Last updated: May 2026

All Saints’ Church, Crawley Down (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect information about you when you visit our website or engage with our services, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who We Are

The data controller for this website is:

All Saints’ Church, Crawley Down
Vicarage Road
Crawley Down
RH10 4JJ

Telephone: 01342 718741
Email: office@allsaintscrawleydown.org

All Saints’ Crawley Down is part of the Church of England (Diocese of Chichester). As a data controller, we are responsible for deciding how and why your personal data is used.

2. What Personal Data We Collect

Contact Form Submissions

When you use a contact form on our website, we collect your name and email address, and any other information you choose to provide in your message. This information is used solely to respond to your enquiry.

Newsletter and Mailing List

If you choose to subscribe to our newsletter or mailing list, we collect your name and email address. We will only send you communications you have explicitly agreed to receive. You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.

Website Analytics and Cookies

Our website uses cookies and similar technologies to help us understand how visitors use the site. This may include your IP address, browser type, pages visited, and time spent on the site. Please see Section 7 (Cookies) for full details.

3. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Consent — for newsletter subscriptions and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legitimate interests — for responding to contact form enquiries, where our interest in communicating with you does not override your rights.
• Legal obligation — where we are required to process data to comply with the law.

4. How We Use Your Data

• To respond to your enquiries submitted via our contact form
• To send you newsletters, updates, and information about church activities — only where you have subscribed and consented
• To monitor and improve the performance and usability of our website
• To comply with any legal or regulatory obligations

We will never use your data for automated decision-making or profiling.

5. Sharing Your Data

• Service providers: We may share data with trusted third-party providers who help us operate our website (such as our web hosting provider and email platform), under strict data processing agreements.
• Diocese of Chichester: As part of the Church of England, we may share relevant information with the Diocese in connection with our charitable and pastoral activities.
• Legal requirements: We may disclose your data where required by law, such as in response to a court order or to prevent fraud.

6. How Long We Keep Your Data

• Contact form enquiries: Retained for up to 12 months, then securely deleted.
• Mailing list subscribers: Retained until you unsubscribe or withdraw consent, after which your data will be removed within 30 days.
• Analytics data: Retained in line with the third-party provider’s data retention policies (typically 14–26 months).

7. Cookies

• Strictly necessary cookies: Required for the website to function. These cannot be disabled and do not store personally identifiable information.
• Analytics cookies: Help us understand how visitors interact with our website. These are only placed with your consent.
• Preference cookies: Remember your settings and preferences for future visits.

Under PECR, we will request your consent before placing any non-essential cookies on your device. You may withdraw consent at any time by adjusting your browser settings or clearing cookies. Disabling certain cookies may affect the functionality of the site.

8. Your Rights Under UK GDPR

• Right of access: You may request a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification: You may ask us to correct any inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data where there is no legitimate reason to continue holding it.
• Right to restrict processing: You may ask us to pause processing in certain circumstances.
• Right to data portability: Where processing is based on consent or a contract, you may request your data in a structured, commonly used format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: You have the right not to be subject to decisions made solely by automated means. We do not carry out such processing.

To exercise any of these rights, please contact us at office@allsaintscrawleydown.org. We will respond within one month as required by law, free of charge.

9. Data Security

We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours and inform you directly where required.

10. Third-Party Links

Our website may contain links to external websites, including YouTube (for livestreamed services). We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies before providing any personal data.

11. Children’s Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe your child has provided us with personal data without your consent, please contact us and we will delete it promptly.

12. How to Complain

If you are unhappy with how we have handled your personal data, please contact us first at office@allsaintscrawleydown.org. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

ICO
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: https://ico.org.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our practices. The “Last updated” date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically.