Legal
Privacy Notice
Last updated: 29 June 2026
This notice explains how we collect, use and protect your personal information when you visit this website or contact us. We are committed to handling your information lawfully, fairly and transparently under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
This website is operated by London Shepherd Church, the ministry name of Brixton Full Gospel Church, a registered charity in England & Wales (no. 1085892), affiliated with the Assemblies of God.
- Address: 16–18 High Street, Sutton, Surrey SM1 1HN, United Kingdom
- Telephone: +44 (0)75 3398 1348
- Data protection contact: johnkimlsc@gmail.com (interim — moving to info@gospelchurch.co.uk)
We are the data controller for the personal information described below.
2. What information we collect
- Get in touch form: your name, email address and the content of your message.
- Prayer request form: your prayer request, and — only if you choose to give them — your name and email address.
- Technical data: when you visit, our hosting provider and content-delivery networks may automatically log limited technical information (such as your IP address, browser type and pages viewed) to keep the site secure and working.
We do not collect payment-card details on this website. Online giving is handled by Stewardship on their own secure platform (see section 6).
3. How we use your information and our lawful basis
- To respond to your message, plan your visit, or follow up pastorally — on the basis of our legitimate interests in caring for and communicating with those who contact us, and/or your consent in submitting the form.
- To pray for the requests you send us — on the basis of your consent.
- To keep the website secure and operational — on the basis of our legitimate interests.
We will not use your information for unrelated purposes, and we do not sell it or use it for advertising.
4. Sensitive ("special category") information
A prayer request, or the fact that you have contacted a church, may reveal information about your religious beliefs and can sometimes include details about your health, family or personal circumstances. UK data protection law treats this as "special category" data needing extra protection.
Where you send us this information, we rely on your explicit consent (UK GDPR Article 9(2)(a)) and, as a not-for-profit religious body, on Article 9(2)(d). We handle prayer requests sensitively and share them only with the pastoral team members who need to see them. We will not pass them outside the church without your consent.
5. Cookies and third-party content
This website does not set its own advertising or analytics cookies. However, some content we embed from other providers may set cookies or process your IP address when a page loads:
- Google Maps (the map on our "Find us" section) may set cookies and share data with Google. See Google's Privacy Policy.
- Google Fonts and a JavaScript content-delivery network (jsDelivr) are used to load fonts and a page graphic; loading them transmits your IP address to those providers.
You can control or block cookies in your browser settings. If we add analytics or marketing cookies in future, we will ask for your consent first.
6. Who we share your information with, and where it is stored
We use carefully chosen service providers ("processors") who act only on our instructions:
- Amazon Web Services (AWS) — hosts the website and delivers form messages by email. Some of this processing takes place on AWS servers outside the UK (in the United States). Such international transfers are protected by UK-approved safeguards (the UK International Data Transfer Addendum to the EU Standard Contractual Clauses) provided under the AWS Data Processing Addendum.
- Our volunteer web developer (CJTeams) — maintains the website and supporting systems under a written data-processing agreement.
- Stewardship (Stewardship Services (UKET) Ltd) — if you choose to give online, your giving and any Gift Aid details are handled by Stewardship as a separate provider under their own privacy policy.
We may also disclose information where we are required to by law.
7. How long we keep your information
We keep your information only for as long as needed for the purpose it was given, and then delete or anonymise it. We keep general enquiries for up to 24 months after our last contact with you; prayer requests are deleted within 3 months unless you have asked us for ongoing pastoral support; and technical/server logs are kept only for a short period (around 90 days) by our hosting provider.
8. Your rights
Under UK data protection law you have the right to: access the information we hold about you; ask us to correct or delete it; object to or restrict our use of it; request portability; and withdraw consent at any time (without affecting processing already carried out). To exercise any of these, contact us at johnkimlsc@gmail.com.
9. Complaints
We hope to resolve any concern you raise with us. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last revised.
London Shepherd Church