Privacy notice

This privacy notice is provided by the National Giving Team to explain what to expect when we collect and process your personal information in accordance with the UK GDPR.

Data controller(s)

The data controller is:

• Church of England Central Services,

Church House
Great Smith Street
London
SW1P 3AZ

For further information on the Church of England Central Services please go to:

[https://www.churchofengland.org/about/leadership-and-governance/national-church-institutions]

    1. Why we collect and use your personal data

Personal information is collected for the following purpose/s:

• To allow us to manage the application process for receiving a contactless device. 
• Your data will be collected on a Microsoft Form hosted on the NCIs network. The Giving Advisor/s for your diocese has access to the responses where the personal data is stored. This is so the diocese can see in real time which churches have applied to date and contact applicants to resolve any queries about their application. The form will close and the project team (formed of the diocesan Giving Advisor/s and members of the National Giving Team) will then meet together to determine the successful/unsuccessful applicants. 
• Your data (and/or data from others in your church associated with the application) will also be collected by suppliers as part of the onboarding process to receive your device. This data, either in full or in part, may be shared with us if relevant in relation to your contactless donation device.
• To contact representatives from churches participating in the project with details of training events, information about the device they are receiving and other information about the project, including how to make the most of their contactless device. 
• To send you our regular newsletter which may include information about Digital Giving, guidance and advice on Contactless Devices and new updates. 

     2. The lawful basis for using your information

We collect and use personal data under the following lawful bases:

Personal data

• Legitimate Interest

Legitimate Interests Assessment

Because we consider that we have a legitimate interest in processing your personal data, we have undertaken a Legitimate Interests Assessment which sets out why we consider such processing is justified.

For a copy of the full Legitimate Interests Assessment, please contact Grace Emmett whose contact details are set out in section 7 below.

    3. Who we collect from or share your information with:

We collected your information from:

• You directly
• Where relevant, the supplier of the contactless donation device or associated services your church is receiving as part of this project.

We will not share your data with any other third parties except where specified here.

We will be sharing your information with:

• The Giving Advisor in the diocese in which your church is located.
• Where relevant, with the supplier of the contactless donation or associated services your church is receiving as part of this project.  

4. Transferring your information outside of Europe

As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this will happen when using our mailings and survey providers whose servers are located in the USA. Both these organisations comply with the EU’s regulations and operate under what is called the EU-US Privacy Shield (see https://www.privacyshield.gov/Program-Overview). If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

5. How long do we keep your information?

We will keep your data for 6 years after the project has ended. Your data will be stored on the NCIs secure network. Any personal data received from suppliers will be deleted within a month of receipt.

     6. Your rights

You have the following rights regarding your personal data:

• The right to be informed about any data we hold about you;
• The right to request a copy of your personal data which we hold about you;
• The right to withdraw your consent at any time (if applicable);
• The right to request that we correct any personal data if it is found to be inaccurate or out of date;
• The right to request your personal data is erased where it is no longer necessary for us to retain such data;
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
• The right to object to the processing of your personal data (if applicable);
• The right to obtain and reuse your personal data to move, copy or transfer it from one IT system to another (if applicable).

To exercise these rights, please contact the Data Protection Team using the contact information provided below. The NCIs Individual Rights Policy is available on request.

    7. Complaints or concerns

If you have any queries regarding this processing activity, please contact, in the first instance, Grace Emmett by email at This email address is being protected from spambots. You need JavaScript enabled to view it..

If you have any concerns or queries about how the National Giving Team handle your personal data, please contact the Data Protection Officer at:

This email address is being protected from spambots. You need JavaScript enabled to view it.

or online at:  National Church Institutions data protection | The Church of England or Tel: 020 7898 1114.

You have the right to make a complaint at any time to the Information Commissioner online at: Your personal information concerns | ICO, or by phone on 0303 123 1113 (local rate).