Derby Vineyard a Charitable Incorporated Organisation. Charity Registration No. 1124578.
1. WHAT INFORMATION DO WE HOLD?
a. Information that you give us. When filling in forms on our websites, through our App, at events we run, corresponding with us by phone, email or letter, it includes information you provide when you register to use our site, participate in discussion boards or other social media functions on our site, surveys, campaigns and when you report a problem with our site. The information you give us may include your name, postal address, e-mail address, phone number, the church that you attend, financial and credit card information, personal description and/or photographs.
b. Information we collect about you. With regard to each of your visits to our site we will automatically collect the following information:
- Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, and operating system and platform;
- Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page and any phone number used to call our head office and staff members.
d. If you are a Derby Vineyard employee or volunteer we may also hold certain categories of sensitive information such as personal financial details, age, gender, marital status, date of birth, full employment and educational history, references, medical and criminal records.
2. HOW WILL WE USE YOUR INFORMATION?
a. To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
b. To improve our site to ensure that content is presented in the most effective manner for you and for your computer;
c. To allow you to participate in interactive features of our service, when you choose to do so;
d. As part of our efforts to keep our site safe and secure;
e. To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
f. If you sign up for electronic newsletters we will use your information to send you news and information about Derby Vineyard, the wider movement and Vineyard affiliated organisations.
g. To maintain accurate and up to date records or our employees, volunteers and congregation members.
h. To run Disclosure and Barring Service checks on employees and volunteers in accordance with our safeguarding and employment policies.
3. WHERE DO WE STORE YOUR PERSONAL DATA?
a. We are committed to holding your personal information securely. Only Derby Vineyard staff and authorised volunteers (and the staff of our Partners) that need to see the data can access it.
b. We may store your information on computers, in paper form, or both.
c. All computers that store any personal data are password protected.
d. Laptop computers and similar devices that contain confidential information are encrypted.
e. Any paper files that hold personal information (other than names and contact details) are kept on secure premises in locked cupboards and filing cabinets.
g. Information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our site or app, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
h. Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
4. WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR DATA?
a. Our legal basis for processing personal data is different depending upon the purpose it was collected for. The following list covers the main types of data that we hold, for a full list please contact firstname.lastname@example.org.
- Data collected for Derby Vineyard news mailing and marketing lists is held on consent (unless otherwise stated).
- Data collected through our booking systems for the events and courses that we run is held for our legitimate interests or because of a contractual obligation to do so.
- Employee, volunteer and congregation member data records are processed to comply with legal and contractual obligations and to fulfil our legitimate interests as a church community organisation. Some of your records may be held with your consent. Where we choose to hold such records on consent we will notify you of this when your data is collected and will ask for you to agree to this. We will also inform you how you can withdraw your consent if you wished to do so.
5. HOW LONG DO WE HOLD YOUR DATA?
a. The length of time that we will retain your data will vary depending upon the purpose for which it is processed.
b. Data that is held by us on consent is only kept for as long as we have your consent to process that data.
c. For a full list of our data retention periods you can contact us at email@example.com.
6. YOUR RIGHTS
a. Under UK legislation you have a number of rights about how your data is processed. Full details of your personal rights can be found on the Information Commissioner’s Office website – https://ico.org.uk/.
b. Your rights include the right to:
- Request access to the data we hold about you,
- Have inaccurate and incomplete data rectified,
- Have the personal data we hold on you deleted (except where we are required to hold the data by law),
- To restrict the processing of your personal data in certain circumstances.
7. OTHER WEBSITES
a. Our site may, from time to time, contain links to and from other websites, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
- To allow you to carry information across pages of our websites and avoid having to re-enter information when you return to one of our sites;
- To measure our website traffic and analyse how our websites work. This will allow us to make changes to our websites in the future and make them easier to use;
25 Park Grove