Legal

Privacy Policy

Last updated: September 2026 · All Saints’ Church, Winterton, Diocese of Lincoln, Lincolnshire

1. Who We Are

All Saints’ Church, Winterton ("we", "us", "our") is the Church of England parish church of Winterton, part of the Diocese of Lincoln.

This policy explains how we collect, use, store and protect your personal data when you visit this website, get in touch, or take part in church life and events.

The Parochial Church Council (PCC) is the data controller for personal data collected about you through the church and this website — responsible for deciding how and why it's used, and for keeping it safe.

2. What Data We Collect

Data you give us directly: your name, email address and any message content when you use the contact form on this site; details you share when you book a baptism, wedding, funeral or other occasional office; and information you give us if you volunteer or take part in church events and activities.

Collected automatically via the website: your IP address and browser type, and anything submitted through the contact form, which is processed by Formspree.

We don't collect more than we need. If something isn't necessary to respond to you or run a church activity, we don't ask for it or keep it.

3. How We Use Your Data

Your data is only used for specific, legitimate purposes: responding to enquiries; arranging baptisms, weddings, funerals and other services; administering church activities and events; keeping basic financial records for the PCC and HMRC; and safeguarding purposes where relevant.

Your data is never sold or used for marketing without your clear consent. We don't run third-party mailing lists or advertising, and we don't share your details with anyone for their own marketing purposes.

4. Lawful Basis for Processing

Under UK GDPR, we rely on: Legitimate interest (responding to enquiries, running church activities and keeping in touch with the congregation); Legal obligation (keeping financial and parish records, and safeguarding requirements under Church of England policy); Contract (arranging a baptism, wedding or funeral you've booked); and Consent (for anything else, which you can withdraw at any time).

5. Who We Share Your Data With

Personal data is shared only where necessary: with Formspree (processes contact form submissions), the Diocese of Lincoln where required for occasional offices or safeguarding, and HMRC or UK regulators where legally required.

Your data is never sold, rented or shared with marketing companies or data brokers.

6. How Long We Keep Your Data

Parish registers (baptisms, weddings, funerals) are retained permanently as a legal and historical requirement of the Church of England. Contact form enquiries are kept only as long as needed to respond, and no longer than 12 months. Financial records are kept for six years as required by HMRC. When data is no longer needed, it's securely deleted — you can ask for earlier deletion at any time (Section 9), except where we're required by law or Church record-keeping rules to retain it.

7. Your Rights

Under UK GDPR you have the right to: access a copy of the data we hold about you; have inaccurate data corrected; have data erased where it's no longer needed or you withdraw consent; restrict processing while you contest its accuracy; receive your data in a portable format; object to processing based on legitimate interest; withdraw consent at any time; and complain to the ICO if you believe your data has been mishandled (ico.org.uk, 0303 123 1113). There's never a charge to exercise any of these.

8. Cookies & Website Usage

This website uses only what's strictly necessary to function, plus the contact form and click-to-load map and video embeds. Full detail is in the Cookie Policy.

The contact form is provided by Formspree, a third-party service that processes submissions so they reach us by email — see their own privacy policy for how they handle data in transit.

9. Contact Us About Your Data

If you have any questions about this policy, want to exercise your rights, or have any concern about how your data is handled, get in touch: officeaswinterton@gmail.com.

You also have the right to complain to the UK's regulator, the Information Commissioner's Office: ico.org.uk, 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. Changes to This Policy

This policy may be updated from time to time to reflect changes in parish life, or in the law. The "Last updated" date above will change when that happens.