Privacy Policy
The Concert of Prayer, takes your privacy very seriously and will take all necessary care to guard any personal data that we gather.
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2018 (the “GDPR”).
Who are we?
The Concert of Prayer is a Registered Scottish Charity, number SC052119. We are the “data controller”. We comply with our obligations under the “GDPR” by keeping your personal data up to date; by storing and destroying it securely; by not collecting or retaining unnecessary or excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure; and by ensuring that appropriate technical measures are in place to protect personal data.
How do we collect personal data?
We collect personal data each time you are in contact with us. For example, when you:
provide your contact details digitally, in writing, or orally, to Concert of Prayer staff or volunteers;
attend our meetings or participate in other church activities, events or courses;
communicate with the Concert of Prayer by means such as email, letter, or telephone;
attend face to face meetings with the Concert of Prayer staff and volunteers;
make a donation to The Concert of Prayer electronically or via our website.
What do we do with personal data?
We use your personal data for the following purposes:
To administer our contact list;
To manage our employees and volunteer teams.
To assist us in making any meetings and other services more accessible and valuable to our community.
To fundraise and promote the interests of the charity.
To maintain our own accounts and records (including processing Gift Aid applications).
To inform you of news, events, activities and courses run by The Concert of Prayer.
To register you for events, courses and other church activities, and keep you informed about them.
The legal basis
Under GDPR we rely on a specific legal basis for all information we collect. The legal basis is different depending on the purpose for which the data was collected.
We rely on your explicit consent to keep you informed about news, events, activities and services; and to process your Gift Aid.
We can process your personal data if (i) we have a genuine and legitimate reason; and (ii) are not harming any of your rights and interests. We rely on this basis to share your information with small group leaders and other selected church members in order to facilitate the running of church services, courses and events. We also rely on this basis to record your participation in certain courses and events hosted by The Concert of Prayer.
We rely on a legal obligation where processing is necessary for carrying out obligations under employment, social security or social protection law.
Personal information is regarded as “sensitive” when it reveals a person’s religious beliefs.
Your privacy
Your personal data will be treated as strictly confidential and will only be shared with other members of the charity in order to carry out a service to other charity members or for purposes connected with the charity. We will only share your data with third parties outside of the charity with your consent.
We may also share your information or disclose it to third parties where required to comply with any court order or other legal obligation or when data is requested by government or law enforcement authorities, to enforce any agreements, or to protect the rights, property, or safety of us, members of the congregation or others.
How long do we keep personal data?
We are legally required to keep Gift Aid declarations and associated paperwork for up to 7 years after the tax year to which they relate.
For a full data retention schedule, please refer to our Data Protection Policy on our website: www.concertofprayer.org.uk
Your rights
Unless subject to an exemption under the GDPR, you have the following rights with respect any of your personal data that The Concert of Prayer holds:
The right to request a copy of your personal data.
The right to request that we correct any personal data if it is found to be inaccurate or out of date.
The right to request your personal data is erased where it is no longer necessary us to retain it.
The right to withdraw your consent to the processing at any time.
The right to request that we provide you with your personal data and where possible, that we transmit that data directly to another data controller. (This is known as the right to data portability).
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.
The right to object to the processing of personal data, where applicable.
The right to lodge a complaint with the Information Commissioner’s Office.
Changes
The Concert of Prayer may amend this Privacy Policy from time to time to ensure compliance with changes or amendments to the law of the UK. Any amended version will be available on our website, www.concertofprayer.org.uk. We suggest that you visit our website regularly to keep up to date with any changes.
Contact us
To exercise all relevant rights, queries or complaints please in the first instance contact us by email: info@concertofprayer.org.uk
You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
