Privacy &
Data Protection

Information We May Collect

Depending on how you interact with our website, we may collect information such as:

Information You Provide

When you contact us or submit information through the website, you may provide:

• Your name
• Email address
• Church or parish name
• Your message or enquiry
• Information you voluntarily provide in connection with a conference, ministry, parish, or other enquiry

We only request information that is reasonably necessary for the relevant purpose.

Website and Technical Information

When you visit our website, certain technical information may be collected automatically by the website or its supporting services. This may include:

• IP address
• Browser and device information
• Operating system
• Pages visited
• Approximate usage information
• Date and time of visits
• Information relating to website performance and security

Where technically possible, we seek to minimise the amount of personally identifiable information collected through technical data.

How We Use Personal Information

We may use personal information to:

• Respond to enquiries submitted through our website
• Communicate with pastors, church workers, members, and visitors
• Manage administrative enquiries
• Support Province 1 activities and communications
• Facilitate conference or event-related enquiries and registrations
• Maintain and manage the church directory where appropriate
• Provide requested resources and information
• Improve the website and user experience
• Maintain website security and prevent misuse
• Meet legal, regulatory, or safeguarding obligations where applicable

Church Directory Information

The Province 1 website may provide information about RCCG parishes across Wales and the South West of England.

Directory information is intended to help visitors find and contact a parish. Information included in the directory may include the parish name, location, senior pastor information, contact information, and parish status.

Directory information is shared only where appropriate and with the relevant consent or authority of parish leadership.

If you believe information relating to a parish or individual is inaccurate, outdated, or should no longer be displayed, please contact the Province Office so that the information can be reviewed.

Conference and Event Information

Province 1 may collect information relating to conferences, events, registrations, or participation in Province activities.

Information provided for an event will be used for purposes connected with that event, such as:

• Registration
• Administration
• Communication
• Event planning
• Providing relevant event information
• Follow-up communication where appropriate

Where an external registration or event-management service is used, information may also be processed by that service in accordance with its own privacy policy.

Communications

If you contact Province 1, we may retain the information necessary to respond to your enquiry and maintain appropriate administrative records.

We will not use your contact information for unrelated marketing communications unless there is an appropriate lawful basis to do so and, where required, you have provided consent.

You may contact us at any time if you no longer wish to receive non-essential communications from us.

Sharing Personal Information

We do not sell or rent personal information.

Personal information may be shared where necessary with:

• Appropriate Province 1 leadership or administrative personnel
• Relevant parish leadership where necessary to respond to an enquiry
• Service providers who help operate or maintain the website
• Event or registration providers where necessary to provide a requested service
• Professional or technical advisers where appropriate
• Public authorities or other organisations where required by law

Where third parties process information on our behalf, we seek to ensure that appropriate data protection and security arrangements are in place.

How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for as long as required to meet legal, regulatory, administrative, safeguarding, or legitimate organisational requirements.

When information is no longer required, we will take reasonable steps to securely delete, destroy, or anonymise it where appropriate.

Retention periods may vary depending on the type and purpose of the information.

Lawful Processing

Under the UK GDPR, personal information must be processed on a lawful basis.

Depending on the circumstances, we may process information because:

• You have provided consent
• Processing is necessary to respond to your request
• Processing is necessary to provide a service or administer an activity
• Processing is necessary for our legitimate organisational interests
• Processing is necessary to comply with a legal obligation
• Another lawful basis under applicable data protection legislation applies

Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Your Data Protection Rights

Under applicable UK data protection law, you may have the right to:

These rights are subject to certain legal exceptions and limitations.

Keeping Your Information Accurate

We aim to keep personal information accurate and up to date.

If your information changes, or if you believe information we hold about you is incorrect, please contact us so that it can be reviewed and corrected where appropriate.

Children's Privacy

Our website may be accessible to people of different ages.

We do not knowingly seek to collect unnecessary personal information from children. Where information relating to children is required for legitimate church, ministry, safeguarding, or event purposes, appropriate processes should be followed by the relevant parish or ministry.

If you believe that a child has provided personal information to us unnecessarily, please contact us so that the matter can be reviewed.

Cookies and Similar Technologies

Our website may use cookies or similar technologies that are necessary for the operation, security, functionality, or performance of the website.

Depending on the services used on the website, cookies may also be used for analytics or other purposes.

Where consent is required, appropriate consent mechanisms should be provided before non-essential cookies are used.

You can also control or restrict cookies through your browser settings. Disabling certain cookies may affect some website functionality.

Third-Party Services

Some website functions may rely on third-party services, such as website hosting, forms, analytics, embedded content, event registration, email delivery, or other technical services.

Where these services process personal information, they may process information in accordance with their own privacy policies and applicable data protection requirements.

Where required, appropriate contractual and technical safeguards should be used to protect personal information.

International Data Transfers

Some service providers used by websites may process information outside the United Kingdom.

Where personal information is transferred outside the UK, appropriate safeguards will be considered and implemented where required by applicable data protection law.

These safeguards may include an adequacy decision, appropriate contractual safeguards, or another lawful transfer mechanism.

Data Breaches

We take reasonable steps to prevent personal data breaches.

If a personal data breach occurs, we will assess the nature and potential impact of the incident and take appropriate action in accordance with applicable data protection requirements.

Where legally required, relevant individuals and/or the appropriate supervisory authority may be notified.

Changes to This Policy

We may update this Privacy & Data Protection Policy from time to time to reflect changes to our website, services, legal requirements, or data protection practices.

When changes are made, the updated policy will be published on this page together with the relevant “Last Updated” date.

We encourage visitors to review this page periodically.

Making a Data Protection Request

When making a request concerning your personal information, please provide enough information for us to understand your request and identify the relevant records.

We may need to verify your identity before providing personal information or making certain changes, in order to protect against unauthorised disclosure.

We will respond to valid requests within the time period required by applicable data protection legislation.