Rhema UK & Ireland, Rhema Family Church, and REAME
Effective Date: May 2018
Notice Version: 1.0
Rhema UK & Ireland, Rhema Family Church and REAME understands that your privacy is important and that you care about how your personal data is used and shared. We respect and value the privacy of everyone who visits any of our websites (see later), contacts us in any way, or attends any live events or meetings. We will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.
Please note our websites may contain links to other websites. We have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
INFORMATION ABOUT US
Rhema UK & Ireland is a company limited by guarantee (Registered number 09106501) and is registered with the UK Charity Commission (Charity number 1150046). Our registered office is:
3 Newhouse Business Centre, Old Crawley Road, Horsham, West Sussex, RH12 4RU
Our websites include www.rhemauk.com, www.rhemafamilychurch.org, and www.rhema.eu.
THE INFORMATION WE COLLECT ABOUT YOU
Some of the ways information is collected include:
When you contact us by mail, telephone, e mail, or interact with us through electronic means – including websites, social media, discussion groups, conference calls, mobile applications;
When you support us through donations or purchases goods or services;
If you take up a voluntary, contracted, or employment position;
Where we provide services to you;
When you give information in person
The information you give us may include identifiers such as your name, postal address, e-mail address, phone number, church attended, credit card or financial information, other personal information, description, age and/or photographs. Other information will be required if you are a volunteer, employee, student or instructor.
All activities of Rhema may be recorded and photographed. Images of the people attending or participating in the activity or other event may be used in print material, promotional videos, live-streaming and for other promotional purposes and commercial activities. By attending any event, service or other activity you agree to Rhema using your image and personal information in these recordings. In addition, the following may be collected during a website visit:
Technical information, including your Internet protocol (IP) address (used to connect your computer to the Internet), your login information (if appropriate), browser type and version, time zone setting, browser plug-in types and versions, and operating system and platform;
Information about your visit.
If you are an employee, volunteer, an RBC student or alumni, or a church congregant we may also hold certain categories of sensitive information such as personal financial details, gender, marital status, full employment and educational history, references, medical and criminal records, and student records.
Where practicable, the purpose for which we collect personal information will be made clear at the time of collection. If you do not provide us with certain information we may be unable to provide you with certain services or assistance requested.
We also gather information on children with the consent of Parents / carers. Relevant information will also be given to children in an appropriate way. At the age of 13 children will also be asked for their permission for storing their information.
WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR DATA?
The legal basis for processing personal data differs depending upon the purpose it was collected for. This includes consent, agreement, for legitimate interests, or for legal reasons.
To receive details of the basis on which we hold personal information on you please contact firstname.lastname@example.org.
You have various rights under GDPR, which this policy upholds:
The right to be informed about our collection and use of personal data;
The right of access to the personal data we hold about you;
The right to correct any personal data we hold about you that is inaccurate;
You have a right to ask us to delete any personal data we hold about you. To do this please email us at email@example.com. An exception is where we are required to hold the data by law or because we must have the information for a particular reason e.g. for Gift aid, safeguarding or student records.
The right to restrict (i.e. prevent) the processing of your personal data;
The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
The right to object to us using your personal data for particular purposes; and
Rights with respect to automated decision making and profiling.
Data that is held on consent will only be processed as long as we have your consent. To withdraw your consent, you can contact us by emailing us at firstname.lastname@example.org.
If you have any cause for complaint about our use of your personal data, please contact us at email@example.com and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office. For further information about your rights, please contact the Information Commissioner’s Office, see www.ico.org.uk.
ACCESS TO YOUR INFORMATION
You can request access to the personal information that Rhema holds about you by contacting the Data Lead. Rhema will provide you with access to your personal information unless legally authorised to refuse your request. Rhema does not charge for providing reasonable access.
If you wish to change personal information that is out of date or inaccurate at any time, please contact firstname.lastname@example.org. After notice from you, Rhema will take reasonable steps to correct your information. If you wish to have your personal information deleted, please advise Rhema and that information will be deleted wherever practicable.
Rhema may refuse your request to access, amend or delete your personal information in certain circumstances. If Rhema does refuse your request, you will be provided with a reason for such decision and, in the case of amendment, it will be noted with your personal information that you have disputed its accuracy.
HOW WILL WE USE THIS INFORMATION?
to establish and maintain your involvement with Rhema;
to provide the products or services you have requested from Rhema;
to answer your enquiry;
to register you for events, conferences or promotions;
to assist us to make our sites, services and products more valuable;
for direct promotion of products or services;
to third parties where they provide the services you have requested; and
to maintain accurate and up to date records or our employees, volunteers, and students.
to run criminal record checks for Safeguarding or employment purposes;
to meet any legal requirements or as per agreements for use of services from Rhema.
to provide Pastoral care or ministry.
Where you have consented when providing us with your details, Rhema may also allow carefully selected third parties, including other ministries and organisations in our group, to contact you occasionally by email about products and services which may be of interest to you. If you change your mind about being contacted by these organisations in the future, please contact email@example.com.
Outside where stated above unless otherwise required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.
Where we transfer any personal data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR.
Only Rhema staff, volunteers (and the staff of our Business Partners) that need to see the data can access it.
We may store your information on computers, in paper form, or both.
All computers that store any personal data are password protected.
Laptop computers and similar devices that contain confidential information are encrypted where possible.
Any paper files that hold personal information (other than names and contact details) are kept on secure premises in locked cupboards and filing cabinets.
Information you provide may be stored on our secure servers or by one of our business partners. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our site or app, or a business partners site or app, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
The services used by Rhema to receive and process payments (PayPal, Square, Stripe, and GoCardless) all use end to end encryption.
HOW LONG DO WE HOLD YOUR DATA?
Generally speaking for the church your information will be held whilst we provide you a service and for seven years after your last contact with us. An exception to this would be if we had to hold it for longer if required for legal or Governmental reasons.
For Students and Alumni we will hold your data for as long as we provide you a service, may need to give a reference or to confirm your qualifications.
Data that is held by us on consent is only kept for as long as we have your consent to process that data.
For full details of how long we will keep your personal information you can contact firstname.lastname@example.org.
Cookies are small amounts of information that Rhema websites store on your computer. Unless you have indicated your objection when disclosing your details to Rhema its system will issue cookies to your computer when you log on to the site. Cookies make it easier for you to log on to and use the site during future visits. They also help to monitor website traffic and to personalise the content of the site for you. You may set up your computer to reject cookies although, in that case, you may not be able to use certain features on Rhema websites. If you do not wish to receive cookies in the future, please contact email@example.com.
Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you.