London Shepherd Church

Legal

Privacy Notice

Last updated: 13 November 2026

This notice explains how we collect, use and protect your personal information when you visit this website or contact us. We are committed to handling your information lawfully, fairly and transparently under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

This website is operated by London Shepherd Church, the ministry name of Brixton Full Gospel Church Trust, a registered charity in England & Wales (no. 1085892), affiliated with the Assemblies of God.

  • Address: 16–18 High Street, Sutton, Surrey SM1 1HN, United Kingdom
  • Telephone: +44 (0)75 3398 1348
  • Data protection contact: Pastor Paul Song, globalrevival91@gmail.com

We are the data controller for the personal information described below.

2. What information we collect

  • Get in touch form: your name, email address and the content of your message.
  • Prayer request form: your prayer request, and — only if you choose to give them — your name and email address.
  • Gift Aid declaration (only if you make one): your title, name, home address and postcode, the tax years it covers if you choose only some, and your email address if you want a copy. An online declaration also records the date and time, your IP address and browser type, as a record of when and how it was made. See Gift Aid below.
  • Technical data: when you visit, our hosting provider and content-delivery networks may automatically log limited technical information (such as your IP address, browser type and pages viewed) to keep the site secure and working. We also count visits in total from these logs (see section 3).

We do not collect payment-card details on this website. Giving is by bank transfer directly to the church account, so no payment information passes through this site.

3. How we use your information and our lawful basis

  • To respond to your message, plan your visit, or follow up pastorally — on the basis of our legitimate interests in caring for and communicating with those who contact us, and/or your consent in submitting the form.
  • To pray for the requests you send us — on the basis of your consent.
  • To keep the website secure and operational — on the basis of our legitimate interests.
  • To understand how the website and the web bulletin are used (for example, how many people opened the bulletin each week, and whether they came from a search engine or a link), we count visits in total from those technical logs — on the basis of our legitimate interests. This uses no cookies and stores nothing on your device. The IP address and browser type are scrambled with a random key that is used for a single count and then thrown away, so no one can be identified or followed from day to day; we keep only daily totals.

We will not use your information for unrelated purposes, and we do not sell it or use it for advertising.

Gift Aid

If you make a Gift Aid declaration (online or on paper), we use your details to claim Gift Aid on your gifts from HMRC, as you asked us to — on the basis of our legitimate interests — and we keep the records HMRC requires — a legal obligation. Because a gift to a church can show your religious beliefs, we also rely on Article 9(2)(d) (see section 4).

When the church makes a claim, HMRC receives your title, name, house name or number, postcode and the gifts claimed. Within the church, only the people who claim Gift Aid can see the declarations, together with our volunteer web developer, CJ Teams, which runs the system (section 6).

Online declarations are stored by AWS in London, and their backups are kept there too. A declaration passes through AWS servers in the United States when it is sent (the form is processed and the emails are sent there) and when the people who claim Gift Aid view the declarations or prepare a claim in the church's editor screens (section 6). A claim file they download stays on their device until it is sent to HMRC. The church is emailed that a declaration was made, without your address. If you give your email address, you are sent a copy.

We keep a declaration while it is in use and then for at least 6 years after the last claim that relies on it, as HMRC requires. If you cancel it, we record the cancellation and keep the declaration, marked as cancelled, for the same period.

4. Sensitive ("special category") information

A prayer request, or the fact that you have contacted a church, may reveal information about your religious beliefs and can sometimes include details about your health, family or personal circumstances. UK data protection law treats this as "special category" data needing extra protection.

Where you send us this information, we rely on your explicit consent (UK GDPR Article 9(2)(a)) and, as a not-for-profit religious body, on Article 9(2)(d). We handle prayer requests sensitively and share them only with the pastoral team members who need to see them. We will not pass them outside the church without your consent.

5. Cookies and third-party content

This website does not set its own advertising or analytics cookies. However, some content we embed from other providers may set cookies or process your IP address when a page loads:

  • Google Maps (the map on our "Find us" section) may set cookies and share data with Google. See Google's Privacy Policy.
  • Google Fonts and a JavaScript content-delivery network (jsDelivr) are used to load fonts and a page graphic; loading them transmits your IP address to those providers.
  • Cloudflare Turnstile protects our forms (Get in touch, Prayer request and Gift Aid) from spam by telling people apart from automated programs. When you open a page with one of these forms (our home page or the Gift Aid page), it sends Cloudflare your IP address and technical details of your browser, never what you type in the form. Cloudflare may process this outside the UK, including in the United States, and also uses it to improve its bot detection. See Cloudflare's Turnstile privacy notice.

You can control or block cookies in your browser settings. If we add analytics or marketing cookies in future, we will ask for your consent first.

6. Who we share your information with, and where it is stored

We use carefully chosen service providers ("processors") who act only on our instructions:

  • Amazon Web Services (AWS) — hosts the website and delivers form messages by email. When our bulletin editors ask for it, AWS also translates the bulletin's announcements (and, if they choose, the sermon title and the Souls Saved note) between Korean and English with an AI model, Anthropic's Claude, run in Amazon Bedrock. Announcements can include people's names; the order of service, the duty rota and the prayer lists are never sent. Anthropic does not see this text. Some of this processing takes place on AWS servers outside the UK (in the United States). Such international transfers are protected by UK-approved safeguards (the UK International Data Transfer Addendum to the EU Standard Contractual Clauses) provided under the AWS Data Processing Addendum.
  • Our volunteer web developer (CJTeams) — maintains the website and supporting systems under a written data-processing agreement.

When we claim Gift Aid, we send HMRC the details it needs (see Gift Aid). We may also disclose information where we are required to by law.

7. How long we keep your information

We keep your information only for as long as needed for the purpose it was given, and then delete or anonymise it. We keep general enquiries for up to 24 months after our last contact with you; prayer requests are deleted within 3 months unless you have asked us for ongoing pastoral support; technical/server logs are kept only for a short period (around 90 days) by our hosting provider; and Gift Aid declarations are kept as HMRC requires (see Gift Aid).

8. Your rights

Under UK data protection law you have the right to: access the information we hold about you; ask us to correct or delete it; object to or restrict our use of it; request portability; and withdraw consent at any time (without affecting processing already carried out). To exercise any of these, contact us at globalrevival91@gmail.com.

9. Complaints

We hope to resolve any concern you raise with us. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.

10. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised.