The Data Protection Act 1998 (DPA) governs the use of information about people (personal data). Personal data can be held on computer or in a manual file, and includes email, minutes of meetings, and photographs. Willington Baptist Church will remain the data controller for the information held. Willington Baptist Church and it’s volunteers will be personally responsible for processing and using personal information in accordance with the Data Protection Act.   

The leadership team, Diaconate and Pastor and volunteers running Willington Baptist Church activities who have access to personal information, will be expected to read and comply with this policy.

Purpose

The purpose of this policy is to set out Willington Baptist Church’s commitment and procedures for protecting personal data. Willington Baptist Church regards the lawful and correct treatment of personal information as very important to successful working, and to maintaining the confidence of those with whom we deal with.

The Data Protection Act Legislation

This contains 8 principles for processing personal data with which Willington Baptist Church will comply.  Personal data:

1. Shall be processed fairly and lawfully and, in particular, shall not be processed unless specific conditions are met,
2. Shall be obtained only for one or more of the purposes specified in the Act, and shall not be processed in any manner incompatible with that purpose or those purposes,

3.  Shall be adequate, relevant and not excessive in relation to those purpose(s) 

4. Shall be accurate and, where necessary, kept up to date, 

5. Shall not be kept for longer than is necessary 

6. Shall be processed in accordance with the rights of data subjects under the Act, 

7. Shall be kept secure by the Data Controller who takes appropriate technical and other measures to prevent unauthorised or unlawful processing or accidental loss or destruction of, or damage to, personal information, 

8. Shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal information.

The following list contains definitions of the technical terms we have used and is intended to aid understanding of this policy:

Data Controller – The person who (either alone or with others) decides what personal information Willington Baptist Church will hold and how it will be held or used.

Data Protection Act 1998 – The UK legislation that provides a framework for responsible behaviour by those using personal information.

Data Protection Officer – The person on the management committee who is responsible for ensuring that it follows its data protection policy and complies with the Data Protection Act 1998

Data Subject/Service User – The individual whose personal information is being held or processed by Willington Baptist Church (for example: a service provider or member)

‘Explicit’ consent – is a freely given, specific and informed agreement by a Data Subject (see definition) to the processing of personal information about her/him.  

Explicit consent is needed for processing sensitive data this includes the following:

(a)  racial or ethnic origin of the data subject

(b) political opinions

(c ) religious beliefs or other beliefs of a similar nature

(d) trade union membership

(e) physical or mental health or condition

(f)  sexual orientation                                                                         

(g) criminal record

(h) proceedings for any offence committed or alleged to have been committed

Notification – Notifying the Information Commissioners Office (ICO)  about the data processing activities of Willington Baptist Church.  Note: Not-for-profit organisations are exempt from notification.

Information Commissioner – The UK Information Commissioner responsible for implementing and overseeing the Data Protection Act 1998.

Processing – means collecting, amending, handling, storing or disclosing personal information

Personal Information – Information about living individuals that enables them to be identified – e.g. names, addresses, telephone numbers and email addresses. It does not apply to information about organisations, companies and agencies but applies to named persons, such as individual volunteers of the Group.

 Applying the Data Protection Act within Willington Baptist Church

Whilst access to personal information is limited to the staff and volunteers., Volunteers  may undertake additional tasks which involve the collection of personal details from members of the public.

Members of the congregation who are in receipt of the church directory have the responsibility of NOT sharing that information with others without the explicit permission of the person the data concerns.

In such circumstances we will let people know why we are collecting their data and it is our responsibility to ensure the data is only used for this purpose.

Correcting data 

Individuals have a right to have data corrected if it is wrong, to prevent use which is causing them damage or distress or to stop marketing information being sent to them.

Responsibilities

Willington Baptist Church is the Data Controller under the Act, and is legally responsible for complying with Act, which means that it determines what purposes personal information held will be used for.

The Leadership team will take into account legal requirements and ensure that it is properly implemented, and will through appropriate management, strict application of criteria and controls:

• Observe fully conditions regarding the fair collection and use of information,
• Meet its legal obligations to specify the purposes for which information is used,
• Collect and process appropriate information, and only to the extent that it is needed to fulfil its operational needs or to comply with any legal requirements,
• Ensure the quality of information used,
• Ensure that the rights of people about whom information is held, can be fully exercised under the Act. These include:
  • The right to be informed that processing is being undertaken
  • The right of access to one’s personal information
  • The right to prevent processing in certain circumstances and
  • The right to correct, rectify, block or erase information which is regarded as wrong information
• Take appropriate technical and organisational security measures to safeguard personal information,
• Ensure that personal information is not transferred abroad without suitable safeguards,
• Treat people justly and fairly whatever their age, religion, disability, gender, sexual orientation or ethnicity when dealing with requests for information,
• Set out clear procedures for responding to requests for information
  
  

The Data Protection Officer on the management committee is:

The aim of Willington Baptist Church (“WBC”) is to be people who live the good news of Jesus Christ  and sharing God’s love and God’s word with each other, with our community and with the world.

In fulfilling this aim, WBC has a programme of activities with children and young people and we welcome children and young people into the life of our fellowship.

WBC recognises its responsibilities for the safeguarding of all, especially children and young people under the age of 18 (regardless of gender, ethnicity or ability) as set out in The Children Act 1989 and 2004,  Safe from Harm (HM Government 1994) and Working Together to Safeguard Children (HM Government 2010).

As members of WBC we commit ourselves to the nurturing, protection and safeguarding of all children and young people associated with WBC and will pray for them regularly.

In pursuit of this we commit ourselves to the following policies and to the development of procedures to ensure the implementation of these policies.

1. Respecting children and young people

WBC will insist on behaviour from all who are appointed to work with children and young people that shows the respect that is due to those children and young people.

2. A safe community

WBC is committed to the prevention of bullying of children and young people.  The church will seek to ensure that the behaviour of any of those who may pose a risk to children and young people in the community of the church is managed appropriately.

3. Safe recruitment, support and supervision of workers

WBC will exercise proper care in the selection and appointment of those working with children and young people, whether paid or voluntary.  All workers will be provided with appropriate training, support and supervision to promote the safeguarding of children.

4. Safe working practices

WBC is committed to providing a safe environment for activities with children and young people and will adopt ways of working with children and young people that promote their safety and well-being.

5. Prevention of and reporting of abuse

It is the duty of each member of WBC and all who are part of the wider church family to prevent the physical, sexual and emotional abuse of children and young people and to report any abuse disclosed, discovered or suspected.  WBC will fully co-operate with any statutory investigation into any suspected abuse linked with WBC.

Responsible people

The pastor will oversee and monitor implementation of the policy and procedures with the help of the Designated Person

WBC has appointed ? as the Designated Person for Safeguarding to (i) advise the church on any matters related to the safeguarding of children and young people; and (ii) take the appropriate action when abuse is disclosed, discovered or suspected.

Policy and procedures

A copy of this policy statement will be displayed permanently on the notice board in the church entrance lobby.

Each worker with children and young people, whether paid or voluntary, will be given a full copy of the policy and procedures and will be required to follow them.  A full copy of the policy and procedures will be made available on request to any member of WBC, the parents or carers of any child or young person from the church or any other person associated with the church.

The policy and procedures will be monitored and reviewed at least annually.  The policy statement will be read annually at the WBC annual general meeting in March, together with a report of the outcome of the annual review.

Protection of vulnerable adults

WBC also recognises its responsibilities for the safeguarding of vulnerable adults and ensuring their well-being in the life of the church.

It is the responsibility of each of us to prevent the physical, emotional, sexual, financial and spiritual abuse of vulnerable adults and to report any such abuse that we discover or suspect.

We similarly undertake to exercise proper care in the appointment, selection, resourcing and training of those who work with vulnerable adults.

WBC adopts the guidelines of the Baptist Union of Great Britain published in “Safe to Belong”.

WBC will apply broadly the same procedures, as appropriate, in relation to vulnerable adults as in relation to children and young people.