UK GDPR Compliance

This page explains how Holy Family Catholic Church Patchway complies with the UK General Data Protection Regulation (UK GDPR), which governs the protection of personal data in the United Kingdom.

Scope and Applicability

Although Holy Family Catholic Church Patchway does not maintain a user registration system or store personal data in a structured database, we may collect limited personal data through website interactions, including cookies, server logs, and contact form submissions. This data is processed solely for the purpose of facilitating communication, event registration, and community engagement in accordance with UK GDPR.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

• Right of access – to request a copy of the personal data we hold about you
• Right to rectification – to correct inaccurate or incomplete personal data
• Right to erasure – to request deletion of your personal data where there is no compelling reason for its continued processing
• Right to restrict processing – to limit how we use your data under certain conditions
• Right to data portability – to receive your data in a structured, commonly used format
• Right to object – to object to processing based on legitimate interest or direct marketing
• Right not to be subject to automated decision-making – including profiling

How We Comply

We ensure compliance with UK GDPR by:

• Minimising data collection to only what is necessary for communication and event coordination
• Using secure, encrypted contact forms for submissions
• Retaining personal data only for as long as needed for the intended purpose
• Implementing appropriate technical and organisational measures to protect data
• Not selling, sharing, or trading personal data with third parties

Data We Process

The personal data we may process includes:

• Name
• Email address
• Phone number
• Event registration details
• IP address and browser information (via server logs and cookies for site functionality)

Legal Basis for Processing

We process personal data based on:

• Consent – when you voluntarily submit a contact form or register for an event
• Legitimate interest – to maintain communication with members of our congregation and support community activities
• Legal obligation – where required by law, such as safeguarding duties

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us by email at [email protected]. Include your full name, contact details, and a clear description of the right you wish to exercise. We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month of receipt. In complex cases, this may be extended by two further months, and we will inform you within one month if this is necessary.

No Discrimination Policy

You will not be denied any service, charged different prices, or treated unfairly for exercising your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.

Contact Information

If you have questions, concerns, or wish to lodge a complaint regarding your personal data, please contact:

Gareth Sheffield
41 Victoria Street West, Auckland CBD, Auckland 1010, New Zealand
[email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: https://ico.org.uk.