Privacy Notice
St Luke and St Mark PCC · Charity No. 1174026 · Last updated May 2025
This privacy notice is based on the Church of England's model GDPR privacy notice for parishes. For more information about how the Church of England handles data, visit the Church of England data protection pages ↗ . Winchester Diocese guidance is available at winchester.anglican.org/gdpr ↗ .
Who we are
St Luke's with St Mark's Winchester is the parish church for Stanmore, Badger Farm, Oliver's Battery, and Winchester Village. The data controller for this parish is the Parochial Church Council (PCC) of St Luke and St Mark, registered charity number 1174026.
Contact us at: admin@stlukeswinchester.co.uk or 01962 865240.
What information we collect
We may collect the following personal information:
- Name, address, email address, and telephone number when you contact us
- Information you provide when completing our contact form
- Information provided in connection with pastoral care, life events (weddings, baptisms, funerals), or hall hire
- Gift Aid declarations and financial giving records
- Electoral Roll information
How we use your information
We use personal information to:
- Respond to your enquiries and requests
- Administer life events and pastoral care
- Process Gift Aid claims with HMRC
- Maintain the Electoral Roll as required by the Church of England
- Send communications about parish activities where you have consented
- Administer hall hire bookings
Our legal basis for processing
We process personal data on the basis of legitimate interests (responding to enquiries, pastoral care), legal obligation (Electoral Roll, Gift Aid), and consent (communications). We process special category data (religious belief) on the basis of explicit consent or legitimate interests in the context of a not-for-profit religious organisation.
How long we keep your data
We retain personal data only for as long as necessary. Contact enquiries are kept for up to 2 years. Gift Aid records are kept for 6 years as required by HMRC. Electoral Roll data is kept for the duration required by Church of England regulations. Life event records (baptisms, marriages, funerals) are kept permanently as required by law.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data (where applicable)
- Object to or restrict processing
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us at admin@stlukeswinchester.co.uk.
Sharing your data
We do not sell or share personal data with third parties for marketing purposes. We may share data with the Church of England, Winchester Diocese, HMRC (for Gift Aid), and other bodies where legally required. Our website contact form is processed by Netlify — you can view their privacy policy at netlify.com/privacy.
Cookies and website data
This website uses sessionStorage to remember whether you have dismissed the alert banner. No tracking cookies are set, and no personal data is collected by the website itself beyond contact form submissions. We do not use Google Analytics or other tracking services.
Complaints
If you have concerns about how we handle your data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.