Catalyst Network of Churches (‘Catalyst’) is committed to your privacy, and recognises the importance of your data. We will only use your personal information for Catalyst in accordance with the GDPR, with integrity, and to communicate with you in ways that you have clearly agreed to. This policy explains how we collect data, how we use and store information and what it means for you.
What information do you collect?
This privacy notice explains how Catalyst and it’s website comply with the General Data Protection Regulation (GDPR). We comply with our obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
Directly from us
We collect personal information each time you deal with us, for example when you provide your contact details in writing to Catalyst staff or volunteers; request materials or information; sign up for an event; make a donation; use our check in system at events, or otherwise provide your personal details.
From website interaction from us
We collect non-personal data such as IP addresses, details of pages visited and files downloaded. Website usage information is collected using cookies, see the section on Cookies below.
Indirectly from third parties
We collect information from third parties such as PayPal and Stripe, where you have agreed to support Catalyst and have given your consent. You may wish to check their privacy policy to find out more information on how they will process your data.
Where you give permission to other organisations
We may collect information that you make available on, for example, Twitter, Facebook or similar organisations. You may wish to check their privacy policy to find out more information on how they will process your data.
How do you use my information?
Your personal information will only be used for the purposes you gave it to us. This may include:
– To inform you of news, events, activities, groups and services running throughout Catalyst
– To provide pastoral care to attendees at Catalyst events and to safeguard the well-being of individuals and 3rd parties
– To administer attendance records
– To provide an interactive website where email is used to communicate with users
– To raise funds and promote the interests of the charity
– To manage our employees and volunteers
– To maintain our own accounts and records (including the processing of Gift Aid applications);
– Statistical analysis
– To remain consistent with our values and beliefs as an organisation
So that we can provide services you have requested, and keep you informed about news, events, activities and services and process your donations, we will process your personal data on the basis of the consent you provided us with. You are free to change your preferences at any time. Other processing based on legitimate interest is necessary for carrying out obligations under employment, social security or social protection law, or a collective agreement. Legitimate interest is also the basis of our processing relating to those who have regular contact with us in connection with these purposes, and for claiming back tax under the government’s Gift Aid scheme, as we are a not-for-profit body with religious aims.
How do you store my information?
We use online systems including ChurchSuite and Google Apps. You may wish to read their Privacy Policies to find out more information on how they meet the GDPR. We will keep your personal information only for as long as we consider it necessary to carry out each activity, unless required to keep for UK law, and it will be deleted within 24 months of your last activity with us unless you request to be forgotten or remove the information yourself. We take account of legal obligations and accounting and tax considerations as well as considering what would be reasonable for the activity concerned.
We ensure that we have appropriate technical controls in place to protect any personal data you provide and that access to personal data is restricted only to those staff members or volunteers whose job roles require such access and that suitable training is provided for these staff members and volunteers. We may make limited use from time to time of external companies to collect or process personal data on our behalf. When we do so, we carry out checks on these companies, put in place contracts to make sure our requirements are clear, and carry out periodic reviews. When we do use external companies, we remain responsible for the storing and processing of your personal data.
If you use your debit or credit card to donate to us, purchase something or pay for an event, whether online or by Giving Envelope, we will process your information securely in accordance with the Payment Card Industry Data Standard. We may hold your bank account details if you have asked us to set up a standing order for you, which are stored securely and retained in line with legal requirements.
Who do you share my information with?
Your personal data will be treated as strictly confidential and will only be shared with the relevant Catalyst staff and volunteers in order to carry out a service or for the purposes listed above. We do not sell or pass any of your personal information to any other organisations and/or individuals without your express consent, with the following two exceptions:
– We may need to pass on information if required by law or by a regulatory body (for example, a Gift Aid audit by the HMRC, or if asked for details by a law enforcement agency)
– We may employ other service providers to perform functions on our behalf, such as ChurchSuite and MailChimp, to enable fulfilment of the purpose for collection.
By providing us with your details you are giving Catalyst your express permission to use and transfer your data in this way. Where such details are shared we have confidentiality agreements in place that restrict the use of your information to the purpose for which it is provided and ensure it is stored securely and kept no longer than necessary. We may provide third parties with general information about users of our site, but this information is both aggregate and anonymous. However, we may use IP address information to identify a user if we feel that there are or may be safety and/or security issues or to comply with legal requirements.
How do you use Cookies?
The only cookies used on this site are to help us analyse site usage, how users arrive at our site, what they do on the site, what browser they are using and on what operating system etc. However, this data is not tied to personally identifiable information. If you do not know what cookies are, or how to control or delete them, then we recommend you visit www.aboutcookies.org.uk for detailed guidance.
Currently we operate an ‘implied consent’ policy which means that we assume you are happy with this usage. If you are not happy, then you should either not use this site, or you should delete Google Analytics cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari etc.)
What Social buttons do you use?
On many of the pages of the site you will see ‘social buttons’ for Twitter and Facebook. These enable users to share or bookmark the web pages. In order to implement these buttons, and connect them to the relevant social networks and external sites, there are scripts from domains outside of Catalyst Network of Churches. You should be aware that these sites are likely to be collecting information about what you are doing all around the internet, including on Catalyst Network of Churches sites. So if you click on any of these buttons, these sites will be registering that action and may use that information. In some cases these sites will be registering the fact that you are visiting a Catalyst Network of Churches site, and the specific pages you are on, even if you don’t click on the button but are already you are logged into their services (like Google and Facebook). You should check the respective policies of each of these sites to see exactly how they use your information and to find out how to opt out, or delete, such information.
How can I update or remove my information?
You can change your preferences of how we contact you or update your details at any time. You have the right to ask us to erase your personal data, to ask us to restrict our processing, or to object to our processing of your personal data at any time. You can do so by:
– Emailing us on: communications@catalystnetwork.org
– Writing to us at: Catalyst Network of Churches, Hertford Place, Coventry, CV1 3JZ
You also have the right to request details of the information we hold about you. To make this request, please write to us at the details above. For more information about your rights under the Data Protection Act (DPA) and General Data Protection Regulation (GDPR) you can visit the website of the Information Commissioner’s Office: ico.org.uk
What about external web services?
We use a number of external web services on this site, mostly to display content within our web pages. For example, to show videos we use Vimeo and YouTube. This is not an exhaustive or complete list of the services we use, or might use in the future, when embedding content, but these are the most common. As with the social buttons we cannot prevent these sites, or external domains, from collecting information on your usage of this embedded content. If you are not logged in to these external services then they will not know who you are but are likely to gather anonymous usage information e.g. number of views, plays, loads etc.
What about Future Updates and Changes to this Privacy Policy?
We may amend this policy from time to time to take account of changes to our processes or changes to data protection or other legislation. By continuing to use our website you will be deemed to have accepted these changes. If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
If you have any questions about the way we use your data or would not like your data to be used for anything listed above, please contact us on communications@catalystnetwork.org. We aim to use the information you give us with integrity and in a way which is fair to you. Please let us know if there are any ways we can serve you better by contacting us.