Privacy & Data Protection

Last updated: 17 June 2026

Who we are

This website is operated by the Parochial Church Council (PCC) of St John with St Mary, Devizes (registered charity number 1133990), which is the data controller responsible for your personal data. We are part of the Diocese of Salisbury within the Church of England.

What information we collect

We only collect personal data that you choose to give us, or that is necessary to provide a service you have requested. This may include:

• Contact enquiries - your name, email address and the content of any message you send through our contact form.
• Newsletter - the email address you provide when subscribing to parish news.
• Booking enquiries - your name, contact details and details of the event when you request to hire the church or Parish Rooms.
• Choir members’ area - the name and sign-in details of choir members who register for the members’ dashboard.
• Donations - gifts are processed by our donation provider (GiveALittle) and any payment details are handled securely by them, not stored by us.

How we use your data and our lawful basis

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

• Consent - where you have asked to receive our newsletter. You may withdraw your consent and unsubscribe at any time.
• Legitimate interests - to respond to your enquiries, manage bookings, run the choir members’ area and care for the life of the parish.
• Legal obligation - to meet our safeguarding, charity and accounting responsibilities.

Who we share it with

We do not sell your personal data and we never share it for marketing purposes. We may share information where necessary with the Diocese of Salisbury (for example, in relation to safeguarding), and with trusted service providers who help us run this website and our communications, who act only on our instructions. We may also disclose information where we are required to do so by law.

Cookies and your language preference

This site uses only the cookies and local storage necessary for it to function - for example, remembering your chosen language (English, French or German) and keeping choir members signed in. We do not use advertising cookies. You can clear or block cookies through your browser settings, though some features may then not work as intended. Embedded content, such as Google Maps and YouTube, may set its own cookies governed by those providers’ privacy policies.

How long we keep your data

We keep personal data only for as long as is necessary for the purpose for which it was collected, or to meet our legal and charitable obligations, after which it is securely deleted. Records relating to safeguarding and finance are retained in line with Church of England guidance.

Your rights

Under UK data protection law you have the right to:

• be informed about how your data is used;
• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data, or restrict or object to its processing;
• request the transfer of your data; and
• withdraw consent at any time where we rely on it.

To exercise any of these rights, please contact us at admin@stjohnwithstmary.org.uk.

Complaints

We hope to resolve any concern you may have, but you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.

Changes to this notice

We may update this privacy notice from time to time. Any changes will be published on this page with a revised “last updated” date.