Privacy Policy

Privacy Notice Eden Church Carlisle. Last updated: January 2026

Who we are Eden Church Carlisle. Second Lower Floor, Viaduct House, Victoria Viaduct, Carlisle, CA3 8EZ. info@edenchurch.org.uk.

We are the data controller for the personal data we collect through this website.

What personal data we collect and why We only collect personal data when you actively send it to us via the contact form on our website. This typically includes:

Your name
Your email address
Your telephone number (if provided)
Any other information you choose to include in your message

We use this information solely to:

Respond to your enquiry, question or request for information
Contact you to provide the information or service you have asked for

We do not:

Add you to any marketing mailing list unless you separately and explicitly ask us to do so
Use your data for analytics, profiling, behavioural advertising or automated decision-making
Share your data with any third parties for marketing purposes
Sell your data

Legal basis for processing The legal basis for processing your personal data is our legitimate interests (Article 6(1)(f) UK GDPR) — namely, the legitimate interest in being able to respond to people who contact us through our website. We have considered your rights and freedoms and believe this processing is proportionate and does not override your interests.

(If you ever ask us to send ongoing updates/marketing we would ask for your explicit consent as the legal basis for that separate activity.)

How long we keep your data We keep messages and the personal data contained in them only for as long as necessary to deal with your enquiry.

In most cases this means we delete (or fully anonymise) the data within [choose one: 6 months / 12 months] after our last meaningful contact with you, unless there is a legal reason to keep it longer (for example, a complaint that requires records to be kept).
If your enquiry leads to an ongoing customer relationship we will keep relevant contact details for the duration of that relationship + a reasonable period afterwards (usually [choose: 6 years] for limitation of liability purposes).

Who we share your data with We do not share your personal data with any third parties except:

Our email / hosting provider(s) who process messages on our behalf under a data processing agreement (currently [name your host / email provider e.g. Google Workspace, Zoho Mail, SiteGround, etc.])
Our accountant / bookkeeper / professional advisers only if required for legal or tax reasons
If we are legally required to do so (court order, regulatory request etc.)

All such recipients are based in the UK or otherwise provide appropriate safeguards under UK GDPR.

Your rights Under UK GDPR you have the following rights in relation to your personal data:

Right to access (request a copy)
Right to rectification (correct inaccurate data)
Right to erasure (‘right to be forgotten’) — in certain circumstances
Right to restrict processing
Right to data portability — in limited situations
Right to object to processing based on legitimate interests
Right to withdraw consent (if we ever rely on consent)

To exercise any of these rights, please contact us at [your email address]. We will respond within one month (or longer if the request is complex — we will tell you if this is the case).

You also have the right to lodge a complaint with the UK supervisory authority: Information Commissioner’s Office (ICO) https://ico.org.uk/make-a-complaint Helpline: 0303 123 1113

Security We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss or misuse. However, no method of transmission over the internet or electronic storage is 100% secure.

Changes to this notice We may update this notice from time to time. The date at the top shows when it was last revised. We encourage you to check back periodically.

Contact us If you have any questions about this privacy notice or how we handle your personal data, please email us at: info@edenchurch.org.uk