Privacy Notice

Bramhall Parish Church takes the privacy of personal information seriously. This notice explains how St Michael & All Angels Parochial Church Council (PCC) collects, uses, stores and protects personal information.

We aim to handle personal information fairly, lawfully and transparently, in accordance with UK data protection law.

Who we are

For the purposes of data protection law, the data controller is:

The Parochial Church Council of St Michael & All Angels, Bramhall
St Michaels Avenue
Bramhall
Stockport
SK7 2PG

If you have any questions about how we use personal information, please contact the Parish Office.

Telephone: 0161 439 3989
Email: office@bramhall.church

What personal information we may collect

The information we hold will depend on your relationship with the church.

It may include:

  • your name and contact details;

  • information you provide when enquiring about church services, activities or venue hire;

  • information relating to baptisms, weddings, funerals and other pastoral or church services;

  • information about participation in groups, activities, volunteering or church life;

  • information necessary for safeguarding and safer recruitment;

  • financial information relating to donations, payments or Gift Aid;

  • information provided when subscribing to church communications;

  • photographs or video where appropriate;

  • correspondence between you and the church; and

  • information you submit through forms on our website or other systems we use.

In some circumstances, we may need to process information regarded as special category data, for example information concerning religious belief, health or pastoral circumstances. We only do this where there is an appropriate lawful basis and condition for doing so.

Why we use personal information

We may use personal information to:

  • provide worship, pastoral ministry and other activities of the church;

  • communicate with members of the congregation and wider community;

  • administer church groups, activities and events;

  • organise baptisms, weddings, funerals and other occasional offices;

  • respond to enquiries and requests for pastoral support;

  • manage volunteers, employees and office holders;

  • carry out safeguarding and safer recruitment responsibilities;

  • manage bookings and the hire of church premises;

  • administer donations, Gift Aid and other financial matters;

  • maintain church records where required;

  • comply with our legal and regulatory responsibilities;

  • manage and improve our website and communications; and

  • keep people informed about church news and activities where they have asked us to do so.

We will not use personal information for purposes that are incompatible with the reason it was originally collected without considering the appropriate legal basis and, where necessary, providing further information.

Our lawful basis for using your information

Different lawful bases may apply depending on why we are using your information.

These may include:

Consent
Where you have actively agreed to a particular use of your information, for example receiving certain communications or agreeing to the use of an image.

Contract
Where processing is necessary in connection with an agreement with you, for example a venue hire booking.

Legal obligation
Where we are required to use or retain information in order to comply with the law, including some financial, safeguarding, employment and record-keeping responsibilities.

Legitimate interests
Where it is necessary for the reasonable operation of the church and its ministry, provided that those interests do not override your rights and interests.

These interests may include administering the church, communicating with people with an existing relationship with the parish, maintaining appropriate records, organising activities and supporting the mission and ministry of the church.

The ICO requires organisations relying on legitimate interests to identify those interests and consider whether the processing is necessary and appropriately balanced against the individual’s rights. ICO

In some circumstances other lawful bases or additional conditions may apply, particularly where special category information is involved.

Children and young people

We may collect personal information about children and young people who take part in church activities.

We take particular care with this information and only collect what is necessary for the activity, safeguarding, emergency contact or administration concerned.

Where appropriate, information will be obtained from or provided to parents or carers.

Photographs and video

Photographs and video may sometimes be taken during church services, events and activities.

Where identifiable individuals are the focus of photographs or recordings, particularly children and young people, we will seek appropriate permission where required.

Some photographs may be used on our website, social media channels, printed publicity or other church communications.

Church communications

If you ask to receive newsletters, emails or other church communications, we will use your contact details for that purpose.

You can ask us to stop sending these communications at any time.

Some communications may be sent on the basis of consent, while others may be sent where there is another appropriate lawful basis arising from your relationship with the church.

Donations and Gift Aid

If you make a donation, we may need to retain information about the donation for financial administration and accounting purposes.

If you make a Gift Aid declaration, we are required to retain and process certain information in accordance with HM Revenue & Customs requirements.

Payment information may also be processed by banks, payment providers or other organisations involved in handling the transaction.

Safeguarding

We may need to collect, use or share personal information where necessary to protect children or adults at risk, manage safeguarding concerns or fulfil the safeguarding responsibilities of the PCC.

Safeguarding information will be handled carefully and access restricted to those who need to know.

Where appropriate, information may be shared with organisations such as the Diocese of Chester, statutory authorities or other safeguarding bodies.

Who we may share information with

We do not sell personal information.

Where necessary and lawful, information may be shared with organisations or individuals such as:

  • the Diocese of Chester and other Church of England bodies;

  • HM Revenue & Customs and other regulatory or statutory authorities;

  • safeguarding agencies and statutory services;

  • our professional advisers;

  • banks and payment providers;

  • insurers;

  • IT, website, email and other service providers acting on our behalf; and

  • other organisations where sharing is necessary to provide a service you have requested or where we are legally required to do so.

Only information necessary for the particular purpose will be shared.

Website and online services

Our website is hosted by Squarespace.

When you use the website, technical information may be collected automatically, including information relating to your device, browser and use of the website.

Some website functions may also involve third-party services such as embedded video, forms, social media or other online tools.

Further information about cookies and similar technologies is available in our Cookie Policy.

Where your information is stored

Personal information may be stored electronically and in paper records.

We take reasonable steps to protect information from unauthorised access, loss, misuse or disclosure.

Some of the organisations providing digital services to us may process information outside the United Kingdom. Where this occurs, we expect appropriate legal safeguards to be in place.

How long we keep information

We do not keep personal information for longer than is necessary.

Different types of church records need to be retained for different periods depending on their purpose and any legal, financial, safeguarding or historical requirements.

We periodically review the information we hold and securely dispose of information that is no longer required.

Some church records may need to be retained permanently because of their legal or historical significance.

Your rights

Depending on the circumstances, you may have rights including the right to:

  • be informed about how your information is used;

  • ask for access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to erase personal information in certain circumstances;

  • ask us to restrict the way information is used;

  • object to certain uses of your information;

  • withdraw consent where we rely on consent; and

  • request transfer of information in certain circumstances.

Not all of these rights apply in every situation.

If you wish to exercise one of your rights, please contact the Parish Office.

UK data protection law generally requires organisations to respond to a valid subject access request within one month, although this can be extended in certain circumstances. ICO

If you have a concern

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to address the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator responsible for data protection.

Further information is available from the Information Commissioner’s Office.

Changes to this notice

We may update this privacy notice when our activities, systems or legal obligations change.

Last reviewed: October 2026