Covenant Portadown Church
Website: covenantchurch.co.uk

1. Introduction

Covenant Portadown Church values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website, attend our events, or engage with our ministries. By using our website or providing personal information to us, you consent to the practices described in this policy.

2. Data Collected

Data Storage Location
We are based in Northern Ireland and operate servers hosted in the UK and EU. Our hosting provider complies with GDPR regulations, ensuring that your information is securely stored and handled in accordance with applicable data protection laws.

Registration Data
If you register on our website (for example, for events, groups, or volunteer activities), we may store your name, email address, phone number, and any additional information you provide. You may request to view, edit, or delete this information at any time by contacting us.

Donations and Financial Data
If you make a donation or payment to the church online, your financial information is processed securely by our payment provider. We do not store full credit or debit card details on our systems.

Communication Data
If you contact us through our website, email, or contact forms, the information you provide (such as name, email address, and message content) will be stored securely and used only for the purpose of responding to your enquiry or providing pastoral support.

Support and Pastoral Care Data
When you seek pastoral support or prayer requests, you may provide sensitive information. This information will only be shared with relevant church staff or leaders on a strict need-to-know basis and will be treated with the highest confidentiality.

Comments
When visitors leave comments or posts on our website, we collect the data shown in the form, along with the visitor’s IP address and browser user agent string to help detect spam.

Analytics
We use Google Analytics to help us understand how visitors use our website. This data is anonymous and cannot identify you personally.

Use of Personal Data
We may use your personal information for the following purposes:

• Verifying your registration for church events or services

• Providing pastoral care and ministry support

• Sending updates, newsletters, or important church announcements (with your consent)

• Processing donations and Gift Aid where applicable

• Maintaining the safety and integrity of church records

• Complying with safeguarding, legal, or regulatory obligations

3. Embedded Content

Our website may include embedded content such as videos, livestreams, or social media feeds (e.g. Facebook, YouTube). Embedded content behaves in the same way as if you visited those platforms directly. These platforms may collect data about you, use cookies, and track your interaction if you are logged in to their services.

4. Cookies

Our website uses cookies (small text files stored on your device) to improve your browsing experience, remember preferences, and collect anonymous usage statistics. You can disable cookies in your browser settings if you prefer.

Types of cookies used:

• Necessary Cookies – required for basic functionality (e.g. session management, login).

• Analytics Cookies – help us understand how visitors use the website.

5. Who Has Access to Your Data

Your personal data may only be accessed by:

• Church administrators and staff responsible for communication, records, and events

• Pastoral leaders providing spiritual care (only if relevant and with your consent)
  We will never sell, trade, or rent your personal information to third parties.

6. Third Party Access to Your Data

We may share limited data with trusted third-party providers in order to deliver services such as online donations, email communications, or website hosting. These providers process data on our behalf and are contractually required to protect your information in compliance with GDPR.

7. Data Retention

We retain personal information only as long as necessary for the purposes for which it was collected. For example:

• Donation and financial records may be retained for 7 years to comply with HMRC requirements.

• Pastoral support notes are retained only as long as necessary for ministry purposes.

• Website registrations or event sign-ups are deleted when no longer required.

8. Security Measures

We use SSL/HTTPS encryption on our website to protect your data in transit. Access to stored personal information is restricted to authorised individuals only. In the event of a data breach, we will take immediate steps to contain the issue, notify affected individuals, and comply with legal obligations.

9. Your Data Rights

You have the following rights under GDPR:

• To request access to the personal data we hold about you

• To request correction or deletion of your data

• To withdraw consent to communication or processing at any time

• To request that your data be transferred to another organisation (where applicable)
  To exercise these rights, please contact us using the details at the end of this policy.

10. Third Party Websites

Our website may include links to third-party websites (such as Christian resources or partner ministries). We are not responsible for the privacy practices of these sites, so please review their policies separately.

11. Release of Your Data for Legal Purposes

We may be required to disclose personal information if requested by law, for safeguarding concerns, or in response to a legal obligation. Any such disclosure will only be made in compliance with applicable laws.