Privacy Policy

1. Introduction

Merthyr Tydfil Roman Catholic Parish is committed to respecting and protecting the privacy of everyone who interacts with our parish, attends our churches or visits our website.

This Privacy Policy explains how personal information is collected, used, stored and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to activities associated with our four churches:

- St Mary's Church

- St Illtyd's Church

- St Benedict's Church

- St Aloysius' Church

2. Who Is Responsible for Your Information?

The parish operates within the Archdiocese of Cardiff-Menevia.

Parish Contact Details:

Merthyr Tydfil Roman Catholic Parish

The Priory, Pontmorlais

Merthyr Tydfil, CF47 8RG

Telephone: 01685 723336

Email: merthyr@cardiffmenevia.org

3. Information We May Collect

Depending on your involvement with the parish, we may collect:

- Names, addresses, telephone numbers and email addresses.

- Information provided through parish enquiries and correspondence.

- Details relating to participation in parish events and activities.

- Volunteer and parish ministry information.

- Donation and Gift Aid records.

- Sacramental records, where applicable.

- Photographs or videos taken during parish activities.

- Information necessary for safeguarding and pastoral responsibilities.

- Technical information collected when visiting our website.

We only collect information that is relevant and necessary for legitimate parish purposes.

4. How We Use Personal Information

Personal information may be used to:

- Respond to enquiries and provide parish information.

- Organise Masses, religious services and parish activities.

- Maintain sacramental and administrative records.

- Coordinate volunteers, ministries and parish events.

- Process donations and meet financial or legal obligations.

- Communicate parish news and announcements.

- Promote parish activities through approved photographs and publications.

- Fulfil safeguarding responsibilities and protect individuals.

We will not use personal information for unrelated purposes without an appropriate lawful basis.

5. Legal Basis for Processing

Depending on the circumstances, we may process personal information where:

- Consent has been provided.

- Processing is necessary to meet a legal obligation.

- Processing is necessary for legitimate interests, where permitted by law.

- Processing is necessary to fulfil a contract or agreed arrangement.

- Processing is necessary to protect someone's vital interests.

Information revealing religious beliefs, health or other sensitive matters receives additional protection under data protection legislation.

Where special category information is processed, we will identify and document an applicable legal condition and follow the relevant safeguards.

6. Safeguarding and Confidentiality

The parish takes the protection of children, young people and vulnerable adults seriously.

Information received in connection with safeguarding concerns is handled sensitively, securely and only by authorised individuals.

Where necessary and lawful, information may be shared with the Archdiocesan Safeguarding Team, statutory authorities or other appropriate organisations to protect individuals and meet legal responsibilities.

Safeguarding information will not be published on the parish website.

Further information is available on our Safeguarding page.

7. Photographs and Videos

Photographs and videos may be taken during parish celebrations, community activities and events.

Where required, appropriate consent or another valid lawful basis will be established before identifiable photographs are published on the parish website, social media or other public materials.

Particular care will be taken when photographs involve children or vulnerable individuals.

Anyone with concerns about a photograph published by the parish may contact the parish office.

8. Website Information and Cookies

Our website may use cookies or similar technologies to support its operation, improve functionality and understand website usage.

Where required by law, visitors will be asked for consent before non-essential cookies are used.

Further information about the cookies used on our website will be provided in a separate Cookie Policy.

9. Sharing Personal Information

We may share personal information with authorised parish personnel, the Archdiocese, approved service providers or relevant public authorities where necessary and lawful.

We do not sell personal information.

Any sharing will be limited to what is necessary for the relevant purpose and subject to appropriate safeguards.

10. Storage and Retention

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Personal information will be retained only for as long as necessary for the purpose for which it was collected, subject to applicable legal, safeguarding, archival and diocesan retention requirements.

Certain sacramental records may need to be retained permanently in accordance with applicable Church requirements.

11. Your Data Protection Rights

Subject to applicable legal conditions and exemptions, individuals have the right to:

- Request access to their personal information.

- Request correction of inaccurate information.

- Request deletion of information in certain circumstances.

- Request restriction of processing.

- Object to certain uses of their information.

- Request data portability where applicable.

- Withdraw consent where processing relies on consent.

Requests relating to personal information can be made through the parish office or the designated diocesan data protection contact.

You also have the right to raise a concern with the Information Commissioner's Office (ICO).

Website: www.ico.org.uk

12. External Websites

Our website may contain links to external websites, including diocesan organisations and community services.

We are not responsible for the privacy practices of external websites. Visitors are encouraged to review their respective privacy policies.

13. Changes to This Policy

This Privacy Policy may be reviewed and updated periodically to reflect changes in legislation, diocesan guidance or parish activities.

The latest approved version will be made available on our website.

14. Contact Us

For questions about this Privacy Policy or the handling of personal information, please contact:

Merthyr Tydfil Roman Catholic Parish

Telephone: 01685 723336

Email: merthyr@cardiffmenevia.org

Website: www.merthyrrc.co.uk