Privacy Policy

Privacy Policy

for St Michael the Archangel Church
Tokyngton - Wembley

 

At St Michael the Archangel Church, we are committed to protecting your personal data and respecting your privacy in line with the UK General Data Protection Regulation (UK GDPR).

 

Who we are (Data Controller) - how do you contact us?

St Michael the Archangel, Tokyngton-Wembley, is the data controller for the personal information you provide to us. This means we decide how and why your data is used.

 

Contact details:

St Michael the Archangel Church

St Michaels Avenue

Wembley

HA9 6SL


020 8902 3290


info@stmichaelchurchwembley.co.uk

 

What information we collect and why

We only collect personal information that we need to carry out our work as a church. This may include:

  • Contact details (e.g. name, address, phone, email)
  • Attendance at services, events, or groups
  • Donation/payment information
  • Consent preferences
  • Pastoral or safeguarding-related details (where relevant)

 

We collect this information to:

  • Keep you informed of church activities and events
  • Administer services such as weddings, baptisms, and funerals
  • Process donations and Gift Aid
  • Carry out safeguarding responsibilities
  • Improve the running and usability of our website

Some of the data we collect (e.g. related to pastoral care or safeguarding) may be considered special category data and is treated with the highest level of confidentiality and care.

 

Photography and video

We may take photographs, make video recordings and livestream services, events and activities at St Michael the Archangel Church. Where individuals can be identified, these images and recordings are personal data and will be handled in accordance with this Privacy Notice.

We use photographs and video for purposes such as:

  • Sharing news and information about church activities
  • Illustrating church life on our website
  • Sharing appropriate content through church social media and online communication channels
  • Producing printed church materials
  • Recording or livestreaming services and events, where appropriate consent has been obtained

Where individuals  can be identified in photographs or recordings, we will seek appropriate consent before using their image or recording for these purposes.Photographs and recordings published online may be accessible to people anywhere in the world. We cannot control what others may do with material once it has been published online, including material that has been copied or shared by others.

We may share photographs or recordings with appropriate third-party service providers where this is necessary to produce or publish church communications. This may include website, design, video or media providers.

We will normally retain photographs and recordings for up to five years where this period has been agreed through our Photo & Video Consent Form.

You can withdraw your consent at any time. Where consent is withdrawn, we will stop using the relevant image or recording for future purposes and, where reasonably practicable, remove it from our website and future publications. We cannot necessarily remove material that has already been printed, distributed or copied by others.

If you have any questions about photography, video or livestreaming, or wish to withdraw your consent, please contact us using the details provided above.

Photography, filming or livestreaming arranged independently by a third party, such as a family or external service provider, may be subject to that party’s own privacy arrangements. Where St Michael the Archangel Church is not organising or controlling the photography, filming or livestreaming, the relevant third party is responsible for obtaining any necessary permissions and providing appropriate privacy information.

 

Our legal basis for using your information

We rely on a combination of lawful grounds under UK GDPR, depending on the situation:

  • Consent (e.g. signing up for a newsletter)
  • Legal obligation (e.g. safeguarding or Gift Aid reporting)
  • Contractual necessity (e.g. wedding bookings)
  • Legitimate interest (e.g. maintaining a secure website, staying in touch with church members)

 

Website information and cookies

When you visit our website, we collect anonymised data such as:

  • Pages visited
  • How long you stayed
  • How you found the website

This helps us improve your experience and site performance.

Our website may also use cookies and third-party content (e.g. YouTube, Facebook, SoundCloud, ChurchDesk) which may place cookies on your device. You can control your cookie preferences using the cookie banner and withdraw consent at any time.

 

Cookie Policy

Cookies are small text files placed on your device to help the website function and collect anonymous usage data. We use necessary cookies to enable core functionality such as security, network management, and accessibility.

With your consent, we may also use optional cookies to help us improve the website by collecting and reporting information on how it’s used. These may include cookies from ChurchDesk and third-party platforms like YouTube or Facebook.

You can change your cookie settings at any time through the cookie banner or your browser settings.

 

Sharing your information

We only share your personal information:

  • When necessary to provide a service (e.g. payment providers, ChurchDesk)
  • When required by law (e.g. safeguarding authorities)
  • With third-party processors who are GDPR-compliant and only act on our instructions

We do not sell your data or share it for marketing.

 

How long we keep your data

We keep your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law (e.g. Gift Aid records for 6 years). When it is no longer needed, we securely delete or anonymise it.

 

How we protect your data

We use appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. Any third-party processors we use, including ChurchDesk, are required to meet GDPR standards.

Where possible, we store data within the UK or EU. If data is transferred outside these regions, we ensure adequate protections are in place.

 

Your rights under UK GDPR

You have the right to:

  • Request access to the data we hold about you
  • Correct inaccurate or outdated information
  • Withdraw your consent at any time (where applicable)
  • Object to how we use your data
  • Ask us to delete your data (in some circumstances)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of your rights or make a request, please contact us using the details above.

You can also contact the ICO at https://ico.org.uk or by phone on 0303 123 1113.

 

Last Updated: August 2026.