Privacy Policy
We value your trust and are committed to safeguarding your personal information. This Privacy Policy explains how KingsGate Church Helston collects, uses, stores, and protects your data when you interact with our website or related services.
Last updated: 03/09/2025
Who We Are
KingsGate Church Helston is a registered charity in England and Wales (Charity No. 1162853).
Contact details:
Email: [insert email address]Address: [insert postal address]Telephone: [insert contact number]
We are the Data Controller for the personal information processed via this website.
Information We Collect
a) Information you provide directly
-
Name, email address, telephone number, or other details submitted via contact forms.
-
Information you provide when registering for events, prayer requests, or joining a mailing list.
-
Details you provide if making a donation online.
b) Information collected automatically
-
Technical data such as IP address, browser type, device, time zone, and operating system.
-
Usage data such as pages visited, time spent on site, and referral source.
-
Cookies and similar technologies to improve website functionality and analyse visitor behaviour.
c) Information from third parties
-
If you interact with us via social media platforms (Facebook, Instagram, YouTube etc.), we may receive information in line with your account settings.
-
Payment and donation processors (e.g. Stewardship, PayPal, or similar providers) will share limited information necessary for processing transactions.
How We Use Your Information
We use your data to:
-
Respond to enquiries and provide pastoral, administrative, or practical support.
-
Process donations and maintain accurate financial records (as required by charity law).
-
Register you for events, groups, or volunteer opportunities.
-
Send newsletters, updates, or communications where you have given consent.
-
Improve website content, performance, and user experience.
-
Ensure site security and prevent misuse or fraudulent activity.
-
Comply with legal and safeguarding obligations.
Legal Bases for Processing
We process personal data under the following UK GDPR bases:
-
Consent – where you have given clear permission (e.g. mailing lists, photos, media use).
-
Contract – where processing is necessary to provide a service you requested (e.g. registering for an event).
-
Legal obligation – to comply with charity, safeguarding, or tax law.
-
Legitimate interests – for internal administration, website analytics, and improving church services.
cookies
Our website uses cookies to:
-
Enable core site functionality (WordPress session cookies).
-
Provide embedded services such as Google Maps or YouTube videos.
-
Analyse visitor numbers and behaviour (via Google Analytics/Search Console).
-
Store preferences such as cookie consent.
You can control cookies in your browser settings.
Third-Party Services and Data Sharing
We only share your data where necessary, always securely and proportionately. Our website uses:
-
WordPress – our website platform.
-
Google Services – including Maps, Fonts, reCAPTCHA (for spam protection), and Search Console. These may process IP addresses and browser information.
-
Email providers – for communication and mailing lists.
-
Donation/payment processors – to securely process financial contributions.
-
Website analytics tools – to monitor site performance and engagement.
We do not sell or rent your personal information.
International Data Transfers
Some third-party services (e.g. Google, email services) may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards such as Standard Contractual Clauses are in place to protect your data.
Data Retention
We keep personal information only as long as necessary:
-
Contact form enquiries – up to 12 months.
-
Mailing list data – until you unsubscribe.
-
Financial records and donation details – 6 years (as required by HMRC/charity law).
-
Safeguarding records – in line with national safeguarding guidance.
Your Rights
Under UK GDPR, you have the right to:
-
Access the personal data we hold about you.
-
Request correction of inaccurate or incomplete data.
-
Request deletion of your data where appropriate.
-
Object to or restrict processing in certain circumstances.
-
Withdraw consent at any time (where consent was the legal basis).
-
Data portability (where technically applicable).
Requests can be made using the contact details in Section 1.
Security
We take technical and organisational measures to keep your data secure, including:
-
Secure server hosting and SSL encryption.
-
Restricted access to data by authorised personnel only.
-
Regular monitoring and updates to our website platform.
Embedded Content
Articles on our website may include embedded content (e.g. videos, maps, or social media feeds). Embedded content behaves as if the visitor has visited the external site directly and may collect data about you, use cookies, or monitor interactions. We encourage you to review the privacy policies of those providers.
Children and Young People
We do not knowingly collect personal data from children under 13 without parental consent. Where young people engage with our activities online, data will be handled in line with our Safeguarding Policy.
Complaints
If you have concerns about how your data is handled, please contact us first. If you remain dissatisfied, you can lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised “last updated” date.
