception of the Google Analytics cookies, we do not use cookies on the website. Website contact form. We use a contact form to allow you to contact us. We use the information provided by you to contact you and answer your query. We do not use the information provided for any other purpose. If you are uncomfortable providing any personal data on the form, use an alternative contact method. The contact form includes a checkbox that must be selected requesting your permission to use the data you have provided. Data provided is deleted after 60 days. Room Bookings. We store room booking data on Google Calendar. There is a public facing calendar which has the detail anonymised so that only usage of the facilities is known. We also store the contact details Name, address, phone number and email address of people whom hire the facilities, so that we can carry out invoicing. The data is held in a spreadsheet and is not accessible to anyone except the bookings administrators. If you wish to see what data is held, please email pcc@allsaintshartford.org.uk. Weekly sheet recipients. There is a list of people who receive a copy of the Weekly Sheet by email. This list of email addresses is maintained by the site administrator. If you wish to be removed from the list, please send an email to admin@allsaintshartford.org.uk. If you have a query regarding data privacy policy, please email pcc@allsaintshartford.org.uk.