PRIVACY POLICY – ACAT MEMBERS

1. Introduction

We are committed to safeguarding the privacy of our website users and members.  This privacy notice provides you with details of how we collect and process your personal data through use of our website and membership database.

2. Who we are

The Association of Church Accountants and Treasurers Corporate Trustee Limited is a company limited by guarantee and is the Corporate Trustee of ACAT. Registered company no. 10228260.  Registered charity no: 1072733. Registered office: Association of Church Accountants and Treasurers, C/O KM Accountants, 1^st Floor, Block C, The Wharf, Manchester Road, Burnley, BB11 1JG.

Contact Email: membership@acat.uk.com  ACAT is registered with the Information Commissioner’s Office (ICO) with registration number ZA296487.

The Association of Church Accountants and Treasurers (ACAT) is the data controller for the purposes of the GDPR (General Data Protection Regulation) and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).  It is very important that the information we hold about you is accurate and up to date.  Please let us know if at any time your personal information changes by emailing us at membership@acat.uk.com.

3.  What data we collect about you, for what purpose and on what ground we process it

ACAT complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

We collect your personal data either directly from you or from your church governing body – referred to internally as an ACAT “block member”.

• We collect information about you when you apply for individual
  membership via our website. 
• We collect information about you when you register
  your membership as part of a block membership of ACAT.
• We collect information about you if supplied by your
  church governing body who pays for your membership of ACAT.
• We collect information about you when you apply for a
  place on a training course or to attend our conference and AGM.
• We collect information about you when you purchase a
  copy of the ACAT Handbook.

We use your personal data for the following purposes: –

• To
  administer membership records;
• To
  maintain our own accounts and records (including the processing of gift aid
  applications);
• To
  inform you of news, events, activities and services provided by ACAT;
• To
  provide delegate lists of those attending our courses or conference.

4.  Legal basis for using your personal data

• Consent is the basis on which ACAT
  processes your personal data when you have chosen the “opt-in” option on our
  website.
• For those members who don’t use
  our website, payment has been received for membership, so our legal basis is Performance
  of a Contract.
• You may opt-in or opt-out of
  communications from ACAT by expressing your preference by logging in to our
  website.
• We use bulk mailing to circulate
  our newsletters and you have the option to “unsubscribe” from our
  communications if you so wish.
• ACAT has a Legal Obligation to use
  personal data for processing Gift Aid.

5.  Sharing your personal data
Your personal data will be treated as strictly confidential. In order to carry out the service we provide, it is only accessed by ACAT employees.  Data relating to training courses or our conference maybe shared with ACAT trainers for the purpose of training course delivery and with the venues for accessibility and dietary requirements.  

Your personal data is within our CRM database, held securely on the cloud stored in the UK.  Our provider, White Fluffy Cloud, uses data encrypted security which meets all European Regulation for data protection.  See their privacy policy: https://whitefluffy.cloud/privacy/.  Your personal data is also held within our website.  Our website provider, Creative Stream Ltd, uses a UK datacentre for storage and their privacy policy can be seen here: https://www.creativestream.co.uk/privacy-policy.

When you pay for membership, a training course or conference fee you will be redirected to a payment service provided by Stripe or PayPal. The ACAT website simply redirects you to the payment website and does not collect any data related to your payment card. This means that Stripe and PayPal are separate data controllers with their own data protection responsibilities. Stripe has been selected as a provider with care but please note that Stripe’s privacy policy will apply. Please see:

https://stripe.com/gb/privacy.  PayPal’s privacy policy can be found here: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

6.  How long do we keep your personal data?
We will only keep your personal data for as long as we need it.  We keep membership data while membership is current.  Data is destroyed if a member resigns.  We delete data for Individual members who do not renew their membership within 3 months of annual renewal date. We keep event delegate data until the booking has been fulfilled.

We retain Gift Aid declarations and associated paperwork for up to 6 years after the calendar year to which they relate as this is an HMRC requirement.

7.  Your rights and your personal data 

You have the following rights with respect to your personal data: –

• The right to request a copy of
  your personal data which ACAT holds about you; See guidance here: https://ico.org.uk/for-the-public/getting-copies-of-your-information-subject-access-request/
• The right to request that ACAT
  corrects any personal data if it is found to be inaccurate or out of date;  See guidance here: https://ico.org.uk/for-the-public/your-right-to-get-your-data-corrected/
• The right of erasure.  Your personal data is erased where it is no
  longer necessary for ACAT to retain such data, in accordance with 6 above; See
  guidance here: https://ico.org.uk/for-the-public/your-right-to-get-your-data-deleted/
• The right to object to
  processing.  See guidance here: https://ico.org.uk/for-the-public/the-right-to-object-to-the-use-of-your-data/
• The right to withdraw your consent
  to the processing at any time;

Please contact ACAT using the details listed in 10. below for any of the 5 points above.

• The right to lodge a complaint
  with the Information Commissioners Office.

9.  Website and Cookies

We use cookies on our website.  Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website.  By not accepting cookies and blocking them in your browser’s settings, you may not be able to use the full functionality of our website.

Cookies are anonymous small text files placed on your computer, tablet or mobile phone to help the site work properly and enables the website to remember who you are when you return.

Our website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”).  The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on their servers.

Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

Google’s privacy policy is available at https://policies.google.com/privacy

Our website also uses WordPress Cookies. These are the cookies that activate in the admin area of the website.  They store authentication details on login.  User cookies are ‘strictly necessary’ cookies as WordPress will not be able to function without it. They are also session cookies as they expire once the user logs out or exits the page.  For further information see: https://www.cookielawinfo.com/wordpress-cookies-list-why-they-are-used/

Our website also uses cookies from PaidMembershipsPro.  When logged in, we use cookies to track some of your activity on our website, including logins, visits, and page views.  At checkout, we may also collect your billing address and phone number.  This information is used to confirm your credit card.  See: https://www.paidmembershipspro.com/privacy-policy/

10.  Contact Details

If at any time you have a query or complaint about what we do with your personal data, then you can contact us here: ACAT’s Administration Office, Association of Church Accountants and Treasurers, C/O KM Accountants, 1^st Floor, Block C, The Wharf, Manchester Road, Burnley, BB11 1JG.or Tel: 01246 767787 or Email: membership@acat.uk.com

You also have the right to complain to the Information Commissioners Office (ICO), the UK supervisory authority for data protection issue. See: https://ico.org.uk/. Tel: 0303 123 1113