Privacy Policy
Last updated: 12/12/2025
Introduction
St Joseph Catholic Church (“the Parish”, “we”, “us”, “our”) is a Catholic parish within the Diocese of Paisley in Scotland and operates this website to support the mission and ministry of the Church. This Privacy Policy explains how we collect, use, store and share personal data when you visit and use our website, and tells you about your rights in relation to your personal data.
By using this website you acknowledge that you have read this Privacy Policy and understand how your personal data will be processed.
Who we are and contact
The data controller for personal data collected through this website is St Joseph Catholic Church, a parish of the Diocese of Paisley (the “Diocese”). In some cases the Diocese may be a joint data controller where parish activities are carried out on its behalf.
If you have questions about this Privacy Policy or how your data is used, or you wish to exercise your data protection rights, you can contact the Parish in the first instance or the Diocesan Data Protection Officer using the contact details published on the Diocesan website.
What personal data we collect
The types of personal data collected through this website may include:
Identity and contact details such as your name, email address, postal address and telephone number when you fill in online forms or contact us directly.
Technical data such as IP address, browser type and version, device identifiers, time zone setting and approximate location, and information about how you use our website (pages visited, links clicked, access times).
If you sign up to email updates, mailing lists, events, online giving or similar services, we may also collect preferences (for example, the type of information you wish to receive) and records of your communications with us.
How we collect your data
We collect personal data in several ways:
Directly from you when you submit an enquiry, register for an event, subscribe to a newsletter, make an online donation, or otherwise communicate with us via website forms or email links.
Automatically as you browse the site, using cookies and similar technologies to collect technical and usage information.
We may also receive limited personal data about you from third-party services used by the Parish or Diocese (for example email marketing or online giving platforms) when you have chosen to interact with us through those services.
Purposes and legal bases for processing
We process personal data collected through this website for the following purposes, relying on the legal bases indicated:
To respond to your enquiries and provide pastoral, sacramental or practical support you have requested (legitimate interests; sometimes performance of a contract where you book a paid event or service).
To manage mailing lists and send you information about parish news, events and opportunities where you have requested or consented to receive such communications (consent or legitimate interests, with an unsubscribe option in each communication).
To administer and protect our website, including troubleshooting, data analysis, security, testing and maintenance (legitimate interests in operating a secure and reliable website).
To meet our legal and regulatory obligations under charity law, safeguarding law and data protection law (legal obligation; vital interests where necessary to protect someone from serious harm).
Cookies and similar technologies
Our website uses cookies and similar technologies to make the site work, to remember your preferences and to help us understand how people use the site. Cookies may collect technical data such as IP address, browser type, pages visited and referring website.
Where required by law, non-essential cookies will only be set with your consent and you can manage your cookie preferences through your browser settings or any cookie banner provided on the site.
Email newsletters and communications
If you subscribe to our email newsletters or other electronic communications, we will use your contact details to send you information you have requested such as parish news, events and fundraising appeals. You can withdraw your consent or opt out at any time by using the unsubscribe link in our emails or by contacting us using the details in this policy.
We may use a third-party email service provider to deliver these communications, which will process your personal data on our behalf under a written agreement and in accordance with data protection law.
Online forms, bookings and donations
When you complete an online form (for example to request prayer, register for events, join a group, volunteer, or make an enquiry), we will use the information you provide only for the purpose stated on the form or any closely related purpose. If the form relates to safeguarding, sacramental records or other sensitive matters, additional safeguards may be applied in line with diocesan policies.
Where you make an online donation or purchase a ticket for an event, payment processing will typically be handled by a third-party payment provider and we will not receive or store your full card details. We will receive limited information about the transaction (such as your name, contact details, amount and date) to administer your gift, maintain financial records and meet our legal obligations.
Sharing your personal data
We treat your personal data as confidential and will only share it where necessary and lawful. Your data may be shared with:
The Diocese and its officers where needed for pastoral, administrative, safeguarding or governance purposes.
Trusted third-party service providers such as website hosts, email and communications providers, event and ticketing platforms, or online giving providers who process data on our behalf under written agreements.
We will not sell your personal data to third parties, and will only share it outside the Parish and Diocese with your consent or where required or permitted by law (for example with safeguarding authorities or regulators).
International transfers
Some of our third-party service providers or their servers may be located outside the UK. Where this is the case and personal data is transferred internationally, appropriate safeguards will be applied in accordance with data protection law, for example by using standard contractual clauses or ensuring that the destination country has an adequacy decision.
How long we keep your data
We only keep personal data for as long as is reasonably necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements. Retention periods may differ depending on the nature of the information, and some records relating to sacramental registers and core parish governance may be kept for long periods or permanently in line with church and diocesan guidelines.
When personal data is no longer required it will be securely deleted, anonymised or archived in accordance with diocesan records management guidance.
Security of your personal data
We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration or disclosure. These measures may include secure servers, access controls, encryption, staff and volunteer training, and regular review of our data protection practices.
While no system can be completely secure, we seek to ensure that the level of security is appropriate to the risks presented by the processing of your personal data.
Your data protection rights
Under UK data protection law you have various rights in relation to your personal data, subject to certain conditions and exceptions. These may include the right to:
Access a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data in certain circumstances.
Object to or restrict our processing of your data, particularly where we rely on legitimate interests or use your data for direct marketing.
Withdraw consent where this is the legal basis for processing.
Request that your data is transferred to another organisation in a commonly used format where technically feasible (data portability).
If you wish to exercise any of these rights, please contact the Parish or the Diocesan Data Protection Officer using the contact details provided on the parish or diocesan website.
Complaints and supervisory authority
If you have concerns about how your personal data is being handled, you are encouraged to contact the Parish or the Diocesan Data Protection Officer so that any issues can be addressed. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), which is the supervisory authority for data protection in the UK; contact details are available on the ICO website.
Third-party websites and embedded content
Our website may include links to third-party websites or embedded content such as videos, maps or social media feeds. These websites and services are operated by third parties and have their own privacy policies, and we are not responsible for how they collect or use your personal data.
When you leave our website or interact with third-party content, you are encouraged to read the relevant privacy policies before providing any personal data.
Children’s information
This website is primarily intended for adults, but children and young people may sometimes contact the Parish or take part in parish activities. Where personal data relates to children, additional care is taken in line with safeguarding and diocesan policies, and, where appropriate, consent may be obtained from a parent or guardian.
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time, for example to reflect changes in the law, diocesan guidance or how we operate the website. The revision date at the top of the page indicates the latest version, and continued use of the website after any changes are posted will signify your acceptance of those changes.
