Privacy Policy

Creation Care website (https://www.creationcare.org.uk) – run by The Parochial Church Council (PCC) of St Paul’s Church, Dorking.

This notice relates solely to data processed as part of the Creation Care scheme. The wider privacy policy of St Paul’s Church, Dorking, can be found https://stpaulsdorking.org.uk/User/PrivacyPolicy.aspx

1. Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”) and the Data Protection Act 2018.

2. Who are we?

The PCC of St Paul’s Church, Dorking is the “data controller” (contact details below) for the Creation Care website. This means it decides how your personal data is processed and for what purposes. In general, all employees, office holders and other volunteer workers of the Church act for the PCC in this respect. Exceptionally, however, the Incumbent may sometimes act as a separate data controller, determining the manner and/or purposes of data processing independently.

3. How do we process your personal data?

We comply with our obligations under the “GDPR” by keeping personal data secure, storing and destroying it securely and ensuring that appropriate technical measures are in place to protect it from loss, misuse, unauthorised access and disclosure. We do not collect or retain excessive amounts of data; and strive to keep the data up to date.

We use your personal data for the following purposes:

• To enable us to provide you with a tool to assess how your household cares for creation, and administer the awards;
• To inform the church which your account is affiliated with when your household achieves a Creation Care award (only if you have selected a church in the Church Affiliation field of the households form). If your church is affiliated to the Salvation Army, a few members of staff at Salvation Army Head Office will also be able to see your award level and household name.
• To provide you with information which we think will interest you (only if you sign-up to our email list).

Questionnaire data

The personal data processed by us comprises of:

1. your email address used when registering for an account on our website
2. the data you enter in the Household questionnaire, which is used to assess your award level. This includes questions around how you care for the environment through the following areas of your household’s life: worship & prayer, your home, your garden, travel, food, possessions and community & global engagement.

We will use your questionnaire data to administer the awards scheme. We will not share your responses with others.

We may occasionally email you to respond to queries you send us about the scheme, inform you of any important changes to the scheme, or if we need to contact you in order to comply with legal requirements such as GDPR.

Your data is held safely on our database and can be removed/deleted upon request. To remove your data, use the “Delete my account & data” option in our contact us form https://creationcare.org.uk/contact-us/

Email newsletter sign-up

If you choose to sign up to the Email Newsletter, we will collect your name and email address and use this information to send you an email newsletter approximately once a month. You can subscribe to the email newsletter without registering for an account on the Creation Care website. Similarly, you can have a Creation Care website account without subscribing to the email newsletter. You can unsubscribe from the email list at any time using the link in the footer of the email newsletter.

The email list is managed using a third party based in the USA. They protect EU personal data in accordance with Privacy Shield Principles, allowing them to lawfully receive EU data.

Cookies

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

4. What is the legal basis for processing your personal data?

Our data processing is carried out on the basis that the individual concerned has given their explicit consent.

Under “GDPR”, the processing of specified categories of ‘sensitive’ data is subject to additional rules and normally requires the data subject to have given explicit consent. This includes data about your religious beliefs. This website includes optional questions about how often you pray about environmental issues, and also about your church affiliation. We do this on the basis that the individual concerned has given their explicit consent. We do not disclose this data to anyone else without your consent.

5. Sharing your personal data

Your personal data will be treated as strictly confidential and will only be seen by members of the team involved in administering the Creation Care website. We will only share your data with third parties where this is necessary for the performance of our tasks or where you have given us consent.

If your church is taking part in the scheme, and you link your account to them (via the Church Affiliation field on the Households page), we will inform the contact person for your church when you achieve an award. They may use this information to present certificates. The data we share will include the Household Name (this is whatever you enter in the ‘Household name’ field on the Household page) and the award level you have achieved. They will not be able to see your responses to questions, and we will not share your email address. If you do not wish us to share data about your household name and award level, you can unlink your account from the church at any time by deleting the church in the ‘Church Affiliation’ field.

6. How long do we keep your personal data?

Our general rule is to keep data no longer than necessary, guided by the document “Keep or Bin: Care of Your Parish Records” which is available from the Church of England’s website. Your account and associated data will be deleted if you do not log into it for five years.

7. Your rights and your personal data

Other than in those circumstances where the “GDPR” provides exemptions, you have the following rights with respect to your personal data:

• The right to request a copy of the personal data that we hold about you;
• The right to request us to correct any personal data if it is found to be inaccurate or out of date;
• The right to request your personal data is erased where it is no longer necessary for us to retain such data;
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
• The right to object to the processing of personal data, where that processing constitutes ‘direct marketing’;
• The right, where the lawful basis for processing is your consent, for you to withdraw that consent at any time;
• The right (in certain, very limited situations) to request us to transfer your personal data to another data controller;
• The right to lodge a complaint with the Information Commissioner’s Office.

8. Further processing

If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

9. Contact Details

To exercise all relevant rights, queries or complaints please in the first instance contact the Creation Care scheme administrator, via the ‘Contact us’ page or by emailing eco@stpaulsdorking.org.uk

If you do not feel your issue has been resolved satisfactorily, you can contact the St Paul’s Parish Administrator on 01306 743378 or by e-mail at reception@stpaulsdorking.org.uk

You can contact the Information Commissioner’s Office on 0303 123 1113, via email at https://ico.org.uk/global/contact-us/email/or at the Information Commissioner’s Office: Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

Date policy updated: 14 January 2021