Privacy Policy

Last Updated: Jan 2026

Policy Content

Purpose and Scope
What personal information we collect
Special Category Personal Information
Processing Personal Data – Criminal Convictions
How we collect and use information
Legal Basis
How we store information
Sharing Information ‘Lawful Basis’
Your Data Protection rights
Social Media
How to complain

1. Purpose and Scope

St Michael’s CJC Privacy Notice details our handling of information we collect about you when you become a member of or interact with St Michael’s CJC. We, us and our refers to St Michael’s Church of Jesus Christ. Our notice also explains your rights, and the choices you can make about how we use the information you provide to us. This includes how you may object to certain uses of information about you, and how you can request access to or update information that we hold about you.

2. What personal information we process

We collect information about you that we need for our functioning as a church. We collect and process the following information:

Church members or attendees
- Title
- Name (and known as)
- Date of Birth
- Marital Status
- Nationality
- Country of Birth
- Occupation
- Gender (Disclose any gender changes)
- Address
- Contact details – mobile number, email address, home number.
- Special category data including basic health details: (allergies, underlying health conditions), disabilities/medical conditions.
- Do you regularly take medication?
- Dependents, names, and date of birth
- Next of kin - name, contact details, relationship.
- Church office attained (example: Elder, Deacon, Evangelist etc)
- ID and address verification details e.g. passport, driver's license, utility bill, bank statement
- Images from digital photos taken.

Contractors/individuals providing a service to the church details.
- name
- address
- contact details – mobile number/email address.
Visitors
- name
- contact details - mobile number/email address.

By completing our membership form, you have given explicit consent for us to use your data within the confines of St Michael’s CJC.

3. Special Category Personal Information

Where special category data is concerned, explicit consent is required from the data subject. This is because the special categories refer to personal information that could cause significant harm, such as discrimination or physical danger, if it were misused.

‘Special Categories’ of Data (as referred to in the UK GDPR) includes information about a person:

Racial or ethnic origin
Political opinions
Religious or philosophical beliefs
Trade union membership
Genetic data
Biometric data (where used for identification purposes)
Health
Sex life
Sexual orientation

For St Michael’s CJC, a not-for-profit organisation, processing of special category data will be carried out in the course of its legitimate activities with appropriate safeguards by the Data Protection Trustee or Officer, and on condition that the processing relates solely to the members or to former members of St Michael’s CJC or to persons who have regular contact with us in connection with our purposes and that the personal data are not disclosed outside of St Michael’s CJC without your consent.

St Michael’s CJC processes personal data of its members and supporters to run church activities and provide pastoral care.

St Michael’s publishes an annual report which is available to third parties. The church must seek explicit consent before naming any of its members in the annual report.

Where personal data is collected directly from you, we will inform you about our identity/contact details and those of the Data Protection Trustee / Officer.

If your personal information is collected from another source, rather than directly from you, we will provide you with the information and the source of data.

4. Processing personal data – criminal convictions

We will process your personal data criminal convictions conditions only if you have given consent to the processing.

We will only carryout the processing if it is necessary to protect the vital interest of an individual, and you are physically or legally incapable of giving consent.

5. How we collect and use information we collect from you

The personal information we collect is provided directly by you by completion of a membership form. The information will be used for one or more of the following reasons:

to promote and drive engagement with our services and events. We use your contact information to create social media group chats and sending emails and invites to online meeting/services.
to provide employment or other references as required by you.
to verify information provided i.e., name, address, and identity.

to demonstrate compliance with our legal responsibility to know our donors and prevent money laundering.

to fulfil any other legal requirements.
If appointed to be ordained as a minister, your picture and name will be shared with International Headquarters in the US, therefore your explicit consent is required.

6. The legal basis we rely on for processing your information

The legal basis we rely on for processing your personal data is legitimate interest. We will share your personal information with third parties where required by law, where we have legitimate interest in doing so. For example, we hold contact details for your next of kin because it is in your legitimate interest for us to let someone know if you become ill.
We have a legal obligation to members and visitors, where we are required to report any serious accidents under the health and safety legislation to the emergency services.

7. How we store your personal information

Your personal information will be securely stored in a file in a locked cabinet, or encrypted electronically, in a cloud storage facility provided by Microsoft.
WhatsApp is used for communication on mobile phones which uses end-to-end encryption, where only the sender and recipient can read messages. St Michael’s CJC IT Policy outlines procedures for storage, deletion.
Your personal information will be kept for as long as you are a member of St Michael’s CJC and reviewed annually.

Your personal information stored on computers, laptops, and other devices, including in filing cabinet, the following steps will be carried out to delete your personal data if you leave St Michael’s CJC:

your personal information will be deleted from online storage and electronic systems, recycle bins, back up storage within twelve months of you leaving.
You have the right to request your data before it is deleted.
You must request baptismal data before leaving.
Paper documents will be destroyed safely and securely by shredding when it is no longer needed.

8. How we share information ‘Lawful Basis’

Internally

Your explicit consent is required to share your personal information whether within the UK of internationally.

Reasons for sharing your personal data are if:

You decide to leave St Michaels CJC to join another church, or our website developer may have access to your personal data only as the website is being developed and maintained; or for external training purposes via Thirty-One Eight, and for organised events attendance.
It is deemed necessary to protect your vital interests. This can be in situations where your life might depend on us using your data, like a medical emergency.

We will not share your personal data for commercial gain.

Externally

We may need to share information with our International Headquarters and would require your explicit consent in which to do so. This could be for the reason of being ordained as a minister, where a photo identification card with your name will be sent to Patterson New Jersey, USA.

St Michael’s Privacy Policy section 18.3, refers to international data transfer safeguards, using Zoom GDPR which contains specific rules for the transfer of personal data to countries outside the European Economic Area (EEA). In principle, your personal data may only be transferred to countries outside the EEA if the country has an adequate level of protection, select the link to Zoom GDPR

As St Michael’s CJC is part of the same legal entity as the International Headquarters in Patterson, New Jersey, USA the transfer restriction of the UK GDPR does not apply, and the international data transfer assessment is not required.

9. Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – It is your right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – It is your right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

Right to withdraw consent - You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at: admin@stmichaelscjc.org.

Address: Suite 166, Rye House, 161 High Street, HA4 8JY

10.0 Social Media

As a church, we use social media to promote our services and events, increasing brand visibility, engaging with audiences, and increasing the church and events memberships.

Social media promotions involve various marketing activities on platforms as Instagram and TikTok.

The social media platforms help our church connect with audiences, build brand loyalty, and generate leads. Effective strategies include organic content creation and influencer collaborations.

Common strategies include using hashtags, engaging with followers, running contests, and leveraging user generated content.

Social media promotions can increase brand awareness, drive website traffic, and improve member retention. They allow for real-time engagement and personalised experience.

A structured approach involves clear goals, choosing appropriate platforms, creating engaging content, and monitoring performance to optimise results. These strategies and benefits highlight the critical role of social media promotions in modern marketing.

More information can be found in our social media Policy.

11.0 How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at: admin@stmichaelscjc.org or write to Suite 166, Rye House, 161 High Street, HA4 8JY.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address is:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Our Contact Details

Name:

St Michaels CJC Apostolic

Address:

Suite 166, Rye House, 161 High Street, HA4 8JY

Phone No.:

07587 344483

Email:

Admin@stmichaelscjc.org

Website:

www.stmichalscjc.org

Charity No.:

1182176