Privacy Policy

1. Introduction

• This Privacy Policy outlines how Christian Fundraising Consultancy Ltd (“we,” “us,” or “our”) handles personal data both within our business operations and on our website.

• We are committed to safeguarding your privacy and complying with the Data Protection Act 2018, the UK GDPR, and other relevant UK legislation.

• As a data controller, we determine how and why personal data is processed. This policy explains what types of personal data we collect, how we use it, and your rights regarding your data.

2. Contact Information

• If you have questions or concerns regarding this Privacy Policy or wish to exercise your data protection rights, please email hello@christianfundraisingconsultancy.com

3. What Information Do We Collect?

We collect various types of personal data, including but not limited to:

• Identity Data: Name, title, and gender.

• Contact Data: Billing address, delivery address, email address, and telephone numbers.

• Financial Data: Bank account and payment details.

• Transaction Data: Details about payments to and from you and other details of services you have purchased from us.

• Technical Data: Internet protocol (IP) address, browser type, and version, time zone setting, browser plug-in types and versions, operating system, and platform.

• Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.

• Usage Data: Information about how you use our website, products, and services.

• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of Contract: To provide the services you have requested.

• Legal Obligation: To comply with our legal obligations, such as tax regulations.

• Legitimate Interests: To manage our relationship with you, including notifying you about changes to our terms or privacy policy, and to improve our services.

• Consent: When you have given explicit consent, particularly for marketing communications.

5. Sharing Your Personal Data

• We may share your personal data with the following categories of recipients:

  • Service Providers: IT and system administration services, payment processors, and other third parties who support our business operations.

  • Professional Advisers: Lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

  • Regulatory Authorities: HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities in certain circumstances.

• We ensure that all third-party service providers respect the security of your personal data and treat it in accordance with the law.

6. International Transfers

• Some of our external third parties may be based outside the UK, so their processing of your personal data will involve a transfer of data outside the UK.

• Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • Adequacy Decision: We may transfer your data to countries that have been deemed to provide an adequate level of protection for personal data by the UK government.

  • Contractual Clauses: We use specific contracts approved by the UK government which give personal data the same protection it has in the UK.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request access to your personal data.

• Rectification: Request correction of inaccurate or incomplete data.

• Erasure: Request deletion of your personal data where there is no good reason for us continuing to process it.

• Restriction: Request restriction of processing of your personal data.

• Portability: Request the transfer of your personal data to you or to a third party.

• Objection: Object to the processing of your personal data where we are relying on legitimate interests (or those of a third party) or processing for direct marketing purposes.

• Withdraw Consent: Withdraw your consent at any time where we are relying on consent to process your personal data.

8. Data Retention

• We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Retention Periods:

  • Client Data: Retained for 6 years after the last interaction.

  • Marketing Data: Retained until you withdraw your consent.

9. Data Protection Principles

We adhere to the following principles when processing your personal data:

• Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and in a transparent manner.

• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

• Data Minimization: Data is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

• Accuracy: Data is accurate and, where necessary, kept up to date.

• Storage Limitation: Data is kept in a form that permits identification for no longer than necessary.

• Integrity and Confidentiality: Data is processed in a manner that ensures appropriate security.

10. Lawful Basis for Processing

We process your personal data under the following lawful bases: