THE PURPOSE OF THIS PRIVACY NOTICE

The Tabernacle Bookshop (“the Bookshop”) is a ministry of the Metropolitan Tabernacle.  This privacy notice gives you information about our use of your personal data in the operation of the Bookshop, except that use of personal data for postal mailing of Bookshop review lists and pricelists and occasional mailings relating to our annual conference and other ministries and events is covered by the Metropolitan Tabernacle’s privacy notice for postal mailings [click here].

DATA CONTROLLER

The Data Controller is the Elders’ and Deacons’ Court of the Metropolitan Tabernacle (the “E&DC”).

The E&DC has appointed a data privacy manager who is responsible for overseeing the collection and processing of personal data by the Metropolitan Tabernacle, including questions arising from this privacy notice.  If you have any questions about this privacy notice, including any requests to exercise your legal rights as set out below, please contact the data privacy manager using the details below.

CONTACT DETAILS

Mailing address:     Data Privacy Manager

                            Metropolitan Tabernacle

                            Elephant & Castle

                            London

                            SE1 6SD

Email address:      DataManager@MetropolitanTabernacle.org

Telephone number:    020 7735 7076

PERSONAL DATA

Personal data is information relating to an identified or identifiable living individual.

LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Our use of personal data is lawful where it is necessary for:

• The performance of a contract that we have with you
• Compliance with a legal obligation to which we are subject
• The purposes of legitimate interests that we pursue, except where such interests are overridden by your interests or fundamental rights and freedoms

Processing for the purposes of our legitimate interests includes (i) the fulfilling of a ministry of the Metropolitan Tabernacle by distributing Christian literature and (ii) complying with our legal obligations.

Some special categories of personal data may only be processed lawfully under certain additional conditions.  As a not-for-profit body with a religious aim we process such categories of data solely in relation to our members, former members or persons who have regular contact with us.  We do not process special categories of personal data in the operation of the Bookshop.

FAILURE TO PROVIDE OR UPDATE DATA

It is important that the data we hold about you is accurate and current.  Please keep us informed if there are any changes.

We may be unable to keep in contact with you or to perform contractual obligations to you if your data is not kept up-to-date.

DISCLOSURE OF YOUR PERSONAL DATA

We will not disclose your personal data to any external third party except:

• With your consent or
• For the purposes of processing payments, or
• Where we are required to do so by law

 DATA SECURITY

We have put in place appropriate measures to prevent your data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.  In addition, we limit access to your personal data to those of our officers, employees, volunteers, agents and contractors who have a need to know.  They will only process your personal data on our instructions in the operation of the Bookshop and they are under a duty of confidentiality.

DATA RETENTION

We will retain your personal data for as long as is reasonably necessary for the operation of the Bookshop and in order to comply with legal requirements for the retention of certain data.

Debit or credit card details provided to us for the purposes of making a payment are deleted or destroyed as soon as the payment has been processed.

If you do not make any purchases from us for a period of seven years we will delete all your personal data that we hold.

In some circumstances you can ask us to delete your data (see erasure request below).

YOUR LEGAL RIGHTS

Unless subject to an exemption under relevant legislation you have the following rights in respect of your personal data:

• The right to request a copy of your personal data which we hold
• The right to request correction of any personal data that is inaccurate, incomplete or out of date
• The right to request erasure of your personal data where it is no longer necessary for us to continue processing it, where you have successfully exercised your right to object to processing, where we have processed your data unlawfully or where the law otherwise requires your data to be erased
• The right to object to processing of your personal data where you consider that your interests or personal rights and freedoms override our legitimate interests described above
• The right to request restriction of processing where you have disputed the accuracy of the data or the lawfulness of the processing, or where you wish us to retain data that we would otherwise delete

Before responding to a request or objection we may need to request specific information from you as a security measure to ensure that your personal data is not disclosed to any person who has no right to receive it.

You will not have to pay any fee to exercise these rights.  However, we may charge a reasonable fee for, or may refuse to comply with, any request that is clearly unfounded, excessive or repetitive.

We try to respond to all requests within one month.  If it will take longer because your request is complex we will notify you and keep you updated.

You also have the right to lodge a complaint with the Information Commissioners Office on 0303 123 1113, or via email at https://ico.org.uk/global/contact-us/email/ or at Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Issue 1

23 May 2018