Website/National Office Database Privacy Policy

We are GOOD NEWS for Everyone! (“GNFE”, “we”, “us”), a Registered Charity in England and Wales (221605) and in Scotland (SC039224). Our contact details (National Office) are:

Address:		GOOD NEWS for Everyone! Western House 24 George Street Lutterworth LE17 4EE
Email:		info@goodnewsuk.com
Telephone:		01455 554241

This Privacy Policy is required under, “Data Protection Law”, meaning all law relating to the processing of Personal Data and privacy in force from time to time, including the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (as amended).

This policy describes what information Personal Data we collect about you (your ‘Personal Data’) through the use of our website www.goodnewsuk.com / National Office Database, the purposes for which we collect it and how we will handle and use it.

For the purposes of Data Protection Law, we are considered as the ‘Controller’ of the Personal Data we collect and hold about you and we are therefore responsible for it.

Our Executive Director, who is responsible for all matters relating to the protection of Personal Data is Iain Mair, can be contacted at info@goodnewsuk.com.

We are registered with the Information Commissioner’s Office (“ICO”) with registration number ZA263098.

1. INFORMATION ABOUT YOU

By using our website / National Office Database we may collect information about you in the following ways:

1.1 Information which you give us
We collect information about you when you fill in forms on our website / National Office Database and when you communicate with us. We collect information when you email or telephone us, access our website, change your contact information on the National Office Database, place an order for goods from the online shop, and / or make a donation. This can include your full name, address, email address, phone number and financial and credit card information.

We may receive information about you from third parties who provide copies of your Personal Data, including family, friends, colleagues, businesses, churches, and dioceses.

1.2 Information we collect about you
By visiting our website or communicating with us, we will collect information from you directly and indirectly. Information that we collect may include “Special Category Personal Data” which is especially sensitive and requires a particular condition under Data Protection Law to be processed by us. We have an appropriate policy document which sets out how and why we use this information.

2. WHY WE COLLECT INFORMATION ABOUT YOU

In this section we list the different processing activities that we complete when we process your Personal Data. We describe the nature of the processing and the legal basis for each processing activity as follows:

Personal Information	Purpose	Categories of Personal Data	Legal Basis for processing Personal Data
Contact information: Name, address, telephone number, email address, Financial Information: Bank account number, sort code, credit/debit card number and CVV number, tax status and tax residency status	To provide a service which receives electronic donations via the online portal	Contact details, payment information	Where we collect this information about you we comply with our legal obligations to comply with fundraising and charity accounting laws, money laundering regulation. Where we collect information about you whilst making a donation, we have a legitimate interest to ensure your donation is made without error, can be legally made by you, and communicating to you about your donation.
Personal details of members are maintained on the National Office Database.	To effectively administer membership records and support volunteers; in order to send items of communication, either by post or email; and to put members (volunteers) in touch with each other as may be required from time to time.
Details of Trusts, whom we believe may have an interest in supporting GNFE, are held to enable funding applications to be sent from time to time.	To raise funds in order to more effectively achieve the objectives of the Association.
Contact details for Friends of GNFE, Church Leaders and other supporters. Existing Friends will continue to receive GNFE magazine and the Daily Prayer Diary under Legitimate Interests; new Friends and Church Leaders will be required to ‘Opt-in’ in order to receive publications and/or contact from GNFE and may ‘Opt-out’ at anytime by notifying local members and/or GNFE National Office.	To send the GNFE magazine and Daily Prayer Diary twice each year; branch local newsletters; and, from time to time, invitations to various GNFE Events.
Personal details are maintained of employees, including records of regular performance reviews and records of sickness/absence.	To manage our employees.
Records are kept of who/where donations are received from.	To properly account for funds received. To maintain our own accounts and records, send thank you letters and other information that may be appropriate.

3. DISCLOSURE OF YOUR INFORMATION

At times we may share your information with others. The following is a list of who we will or might share your information with:

Any contractors and service suppliers who act on our behalf;
Website/National Office Database developers and administrators;
Payment service providers;
Analysts and consultants who might help us improve and optimise our website;
Auditors;
Legal advisors;
Service providers who assist us with protecting ourselves from fraud and money-laundering;
Law enforcement authorities;
Organisations which we may have a legal obligation to disclose information to.

Your information will not be sold to or provided to any marketing/sales/fundraising organisation or used in any unauthorised way. We reserve the right to engage in direct marketing ourselves. Where we do so we will ensure that this is carried out in accordance with applicable Data Protection Laws relating to electronic communications and marketing.

4. DATA PROTECTION AND SECURITY

We take data protection and security very seriously and operate technical and organisational measures to ensure your data is protected from unauthorised processing, including unauthorised access, deletion, or modification.

All your personal information covered by this policy will be stored in the UK. We will not transfer your information outside the UK unless we are permitted to do so by applicable Data Protection Law, and we will inform you about such transfer before it is done.

When we share information with third parties as described in section 3 above, we will maintain contracts with those parties which govern the sharing of that Personal Data. Our contractual arrangements with those third parties shall include data security and confidentiality obligations which ensure technical and organisational measures to protect your Personal Data are aligned between us and the third party.

5. RETENTION OF DATA

We will only keep your data for as long as necessary to provide the services that contribute to our charitable purposes, and to satisfy any requirements imposed on us by law.

The retention periods for different types of Personal Data are set out in our retention schedule. Please contact us if you would like more information about our retention periods.

We may pseudonymise Personal Data that we hold in order to suppress that information from identifying a specific person.

As a general rule we will keep the personal information covered by this policy for a period of up to seven years from the end of your relationship with the charity, although in some circumstances it may be shorter. All data will be safely and securely deleted / destroyed.

6. YOUR RIGHTS IN RELATION TO YOUR DATA

You have a number of rights under Data Protection Law. These include:

The right to access your Personal Data and to obtain certain information about it;
The right to rectify the data if it is inaccurate;
In some circumstances, such as when the data is no longer required or if the use of the data has no legal justification, the right to have that data erased;
The right to object to our handling of the data;
The right to restrict the handling of your data;
The right to obtain a copy of your data in a commonly used electronic form if the data is processed by automated means and the processing is based on your consent or contractual necessity.

More details about how we respect your rights can be found in our Data Protection Policy which can be obtained from National Office. You can find more information about your rights by visiting the website of the Information Commissioner’s Office at www.ico.org.uk

You also have the right to withdraw your consent at any time when we rely on consent as a legal ground to justify our handling of your Personal Data. This would not affect the lawfulness of anything done before consent is withdrawn but it would stop us from continuing to use the relevant information. We may not be able to provide any services to you if you withdraw your consent and we have no other legal basis to process your Personal Data.

7. COMPLAINTS ABOUT YOUR DATA PROTECTION RIGHTS

You are entitled to complain about how we process your Personal Data. We are required to maintain a data protection complaints policy which is available alongside our standard complaints policy. If you would like to see our Data Protection Complaints Policy, please contact us using the information at the top of this notice.

You have a right to complain to the Information Commissioner’s Office (ICO) about the way in which we collect and handle your Personal Data. However, Data Protection Law requires you to direct any complaint to us to deal with in the first instance. If you remain unhappy you may complain to the ICO at that point. Complaints to the ICO can be made on the ICO’s website https://ico.org.uk/.

8. THIRD PARTY WEBSITES

Our website may refer or contain links to other websites. Please note that this privacy policy does not apply to information collected through these websites and we are not responsible for the information that those websites collect. You are encouraged to view the privacy policy of any third-party website before giving any Personal Data to those websites.

9. AUTOMATED DECISION-MAKING AND PROFILING

We do not use any automated decision-making processes which require the processing of your Personal Data.

10. COOKIES

Cookies are small files which websites store on your computer and which contain various types of information about your visit to a website. They are not viruses or malicious software, but they are generally aimed at providing you with a good experience when browsing a site by, for example, remembering your preferences so that you do not need to reset them every time you visit the website.

We use Cookies on our website. For more information about how and why we use cookies on our website, please see our cookie policy.

11. CHANGES TO THIS POLICY

We may change this privacy policy in which case we will upload the updated policy on the website.

12. INFORMATION COMMISSIONER'S OFFICE

If you would like more information about data protection, data security, and your rights as a data subject, please visit the website of the Information Commissioner’s Office at www.ico.org.uk

13. CONTACT

Should you have any questions, concerns or requests please contact our Executive Director on info@goodnewsuk.com