privacy policy.

Collection

What Data Do We Collect?

We collect personal information you provide when you:

• Contact us — including your name, address, email address, phone number, and date of birth
• Apply for support or attend an event
• Make a donation, set up a tithe, or provide Gift Aid information
• Order from our shop — your name, email address, phone number and, for goods, your delivery address. Card details go straight to the payment provider; we never see or store them
• Buy an online course — as well as the details above, your home church and your confirmation that you are 18 or over. We pass your name, email address, phone number, home church and the course you bought to our learning portal so that your access can be set up
• Submit a testimonial or review
• Interact with us on social media platforms (Facebook, WhatsApp, Instagram, Vimeo)
• Sign up for one of our newsletters or other communications
• Enter a survey or request a callback

When you apply for a role or ministry position (including as a Minister in Training), we may additionally collect bank account details, tax and residency status, references, qualifications, health information, and details of unspent criminal convictions. Special category data (racial or ethnic origin, religion, health, biometric data, sexual orientation) is processed only with explicit consent or as required by law.

When you visit our website, our server records standard technical details in its logs: your IP address, your browser and device type, the page you asked for and the time. We use these to keep the site secure and working.

We count visits to our website using a privacy-friendly tool run for us by our website provider, Twelve32 Ltd, on its own server in the European Union. It records the page visited, the website you came from, your browser and device type, and your country. It sets no cookies, stores nothing on your device, does not keep your IP address and cannot identify you or follow you to other websites.

Purpose

How Do We Use Your Data?

All personal data is stored securely in accordance with the Data Protection Act 2018 and UK GDPR. We use your data to:

• Provide and manage your access to our services and website
• Administer and manage our relationship with you, including responding to communications
• Send transactional messages relating to events, courses, or services you have registered for
• Keep our website secure and working, and gather feedback to improve our services
• Comply with legal or regulatory requirements
• Establish, exercise, or defend legal claims

Direct Marketing: We may send you email newsletters and updates you have subscribed to. You may unsubscribe at any time by clicking the ‘unsubscribe’ link in any email or by contacting us. We will not send unsolicited marketing or spam and will take all reasonable steps to protect your rights under the UK GDPR and the Privacy and Electronic Communications Regulations.

Legal Grounds

Lawful Basis for Processing

Under UK GDPR we process your personal data only where at least one lawful basis applies:

• Consent — you have given clear consent to process your data for a specific purpose
• Contract — processing is necessary for the performance of a contract with you
• Legal obligation — processing is necessary for compliance with a legal obligation
• Legitimate interests — processing is necessary for our legitimate interests, where these are not overridden by your rights

We rely on legitimate interests for: keeping records up to date, running and securing our website, measuring marketing effectiveness, complying with regulatory requirements, and analysing how our social media channels are used. If you want to know which basis applies to a particular use of your data, ask us at admin@ntcg.org.uk.

Retention & Security

How We Store, Protect & Share Your Data

Retention: We keep personal data only for as long as it is needed for the purpose it was collected for, or as the law requires. How long that is depends on the purpose; ask us for the period that applies to your data. Once no longer needed, data is securely deleted. Even if you request deletion, we may retain data where required by statute (e.g. for legal, tax, or regulatory purposes).

Security: We have implemented suitable physical, electronic, and managerial procedures to safeguard data collected through our Site. All data is stored electronically in secure databases or locked filing cabinets and is accessible only by authorised personnel trained in UK GDPR. Third parties we engage to process data on our behalf are contractually required to implement appropriate technical and organisational security measures.

Sharing: We do not sell your data. We may share data across NTCG for research and analysis, or with contracted third parties who supply services on our behalf. These organisations process personal data for us in connection with this website, our shop and our online courses:

Our members’, ministers’ and learners’ portal at ntcg.online is run for us by a contracted supplier, on our instructions, and holds the records you see when you sign in there.

Some pages also load scripts from cdnjs (Cloudflare), jsDelivr and the jQuery content delivery network. These services receive your browser’s IP address when a page loads.

We use other suppliers for the wider work of the church, for example for events, giving and staff records. Ask us at admin@ntcg.org.uk for the current list.

We may also share data with professional advisers (lawyers, auditors, insurers), HM Revenue & Customs, regulators, and authorities in the United Kingdom where required. We may transfer data internationally where necessary; in such cases we ensure appropriate safeguards (such as the IDTA) are in place.

Cookies

Cookies

We use the cookies needed for the website, the shop and signing in to work. Our shop also sets cookies that record how you arrived (for example from a search engine), and PayPal sets its own cookies there when its payment button is shown. We do not use analytics or advertising cookies. We count visits without cookies, as described above.

For full details of the cookies we use, their purpose, and how to manage them, please read our Cookie Policy.