Last updated: June 2026 

​

At Kidderminster Elim, we are committed to protecting your privacy and handling your personal data responsibly, transparently and securely. 

This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

 

1. Who We Are 

​

Kidderminster Elim is the organisation responsible for processing your personal data (“Data Controller”). 

​

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact: 

​

Kidderminster Elim 
Address: 61 Hoo Road, Kidderminster, DY10 1NB 
Email: info@kidderminsterelim.com  
Telephone: 01562 632563 

 

2. What Personal Data We Collect 

​

Personal data means any information that identifies, or could identify, an individual. 

​

The information we may collect includes: 

​

• Name and contact details (such as address, telephone number and email address) 

• Attendance and ministry involvement records 

• Donation and financial information 

• Emergency contact information 

• Volunteer and team information 

• Safeguarding and DBS-related records where required 

• Communication preferences 

• Information provided through website forms, social media or direct contact 

​

We only collect information that is relevant and necessary for the purposes set out in this policy. 

 

3. How We Collect Personal Data 

​

We may collect personal information when you: 

​

• Register details through our website, forms or social media 

• Make a donation or complete Gift Aid documentation 

• Provide information to church staff or volunteers 

• Purchase goods or services from the church 

• Contact us by email, telephone, post or in person 

• Participate in church activities, events or ministries 

​

Where appropriate, we will explain why information is being collected at the point of collection. 

 

4. How We Use Personal Data 

​

We use personal data to support the ministry and operation of the church, including: 

​

• Day-to-day church administration and governance 

• Pastoral care and communication 

• Coordinating volunteer teams and ministry rotas 

• Managing safeguarding responsibilities 

• Maintaining financial and donation records 

• Organising events and registrations 

• Sending information about church activities, services and resources 

• Producing anonymised statistical information to better understand church demographics and engagement 

​

We do not sell personal data to third parties. 

 

5. Our Legal Basis for Processing 

​

Under UK GDPR, we process personal data using one or more of the following lawful bases: 

​

• Consent – where you have given permission 

• Legitimate Interests – where processing supports the normal activities and administration of the church 

• Legal Obligation – where we are required by law (including safeguarding and financial requirements) 

• Contract – where processing is necessary to provide a requested service or activity 

• Vital Interests – where necessary to protect someone’s wellbeing 

​

Where consent is relied upon, you may withdraw it at any time. 

 

6. Sharing Personal Data 

​

Your information will be treated as confidential and accessed only by authorised staff, leaders and approved volunteers where necessary for church administration and ministry. 

​

We may share information where appropriate with: 

​

• Approved service providers who support church operations 

• Payment and financial processing providers 

• Safeguarding authorities or statutory agencies where required 

• HM Revenue & Customs (for Gift Aid administration) 

• Professional advisers where necessary 

​

We only share information where there is a lawful basis to do so. 

 

7. Storage and Security 

​

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse or disclosure. 

​

Most personal data is securely stored using ChurchSuite. 

​

Certain sensitive records, including safeguarding and DBS documentation where required, may also be stored securely in restricted-access physical storage. 

​

Access to personal data is limited to authorised individuals only. 

 

8. International Data Transfers 

​

Where personal data is stored or processed outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with UK data protection law. 

 

9. How Long We Keep Data 

​

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, meet legal obligations, support safeguarding responsibilities and maintain appropriate administrative records. 

Retention periods may vary depending on the type of information involved. 

When information is no longer required, it will be securely deleted or destroyed. 

 

10. Your Rights 

​

Under UK data protection law, you have the right to: 

​

• Access your personal data 

• Request correction of inaccurate information 

• Request deletion of personal data (where applicable) 

• Restrict how your information is processed 

• Object to certain processing activities 

• Request transfer of your data where applicable 

• Withdraw consent at any time where consent applies 

​

To exercise any of these rights, please contact us using the details above. 

​

You also have the right to raise concerns with the Information Commissioner’s Office (ICO). 

 

11. Website and Cookies 

​

If you use our website, cookies or analytics tools may collect limited information to improve functionality and user experience. 

Where required, consent options will be provided. 

 

12. Changes to This Policy

 

We may update this Privacy Policy from time to time. 

Any updates will be published on our website and the latest version will always be available on request.