Privacy Policy
Some useful information about us:
Evangelicals Now Limited (en), 14 Silverleigh Road, Thornton Heath, Surrey, CR7 6DU
Registered Charity No. 296794, Company Registration No. 2102612 Incorporated in England & Wales
If you have any questions about our privacy policy please contact our Administrator on 0845 225 0055 or by post on the address above.
en takes the protection of your data very seriously.
Under the General Data Protection Regulation you have a number of rights – see What your rights are below. The key one which we want to highlight with you is that if you receive direct marketing from us and you have not had a supply of en from us or placed advertising in en within 12 months then you have the right to object. Please contact us to ask to stop sending you marketing material and we will not initiate any further direct marketing to you.
We do not carry out any automated decision making or profiling on any of your data.
We take data security very seriously - our website has been developed in a security conscious manner, our databases are firewalled against outside access, and we regularly apply security patches to our servers to minimise the likelihood of intrusion. Passwords are not stored in plain text in our databases, but hashed using the PBKDF2 algorithm.
In this privacy policy we will set out:
How and when we collect data about you
What we do with that data and what the legal basis is
Who we might share your data with
How long we retain your data for
Changes to this privacy policy
How and when we collect data about you
When You Give It to Us Directly
For example, personal data that you submit through our website or give over the phone or send through the post or by email when you take out a subscription or request a sample copy of the newspaper or trial access to en-online; or when you request us to supply copies of en to a bookshop or to a church; or when you place advertising in the newspaper or on our website; or when you write an article for en; or when you make a donation.
When We Obtain It Indirectly
For example, your personal information may be shared with us by someone who pays for a subscription and asks us to send it to you - a gift subscription.
When It Is Available Publicly
Your personal information may be available to us from external, publicly available sources such as lists of member churches of other Christian organisations.
When You Visit Our Website
When you visit our website, we do not collect any personal identifying information about you when you are just browsing our website but we automatically collect the following types of information via Google Analytics:
Technical information, including the internet protocol (IP) address used to connect your device to the internet, browser type and version, time zone setting, browser plug-in types and versions and operating systems and platforms.
Information about your visit to our website, including the uniform resource locator (URL) clickstream to, through and from the website (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, referral sources, page interaction information (such as scrolling and clicks) and methods used to browse away from the page.
Please also see our Cookie policy to find out about how we use cookies on our website.
What data we hold
We may collect, store and otherwise use the following categories of personal information, none of which would be counted as sensitive under the General Data Protection Regulation:
Your name and contact details, including postal address, telephone number and email address;
Your position in an organisation, and information related to the work that you do there;
We do not hold any sensitive financial information about you that would enable anyone to take money from you such as credit and debit card details, we may hold your bank sort code number if you make cheque payments but we do not hold your bank account number;
Information about your computer or mobile device and your visits to and use of our website, including, for example, your IP address and geographical location;
Any other personal information which you choose to share with us or we obtain.
What we do with that data and what the legal basis is
We use your personal information in the following ways:
To provide you with your copy(ies) of en
When you ask us to supply you with en, or someone sets up a gift subscription on your behalf, we have entered into a form of contractual arrangement with you and this is the legal basis on which we use information about you:
To take payment and to send en to you by post or give you access to en-online;
To contact you in relation to your supply of en to ask you if you wish to continue to receive en or have access to it online; when it is time to take another payment or to alert you to the next issue being available; to highlight particular articles to you; to contact you up to 12 months after your supply stops to ask if you would like to restart.
To publish your advertising in en
When you ask us to place advertising in en, we have entered into a form of contractual arrangement with you and this is the legal basis on which we use information about you:
To take payment for the advertising and to send en to you by post so that you can see your advert;
To contact you in relation to your advertising, for example to see if you wish to renew your series of adverts; to contact you up to 12 months after your last advert was published to see if you would like to place another advert.
To publish your article in en
When you ask us to publish an article and we agree to do so, or when we ask you if we can publish your article and you grant us permission, we have entered into a form of contractual arrangement and this is the legal basis on which we use information about you:
To publish your article in the newspaper or on en-online. To contact you by post or email to thank you for writing your article and to send you a copy of the newspaper or to give you access to it on en-online.
To contact you in relation to your article, for example to see if you wish to write another article or if we are asked by a third party if they can re-publish your article.
To contact you in regard to any aspect of en.
If you have received en in the past or requested a sample copy of the newspaper or trial access to en-online or placed an advert or supplied us with an article or if your contact details have been publicly available, for example on the website of another Christian organisation who have a similar doctrinal basis as en, it is in our legitimate interests that we market any aspect of en to you and that is the legal basis on which we use information about you. It is in our legitimate interests because you have had some involvement with us in the past or because we believe, based on where we have found your information publicly available, that you may well be interested in the work of en.
Who we might share your data with
We will disclose some of your data to our agents or suppliers in order that we can provide you with our services.
These include but are not limited to: when you choose to pay for your subscription online via our payment partners, GoCardless for direct debit payments and Sagepay for card payments (You will be directed to our payment partner’s website where you will create an account with them and they will store your payment details. We cannot and do not store that information or have access to it, rather we store an authorisation code that allows us to renew your subscription using your payment details that you have provided to our payment partners); or when you choose to pay for your supply of en or advertising in en by card through our office and we process your payment through our payment partner, Global Payments; or when you choose to pay for your supply of en or advertising in en by cheque through our office and we pay your cheque into our bank; or when we pass your name and postal address details to our mailing house to send your copy of en to you.
We never sell or otherwise give your data to any other organisation without your consent.
How long we retain your data for
We retain your data for as long as it is necessary for us to provide you with the services that you have asked for and to meet our legitimate interests and to meet our legal obligations with all relevant statutory bodies such as HMRC and accounting regulations. As a general rule, we will keep your data for seven years from the end of your relationship with us.
However, if before that date
(i) your personal information is no longer required in connection with such purpose(s), or
(ii) we are no longer lawfully entitled to process it, or
(iii) you validly exercise your right of erasure (see What your rights are below), we will remove it from our records at the relevant time.
If you request to receive no further contact from us, we will keep some information about you on our database in order to comply with your request and avoid sending you unwanted materials in the future.
What your rights are
Right to object: You have the right to object to processing where we are (i) processing your personal information on the basis of the legitimate interests basis, (ii) using your personal information for direct marketing or (iii) using your information for statistical purposes. If you contact us to let us know that you would like us to stop, we will not initiate any further communication with you.
Right of access: You can write to us to ask for confirmation of what personal information we hold on you and to request a copy of that personal information.
Right to rectification: If you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated. You can also ask us to check the personal information we hold about you if you are unsure whether it is accurate.
Right to restrict processing: You have the right to ask for processing of your personal information to be restricted if there is disagreement about its accuracy or legitimate use.
Right to erasure: You can request that we delete your personal information from our records as far as we are required to do so. In some cases we may suppress your personal information in order to stop further communications with you, rather than delete all of your personal information.
Right to data portability: Where we are processing your personal information (that you have provided to us) because such processing is necessary for the performance of a contract to which you are party and we are processing your personal information using automated means (i.e. with no human involvement), you may ask us to provide the personal information to you – or another service provider – in a machine-readable format.
If you have any concerns or complaints about the way we use your personal information, please contact us using the details at the top.
Further details
Security and Storage of Personal Information
en is committed to keeping your personal information safe and secure. We have appropriate and proportionate security measures in place to help protect your personal information.
Your personal information is only accessible by appropriately trained staff and contractors, and stored on secure servers which have features to prevent unauthorised access.
International Transfers of Your Personal Information
We will normally only transfer your personal information within the European Economic Area (‘EEA’), where all countries have the same level of data protection law under the GDPR.
Unfortunately, no transmission of your personal information over the internet can be guaranteed to be 100% secure – however, once we have received your personal information, we will use strict procedures and security features to try and prevent unauthorised access.
Lawful Basis for Processing Your Personal Information
The GDPR requires us to rely on one or more ‘lawful basis’ to use your personal information. We consider the basis listed below to be relevant:
Where necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering a contract (for example, if you take out a subscription to en or place advertising in en).
Where there is a legitimate interest in us doing so, the GDPR allows us to collect and use your personal information if it is reasonably necessary to achieve our legitimate interests (as long as that use is fair, balanced and does not unduly impact your rights).
In broad terms, our ‘legitimate interests’ means the interests of running en as a charitable entity and pursuing our aims and goals, for example by encouraging you to subscribe to or read articles from en.
When we use your personal information to achieve such legitimate interests, we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. We will not use your personal information for activities where our interests are overridden by the impact on you, for example where use would be excessively intrusive (unless, for instance, we are otherwise required to or permitted by law).
Links and Third Parties
There are many links on our website directly to other sites through adverts or articles. This Notice does not cover external websites and we are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit via links on our website.
Changes to This Privacy Policy
We may update this Notice from time to time. We will notify you of significant changes by contacting you directly where reasonably possible for us to do so and by placing an updated notice on our website. This Notice was last updated on 23 May 2018.