We aim to be clear, concise and transparent. If you have any questions, please email [email protected], or phone 0131 669 9400.
What personal information does 20schemes collect about you?
We securely store information you have provided to us on third-party client management systems (CMS). The type of information stored would be things like:
- Basic personal information. This may include your name, address, email address, date of birth, etc. We use this data to contact you in line with your preferences.
- Booking information for events. In addition to the above, it may include church information, dietary requirements and health information. We need this data to run our events smoothly and keep people safe.
- Volunteering information. This may include details of relevant certifications you hold, availability, references and a statement of your faith. We need this data to accredit our volunteers for events and ensure they’re a good fit for their roles.
- Donor information. This may include bank details, Gift Aid declarations and donation history. We need this information to process donations.
This information may be collected via paper forms, or digitally, e.g., via our third-party CMS systems, Mailchimp, or by email.
We may also store some information not directly provided by you:
- Mail returns
We may access publicly available information (e.g., Companies House records), or use trusted external providers to do this on our behalf more cost-effectively, to personalise communication and to ensure requests for funds are appropriate and do not cause offence. You can opt out of this processing at any time.
Do we share your personal information?
20schemes shares information with only trusted third parties and/or suppliers in order to deliver postal communications, such as appeal letters, email communications like our monthly e-News, and carry out activities which enable our charitable purpose. This information is only available to these partners in order to fulfil those tasks.
Disclosure of your information
We may disclose information in special cases when we have reason to believe that disclosing this information is:
- necessary to comply with the law
- to enforce or apply our Terms and Conditions
- to protect our rights and those of our users
Can I access any personal information you hold on me?
Access to your personal data is subject to GDPR. This is called a Subject Access Request. You can request access to this information at any time. You can request data is corrected, amended or removed, and can request that data is no longer processed.
You can submit a Subject Access Request by emailing [email protected]. You can also submit a request by post, to:
Data Protection Officer
Niddrie Community Church
On requesting your data, we will issue a form for you to complete and return to us. Once we have received your completed form, we will respond to your request within 30 calendar days.
On what basis can you contact me and retain my data?
We are using legitimate interest as the legal basis for holding our existing supporters’ details, administering donations, keeping relevant records, providing news and information about our ministry and asking for financial and non-financial support (e.g., volunteering or praying) by postal mailings.
20schemes will use Legitimate Interest Assessments (LIA) to ensure that the principles of data protection are followed and will ensure that a clear opt-out opportunity is included in each mailing. Our legitimate interests include furthering our charitable objectives and providing the service our supporters reasonably expect. We rely on explicit consent to send electronic newsletters and appeals to supporters who have indicated they are happy to receive these communications.
We will keep your information for as long as required to enable us to operate our services, but we will not keep your information for any longer than is necessary. We will take into consideration our legal obligations and industry standards or best practice when determining how long we should retain your information.
Once your information is no longer required for business purposes and has reached the end of its recommended retention period, we will ensure that it is securely disposed of.
What options do I have?
Some information is necessary to provide services, e.g., your email address is needed if you want to receive communications by email, and health information is necessary for events.
Other information may be required by law.
Other information is optional, but may affect our ability to communicate with you, or affect your ability to fully participate in our ministry.
To edit any data we hold about you, withdraw your consent to our processing, or opt out of any mailings, please email [email protected], or phone 0131 669 9400.
Terms and Conditions, notices and revisions