Privacy policy

Who we are

Chase Family Church Ltd (“Chase”, “we”, “us”) is the data controller for the personal data described in this notice. We are a registered charity (no. 1148723) and company (no. 08045796) based at Chase Family Church Centre, Shirley Road, Enfield, EN2 6SB.

Our data protection lead is Kev Nash. Any question about this notice, or about your personal data, can be sent to kev@chasefamilychurch.com or office@chasefamilychurch.com.

We may update this notice from time to time; the current version is always published here. It was last updated in October 2026.

What personal data we collect

Depending on how you’re in touch with us, we may collect:

• Contact details: name, address, phone number, email address
• Household and family information, for members and those who take part regularly
• Information you give us through forms on this website or on Chase Hub (our membership and administration system), such as a contact message, an event booking, or a group sign-up
• Giving and Gift Aid information, where you give financially
• For children and young people: parent/guardian contact details, emergency contacts, and relevant medical or access information needed to care for them safely
• Photographs and video taken at church activities, where consent has been given
• Information relevant to pastoral care or safeguarding, held in confidence by those responsible for it

We collect this directly from you (or, for children, from a parent or guardian), not from third parties, except where a statutory or safeguarding process requires it.

How we use your data, and why

We use personal data to run the life of the church: keeping in touch with members and supporters, organising groups, courses and events, providing pastoral care, administering giving and Gift Aid, keeping children and adults safe, and meeting our legal obligations as a charity and employer.

Our lawful bases for this are:

• Legitimate interests — for most day-to-day administration of membership, events and communications, where you’d reasonably expect us to use your data this way
• Consent — where you’ve opted in to something specific, such as a newsletter, or where a photo consent applies
• Contract — for employment or service arrangements with staff and suppliers
• Legal obligation — for example Gift Aid, payroll, health and safety, and safeguarding disclosures
• Vital interests — where someone’s safety is at risk

Where we process more sensitive (“special category”) data, such as health information for a children’s or youth group, we do so with explicit consent, or where necessary for safeguarding or employment obligations.

Children's data

For children under 13, we rely on parental or guardian consent as our lawful basis for processing. For young people aged 13–17, the young person’s own consent may apply for standard data, but we always seek parental consent for anything sensitive, such as medical or safeguarding information. Registration for Chase Kids, Chase Youth and similar groups is done by a parent or guardian, through Chase Hub or a paper form where needed.

Sharing your data

We do not sell personal data, and we don’t share it outside Chase except where necessary and proportionate. This includes a small number of trusted service providers who process data on our behalf, under contract:

• Chase Hub, our membership and administration system, hosted on Microsoft Azure (UK)
• Microsoft 365, for staff email and document storage
• Stripe, to process online giving securely (Stripe never shares your card details with us)
• Netlify, who host this website, and process contact form submissions on our behalf

We may also share the minimum necessary information with statutory agencies (for example in a safeguarding referral), with our insurer or the Charity Commission where required, or with another church where you’re placed through a programme such as Encounter. We will never share special category data with a third party without a lawful basis for doing so.

Security and how long we keep data

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss or damage, including access controls on our systems and secure storage of paper records.

We keep personal data only for as long as it’s needed for the purpose it was collected, or as required by law — for example, financial and Gift Aid records for 7 years (HMRC requirements), and safeguarding records for longer periods in line with safeguarding guidance. We review the data we hold periodically and delete what we no longer need.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct inaccurate or incomplete data
• ask us to delete your data, where we don’t need to keep it
• withdraw consent at any time, where consent is our lawful basis
• ask us to restrict processing, or object to it, in certain circumstances
• ask for your data to be provided to you or another organisation in a portable format, where applicable
• complain to the Information Commissioner’s Office (ICO) if you’re unhappy with how we’ve handled your data

To exercise any of these rights, contact Kev Nash at kev@chasefamilychurch.com, or write to Church Office, Chase Family Church Centre, Shirley Road, Enfield, EN2 6SB. We’ll respond within one calendar month.

The ICO can be contacted on 0303 123 1113, via their email contact form, or at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Cookies and this website

This website doesn’t use tracking or advertising cookies. We use Cloudflare Web Analytics to count visits and see which pages are most useful. It doesn’t use cookies, doesn’t track you across other websites and doesn’t identify you; it only gives us anonymous totals such as page views, the country a visit came from and the type of device. A small number of pages embed third-party services — Google Maps, YouTube, and Chase Hub for giving and registration — which may set their own cookies when you use them; this is governed by that provider’s own privacy policy, not ours. Our contact form is processed by Netlify; see their privacy policy for how they handle submitted data.

Safeguarding

Where personal data is relevant to keeping a child or adult at risk safe, we may need to share it with statutory agencies without consent, as permitted by data protection law. See our Safeguarding policy for how we handle concerns.