Privacy Policy

Table of Contents

Privacy Policy for Christian Life Centre St Helens (CLC St Helens)

(Operated under the Elim Foursquare Gospel Alliance)

1. Introduction

Christian Life Centre St Helens (CLC St Helens), operating under the Elim Foursquare Gospel Alliance, is committed to protecting your privacy and personal data. This Privacy Policy explains how and why we use your personal data to ensure we remain accountable and transparent to you. We process personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

2. Who We Are (Data Controller and Contacts)

Data Controller

The Elim Foursquare Gospel Alliance is the Data Controller for all churches and activities that operate under it, including CLC St Helens.

DetailInformation
Organisation Name:

Elim Foursquare Gospel Alliance 

 

 

ICO Registration No.:

Z5192422

 

 

Registered Charity:

251549 (England & Wales) and SC037754 (Scotland)

 

 

Contacts

RoleContact Details
Data Protection Officer (DPO)

Evalian – Laura Hastie (dpo@elim.org.uk, 01684 588 983) 8888

 
 

 

Local Data Protection Lead (DPL)Rev. Craig Lawrenson (Senior Minister) OR Ste Anders (Executive Administrator)

 

3. The Personal Data We Process

We only process personal data that is needed for specific, legitimate purposes.

 

Categories of Data

  • Standard Data: Names, contact details, financial details (for donations), employment or education details (e.g., for staff/volunteer roles).

  • Special Categories of Data: This sensitive data receives additional protection. We process data concerning:

    Religious Beliefs: This is fundamental to our purpose as a church.

    Health Data: Information collected for safeguarding, pastoral care, or recorded on Accident and Incident Forms.

    Racial/Ethnic Origin: Primarily collected for monitoring purposes during safer recruitment.

Source of Data

We receive data directly from you (e.g., via forms or contact) or from other sources, such as previous employers during recruitment.

4. Why We Use Your Data (Lawful Basis)

We must have a legal reason (lawful basis) for processing your personal data (Article 6 UK GDPR).

Lawful BasisExamples of Processing
Consent

Sending specific email newsletters where you have explicitly agreed. (You can withdraw consent at any time.)

Legitimate Interests

Internal administrative tasks, managing church groups, and necessary communication, unless overridden by your rights

Legal Obligation

Processing staff/volunteer records (e.g., HMRC, safeguarding)

Contract

Processing necessary to fulfil a contract with you (e.g., paying staff or providing a service you have paid for)

 

Legal Basis for Special Categories of Data

The processing of sensitive data is generally prohibited unless a specific condition is met (Article 9 UK GDPR):

  • Article 9(d) (Not-for-profit bodies): Processing is carried out during our legitimate activities and relates solely to members or former members of CLC St Helens, or those in regular contact with us.

  • Legal Claims: Processing necessary for the establishment, exercise or defence of legal claims (e.g., using Accident/Incident Form data).

5. How We Store and Share Your Data

Data Processors (Third-Party Systems)

We use approved Data Processors who process data on our behalf based on written contracts.

SystemPurposeSecurity
ChurchSuiteDatabase management, membership records, event booking, and communications.Access is restricted and requires strong passwords.
Google WorkspaceInternal and external email communication and digital file storage.

 

Two-Factor Authentication (2FA) is mandatory for all user accounts26.

 

 

MailchimpDistribution of bulk marketing emails and newsletters.Provides built-in unsubscribe features.

 

Sharing with Other Data Controllers

We share personal data only when legally permitted and you have been informed.

  • The Hope Centre: We share contact details with our charity partner, The Hope Centre, to facilitate joint community outreach and services.

  • The Elim Foursquare Gospel Alliance: For administrative oversight and compliance with the registered charity.

6. Marketing and Your Rights

Direct Marketing

We use ChurchSuite and Mailchimp to send communications. Any direct marketing material will identify CLC St Helens as the sender and describe how you can object.

Your Data Protection Rights

You have the following rights regarding the data we process about you. To exercise these rights, please contact the Local DPL or the Elim DPO:

  • Right to be Informed: To know how and why we process your data (this Privacy Policy)

  • Right of Access (SAR): To ask us for copies of the personal information we hold about you.

  • Right to Rectification: To ask us to correct or complete personal information you think is inaccurate or incomplete.

  • Right to Erasure: To ask us to erase your personal information in certain circumstances.

  • Right to Restrict Processing: To ask us to restrict the processing of your personal information in certain circumstances.

  • Right to Object: To object to the processing of your personal information, particularly for direct marketing.

  • Right to Data Portability: To ask that we transfer the personal information you gave us to another organisation in certain circumstances.

Data Retention

We will not keep personal data longer than is necessary for the purposes it was collected for38. We adhere to the Elim Data Retention Schedule.

 

7. Reporting a Concern

If you believe we have not processed your data correctly, please contact the Local DPL or the Elim DPO first.

You also have the right to lodge a complaint directly with the supervisory authority, the Information Commissioner’s Office (ICO)