1. Introduction

The Parish of Nork with Burgh Heath (“we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the guidance of the Church of England.

This notice is issued on behalf of the Parochial Church Council (PCC) of the Parish of Nork with Burgh Heath which is the data controller.

2. What Information We Collect

We may collect and process the following types of personal data:

  • Contact details – name, address, email, phone number
  • Personal details – date of birth, marital status, household composition (if relevant to ministry)
  • Religious data – records of baptisms, confirmations, weddings, funerals, and attendance at services or groups
  • Financial information – donations, Gift Aid declarations, online giving transactions
  • Photographs and videos – including during livestreamed or recorded services and parish events
  • Newsletter preferences – subscription to paper or digital newsletters
  • Volunteer and safeguarding data – DBS checks, rotas, safeguarding records (where applicable)
  • Social media engagement – usernames, posts, comments (if interacting with official parish accounts)

Some of this data is considered special category data, such as information revealing religious beliefs, and is handled with additional care.

3. How We Use Your Information

We use your data for the following purposes:

  • To administer parish records and manage church membership
  • To provide pastoral care and sacramental services
  • To manage rotas, volunteers, safeguarding obligations
  • To process donations, including Gift Aid
  • To communicate via paper newsletters, emails, or printed bulletins
  • To livestream or record church services (with signage and notices)
  • To maintain social media presence and engage with the parish community
  • To share news of events, updates, and fundraising efforts
  • To comply with legal, tax, and Church of England obligations
  • To archive historical parish records

July 2025 2

4. Livestreaming and Photography

We may livestream or record services via platforms such as YouTube or Facebook. This may capture images or audio of those present in the church. Notices are displayed, and areas can be designated outside camera view if requested.

Photographs or videos may also be taken at parish events for use in:

  • Paper newsletters or noticeboards
  • Church website or social media
  • Diocesan publications (with permission)

Consent will be obtained for identifiable images where required, particularly for children or vulnerable individuals.

5. Online Giving

We may use trusted third-party platforms (e.g., Give A Little, PayPal, JustGiving) to process donations. These platforms have their own privacy policies. Your personal data is only shared with us when you choose to disclose it (e.g., for Gift Aid or acknowledgements).

6. Legal Bases for Processing

We rely on one or more of the following legal bases to process your data:

  • Consent – where you have given clear permission (e.g. photography, newsletter subscription)
  • Legal obligation – for Gift Aid, safeguarding, and compliance
  • Public task – for duties carried out by the PCC under Canon Law
  • Legitimate interest – such as promoting church events, managing rotas, and maintaining community contact

For religious data, we rely on Article 9(2)(d) – not-for-profit religious organisation processing.

7. Sharing Your Information

We may share your data with:

  • The Diocese of Guildford, the Church of England, and other relevant church bodies
  • HMRC (for Gift Aid processing)
  • Trusted service providers (e.g. IT systems, mailing services, livestream platforms)
  • Safeguarding authorities or statutory bodies where legally required

We do not and would never sell your data or share it for marketing purposes.

8. How Long We Keep Your Data

We retain your personal data only as long as necessary:

  • Gift Aid – 6 years after the last donation
  • Sacramental records – permanent, as required by Canon Law
  • Newsletter and consent records – until you withdraw consent or it’s no longer needed
  • Safeguarding records – in accordance with Church of England guidance

9. Your Rights July 2025 3

You have the right to:

  • Request access to your personal data
  • Correct inaccurate or incomplete data
  • Request erasure (in certain circumstances)
  • Withdraw consent where applicable
  • Object to certain types of processing
  • Lodge a complaint with the Information Commissioner’s Office: https://ico.org.uk

10. Security

We take reasonable measures to secure your data, including physical, technical, and administrative safeguards, in line with Church of England data protection guidance.

11. Changes to This Notice

We may update this Privacy Notice periodically. The latest version will be made available at the Parish website: www.norkwithburghheath.com

12. Contact Us

For queries or to exercise your data rights, email: operations@norkwithburghheath.com