Image 1 of 1
Image 1 of 1
Image 1 of 1
Image 1 of 1
Handle personal data legally and responsibly
A UK GDPR-compliant policy tailored for churches handling member, visitor and safeguarding data. Fully updated for the Data (Use and Access) Act 2025.
Updated for October 2026
The new duty to have a data protection complaints process and to acknowledge complaints within 30 days (in force since June 2026)
The charity "soft opt-in" for email marketing, and the conditions for using it
The lawful basis for handling DBS and criminal record information, which most church policies leave out
Safeguarding record retention in line with the child abuse inquiry's (IICSA's) 75-year recommendation
"Stop the clock" for subject access requests, plus the ICO's change to the Information Commission
Key Features
Lawful bases for processing, including the new "recognised legitimate interests"
Handling sensitive (special category) and criminal offence data
Data security and retention guidance
Roles, responsibilities and training
Ready-to-use schedules: key definitions, a data map and an annual trustee compliance checklist
Why It Matters
Every church holds sensitive data, from prayer requests to safeguarding records. Non-compliance risks fines, legal action and lasting damage to trust, and the law changed substantially in 2026.
Format
Editable Word document | Instant download
Handle personal data legally and responsibly
A UK GDPR-compliant policy tailored for churches handling member, visitor and safeguarding data. Fully updated for the Data (Use and Access) Act 2025.
Updated for October 2026
The new duty to have a data protection complaints process and to acknowledge complaints within 30 days (in force since June 2026)
The charity "soft opt-in" for email marketing, and the conditions for using it
The lawful basis for handling DBS and criminal record information, which most church policies leave out
Safeguarding record retention in line with the child abuse inquiry's (IICSA's) 75-year recommendation
"Stop the clock" for subject access requests, plus the ICO's change to the Information Commission
Key Features
Lawful bases for processing, including the new "recognised legitimate interests"
Handling sensitive (special category) and criminal offence data
Data security and retention guidance
Roles, responsibilities and training
Ready-to-use schedules: key definitions, a data map and an annual trustee compliance checklist
Why It Matters
Every church holds sensitive data, from prayer requests to safeguarding records. Non-compliance risks fines, legal action and lasting damage to trust, and the law changed substantially in 2026.
Format
Editable Word document | Instant download