Privacy Policy

1. Purpose of this Policy

The Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth has created this Privacy Policy to ensure compliance with legal and regulatory requirements regarding the Personal Data collected about you. This Privacy Policy explains what personal data might be collected, how and why it would be collected, who it might be shared with and how it is protected.

Appendix A outlines how you can complain to us or the Supervisory Authority, if you have concerns that this Policy is not being applied in relation to your personal data.

2. What Personal Information Could Be Collected, and How?

The information collected about you is information that you have provided via the parish website, by email, in writing, by telephone or in person; or any updates to that information you have provided since. This includes the following personal data:

  • Name
  • Contact details including addresses, telephone numbers and email addresses.

This information is retained in accordance with the Church of England Records Retention Schedule, which sets out the recommended retention periods for different categories of parish records. Where there is a legal requirement to retain records for longer, we will do so accordingly.

3. What Legal Basis Is Applied to the Processing of Your Personal Data?

We rely on one or more of the following lawful bases under UK GDPR when processing your personal data:

  • Consent (Article 6(1)(a)) — where you have actively opted in to receive communications from us, for example by signing up to our weekly parish newsletter or submitting our online contact form. You may withdraw your consent at any time by contacting us at office@gtyarmouthminster.org or by using the unsubscribe link in any email we send you.
  • Contract (Article 6(1)(b)) — where processing is necessary for the performance of a contract to which you are party, or in order to take steps at your request prior to entering into a contract.
  • Legitimate interests (Article 6(1)(f)) — where processing is necessary for the legitimate interests of the PCC in carrying out its charitable and pastoral purposes, provided those interests are not overridden by your rights and interests. We have conducted a Legitimate Interest Assessment where this basis is applied.
  • Not-for-profit religious organisation (Article 9(2)(d)) — where we process data relating to our members, regular worshippers, or those in regular contact with the parish in connection with our religious purposes, we may rely on this special category condition, provided the data is not disclosed outside the parish without your consent.

4. How Is Your Information Stored and Accessed?

Your information is stored and processed using the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth’s internal systems and applications, which are access-controlled and only accessed by registered and approved users. Users comprise of:

  • Staff, clergy and volunteers of the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth, and those working on its behalf as service providers

In the unlikely event that we transfer your data outside of the EEA, we ensure that standard contractual clauses (SCCs) are in place to address the security and privacy of your personal data.

5. How Will the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth Use Your Information?

The Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth will use your personal information to maintain accurate records for contacting you for the following purposes:

  • To ensure we are able to contact you in relation to your connection with the Parish of Great Yarmouth
  • To keep you updated with news about parish services, events and activities, via email bulletins and updates

We do not use your data for automated decision-making or profiling.

6. Sharing Your Information

The Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth will not sell or disclose your information to third parties other than those needed to meet contractual or legal obligations or to protect the vital interests of the data subjects we collect data about. For marketing purposes, we have conducted a Legitimate Interest Assessment.

The information the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth holds about you will only be used for the purposes stated and will be retained in line with the requirements of the Church of England Records Retention Schedule. The Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth may disclose your information to the following third parties:

  • Our service providers to ensure the provision of services and supplies needed to conduct business
  • To law enforcement agencies to detect and prevent criminal activity — this excludes private investigators. The Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth will not disclose Personal Data beyond what is required in this instance.

7. How Will the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth Protect Your Information?

The Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth uses a range of security techniques to protect Personal Data, these are, but are not limited to:

  • Security policy
  • Use of encryption techniques
  • Control of mobile devices
  • Staff and volunteer security training
  • Robust and up-to-date anti-malware programmes
  • Secure data disposal
  • Access control
  • Network monitoring and management

8. Your Rights

You have several rights regarding your Personal Data, and the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth observes and complies with these rights by ensuring that you can have access, upon request, to any of the data we hold about you. You have other rights regarding your Personal Data that you may exercise if the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth has no legal basis to reject your request. These rights are:

  • You may object to or restrict our handling of your data.
  • You may have your data delivered to you in a portable, readable and useable format.
  • You may have your data corrected or updated at any time if you believe the data we hold is incorrect.
  • You may have your data erased from our systems when we have no legal reason for retaining it.

Appendix A

The contact information provided below is to enable anyone to exercise their rights regarding their own personal data that we hold or process. If you wish to exercise your rights as detailed above, please contact us at the email address below and we will respond to you within 30 days.

Relevant contact information:
Parish Administrator — office@gtyarmouthminster.org

If you wish to make a complaint about the way the Parochial Church Council of the Ecclesiastical Parish of Great Yarmouth handles your data, please contact the Information Commissioner’s Office (ICO) on the below contact details:

Wycliffe House, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113 (local rate)

Or you can use the online service which allows you to make a complaint using the online form. You can report a breach, a concern, or request more information. The ICO online can be found here: https://ico.org.uk/global/contact-us/