Privacy

For any questions about how we use your personal data, or to exercise your rights over your information, you can contact us on the following:

Telephone: (020) 8533 1383 Email: info@erc-hackney.com Address: Hackney Evangelical Reformed Church, Lauriston Road, Hackney, E9 7LH

If you do have questions, we ask you to read this Privacy Policy first. We aim for it to be clear and comprehensive to help answer any questions you may have.

This Privacy Policy describes the processes where Hackney Evangelical Reformed Church (Hackney ERC) is the data controller of your personal data. This means that Hackney ERC decides what the personal data is used for, and the ways in which it is processed. For the avoidance of doubt, personal data will be collected and processed solely for the purposes of this Privacy Policy. As the data controller, Hackney ERC has the responsibility to comply and demonstrate compliance with, data protection law. Hackney ERC is committed to protecting the privacy and security of your personal data. It is important that you read this Privacy Policy so that you are aware of how and why we are using your personal data.

The following purposes describe what personal data we collect, what we do with it and why we do it.

We collect personal data about how you use our website and the device(s) that you use to access the website. This includes collecting unique online identifiers such as IP addresses, country and city.

We sometimes use the non-personally identifiable data that we collect to improve the design and content of our website and to enable us to personalise your website experience. We may also aggregate this personal data to analyse the website usage.

We only use temporary cookies and do not track you around the internet. Our website will work fine if you do not have the tracking cookies switched on or have third-party cookies completely disabled.

We justify the processing on our legitimate interest in making our website work and improving it.

If you get in touch with us – whether that’s by phone, email, post or in person – we will collect the personal data you provide. If you use our contact form, we ask for your name, email address and phone number (optional). That information and anything else you tell us will be handled securely and confidentially. Only what is needed to deal with your enquiry will be passed on internally or externally where required. We do ask that you do not include sensitive personal data in any communication unless it is directly relevant, to make it easier for you and us to protect you.

We will use the personal data you provide to deal with your enquiry and for no other purpose.

Formally, we justify this processing based on your consent. When you use the contact form or call us, we will ask you for your explicit consent to process your sensitive personal data.

Where you have subscribed to our newsletter, we will send you a monthly newsletter to the email address you have provided.

In order to send you the newsletter, we will obtain your consent. You can withdraw your consent at any time by contacting us using the information at the top of this Privacy Policy, or by following the unsubscribe instructions found in the newsletter.

As required by the Privacy and Electronic Communication Regulation (PECR), we will only send marketing communication by email where we have your explicit consent to do so.

We will never sell your personal data or provide access to it to any third parties for marketing purposes.

In some circumstances, we may be legally required to share your personal data with the relevant authority, for example, in response to a court order. What they then do with your personal data is governed by the law. They may also contact you directly. We will always try to make sure that you know when your data has been shared in this way.

We may also need to share your personal data in order to establish, exercise or defend a legal claim.

The police and other government agencies may also request your personal data. We will share it with them once they show us proof that their request is legal. We may not be able or allowed to inform you if this happens.

We take the security of your personal information very seriously. We will always endeavour to store and process your personal data within the UK and EEA. Where data is transferred internationally, we will ensure that there are appropriate safeguards for the transfer of this data.

We have put in place suitable organisational and technical measures to safeguard and secure your personal data.

We keep clear records of what information we have and what we do with it, and we always consider what impact our processing will have on you. We also continually assess risks that can lead to possible data breaches and do everything we can to prevent them.

We won’t keep your personal data forever. We will keep your personal data for as long as is reasonably necessary for the purposes explained in this Privacy Policy.

You have the right to be informed about the collection and use of your personal data. You can exercise this right by reviewing this Privacy Policy, which we regularly review and update to ensure that they are accurate and reflect our data processing activities.

You have the right to access your personal data by making a request (also known as a Data Subject Access Request “DSAR”). You can request a copy of the personal data Hackney ERC stores about you, and if we agree that we are obliged to provide the personal data to you (or someone else on your behalf), we will do so free of charge within one calendar month from when your identity has been confirmed.

You have the right to rectify your personal data if you believe the personal data we hold about you is inaccurate, incomplete or out of date. We will do so free of charge within one calendar month from when your identity has been confirmed.

You have the right to ask for the personal data we collect about you to be deleted. This is not an absolute right and only applies in certain circumstances. We will do so free of charge within one calendar month from when your identity has been confirmed.

You have the right to ask us to restrict the processing of your personal data, for example, if you want to contest the accuracy of the data, we hold about you. We will still store the personal data but not use it. This is not an absolute right and only applies in certain circumstances. We will do so free of charge within one calendar month from when your identity has been confirmed.

You have the right to ask that we transfer the personal data to you or to another organisation, in certain circumstances.

You have the right to object to the processing of some or all of the personal data we hold about you. This is only an absolute right if we use your personal data for direct marketing. However, it may not apply in other circumstances where we have a compelling reason to process your personal data in this way, i.e. when it is our legal obligation. We will do so free of charge within one calendar month from when your identity has been confirmed.

To exercise any of these rights, please contact us using the details at the top of this Privacy Policy.

You also have the right to complain to the Information Commissioner’s Office – the government agency that handles data protection in the UK.

You can reach them at their website: https://ico.org.uk/global/contact-us/.

This Privacy Policy was last updated on the 4th of July 2022. We may update it at any time in order to improve your experience or to comply with changes in the law.