This policy explains how Christ Congregation — South London District of the Presbyterian Church of Ghana (“we”, “us”, “our”, “the Church”) collects, uses, and protects your personal information. We are committed to handling your data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
For the purposes of data protection law, the data controller is Christ Congregation — South London District, Presbyterian Church of Ghana, meeting at Latimer Hall, Cleves Road, London E6 1QF.
If you have any questions about this policy or how we handle your data, contact us at pcgchristlondon@gmail.com.
2. Information we collect
We only collect personal data that you choose to provide to us, including:
- Contact & enquiry forms: your name, email address, phone number, and the content of your message.
- Prayer requests: your name, optional email, and the prayer request you submit (which you may mark private).
- Visitor / welcome forms: your name, contact details, address, and the information you supply when visiting.
- Member accounts: your name, email, phone, group memberships, and giving records where you are a registered member.
- Newsletter: your email address, if you subscribe.
- Technical data: limited, privacy-respecting information needed to operate and secure the site (see Cookies below).
3. How and why we use your information (lawful basis)
We use your personal data for the following purposes:
- To respond to your enquiries and prayer requests — on the basis of your consent and our legitimate interest in pastoral care.
- To welcome and follow up with visitors — on the basis of your consent.
- To administer membership, groups, and giving records — on the basis of our legitimate interest in running the Church and, where applicable, to meet legal and financial obligations.
- To send newsletters and updates — on the basis of your consent, which you can withdraw at any time.
- To keep the website secure — on the basis of our legitimate interest in protecting our services.
4. How we store and protect your data
Your data is stored securely using Supabase, our hosting and database provider, which acts as a data processor on our behalf. Access to personal data is restricted to authorised church administrators and editors. We apply technical and organisational measures — including encryption in transit, access controls, and role-based permissions — to protect your information.
5. Sharing your information
We do not sell your personal data. We do not share it with third parties for marketing. We may share data only with:
- Service providers who process data on our behalf (e.g. our hosting/database and email delivery providers), under appropriate agreements.
- The wider Presbyterian Church of Ghana structures where necessary for church administration.
- Authorities where we are required to do so by law.
6. How long we keep your data
We keep personal data only for as long as necessary for the purpose it was collected. Enquiry and prayer-request messages are typically retained for up to 24 months. Member and financial records are retained for as long as you remain a member and for any period required by law thereafter. Newsletter subscriptions are kept until you unsubscribe.
7. Your rights
Under UK GDPR you have the right to:
- Be informed about how your data is used (this policy).
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data (“right to be forgotten”).
- Restrict or object to our processing of your data.
- Request portability of your data.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email pcgchristlondon@gmail.com. We will respond within one month.
8. Cookies
Our website uses only essential cookies required for core functionality and to keep your session secure when you log in to the member portal. We do not use advertising or third-party tracking cookies. You can control cookies through your browser settings.
9. Complaints
If you are concerned about how we handle your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.