Love Church Privacy Policy

We, Love Church, take your privacy very seriously and are committed to safeguarding any personal data that we gather. In processing data, we comply with General Data Protection Regulation (GDPR), taking seriously the right of individuals to keep their personal data private. Love Church are known as the "data controller", which means that we are responsible for how your personal data is processed and for what purposes it is processed.

What is your personal data?

Your personal data is any information by which you may be identified, such as personal information (e.g. name, telephone number, address, email address, gender and date of birth) or any information about you which is gathered by the church (e.g. your involvement in teams, small groups, giving).

What is data processing?

Data processing covers anything we do with or to your data. This includes collecting appropriate amounts of data for legitimate purposes, keeping your data up to date, storing and deleting data securely and not keeping data for any longer than is necessary. Your data will be processed fairly, lawfully and in a transparent manner, and in a way that protects your data from loss, misuse or unauthorised access or disclosure.

We will process your data on the basis of at least one of the following:

Consent – if you give us permission to do so (parental consent is needed for children under 18)

Legitimate interest - in a manner consistent with your degree of involvement with us (e.g. we will contact parents regarding services relevant to their children, volunteers about their serving, the whole church about matters likely to be of relevance to everyone)

Legal contracts – for example an employment contract if you are an employee of Love Church

Legal obligations – for example we are required to hold data relating to Gift Aid and safeguarding

How will we use your data?

If you are simply signing up for something specific (e.g. an event or Gift Aid giving), we will only use your data in relation to this.

If you are signing up to our church database, we will use your data to contact you and to help keep you up to date and connect with any services, groups, teams or activities that may interest you. We will also use your data to provide pastoral care and support, and to keep you up to date with any matters pertaining to the life of the church and highlights relating to Go Global churches. We will not use your personal data for any other purposes or share it outside the church without your consent, unless the law requires us to do so.

What about my privacy?

Your personal data will be treated as strictly confidential and will only be shared with other members of the church where necessary to facilitate your (or their) involvement with us, and only with your consent (e.g. if you join small group, we will share your contact information with the leader of that group with your consent)

How will data be collected and kept up to date?

Data will principally be collected and updated by you personally using an online form or app connected directly to our database. Any personal data which you provide by another means may also be added to our database as appropriate. When collecting data, we will ensure that you understand clearly why the data is being collected, how the data will be used, and by whom. If any of the above were to change you would be notified in advance and given the option to opt-out. The consequences of opting-out should be made clear at the time.

How long do you keep my personal data for?

How long we keep your data will depend on the nature of your engagement with Love Church (e.g. If you are fully involved in church life, we will keep your data as long as you continue to be involved in this way). Should your involvement cease, we will retain your data for 12 months in case you choose to reconnect with Love Church.

Who sees my information?

Our data processers are competent and demonstrate the appropriate levels of knowledge in handling your information. Training has been given to each along with written instructions and a record that such has been given will be kept. Processors will not sub-contract their responsibilities without prior consent, but where the processor does sub-contract responsibility – they too must be made aware and show compliance of all of the above. All data will be returned or deleted after the processor has finished with it.

Children and vulnerable adults

Children and vulnerable adults' merit specific protection with regard to their personal data, as they may be less aware of the risks, consequences and safeguarding concerns, and their rights in relation to the processing of personal data. Extra care and protection will apply to the use of personal data of children and vulnerable adults for the purposes of creating profiles, marketing and the collection of personal data with regard to children when using services offered directly to a child.

Photographs and filming

GDPR does not require us to restrict the taking of photographs or filming within the church or at church events because these are considered public places. However, as an individual has the right to privacy anyone can request not to be photographed or filmed at any of our events.

Requesting access to your personal data

Under Data Protection legislation, you have the right to request access to information about you that we hold.

You also have the right to:

Request that your personal data is updated if inaccurate or out of date

Request that we do not process your personal data for the purposes of informing you of services, groups, teams or activities

Withdraw your consent for your data being processed by us at any time

Request that information held about you is deleted

Lodge a complaint with the Independent Commissioner's Office (ICO)

To make a request for your personal information email hello@lovechurch.scot