Congregation of St. Anne’s Scottish Episcopal Church, Strathpeffer
This Privacy Notice explains how the Congregation of St. Anne’s Scottish Episcopal Church (the “Congregation”), which is part of the Scottish Episcopal Church, uses your personal data.
Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the UK version of the General Data Protection Regulation and the Data Protection Act 2018 (together the ‘UK GDPR‘).
The types of personal data that we process include your name, your contact details, baptismal and membership details, visual images (e.g. photographs, video, live streaming), and , for clergy, information collected for the purposes of providing counselling and pastoral care.
Who are we?
The Congregation is the data controller and, in some cases the Congregation will act jointly with the Scottish Episcopal Church’s clergy, Dioceses and General Synod as other data controllers. This means that they each decide how your personal data is processed and for what purposes. This Privacy Notice is provided by the Congregation on our own behalf and on behalf of our Congregation’s clergy. In the rest of this Privacy Notice we use the words “we” and “us” to refer to the Congregation or our clergy, as appropriate. The Dioceses and General Synod have their own privacy notices on their websites and these provide further information about how they process your personal data.
How do we process your personal data?
As data controllers we comply with our obligations under the UK GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical and organisational measures are in place to protect personal data.
When we process personal information which is classed by UK GDPR as “special category data” or criminal records data, in addition to meeting one of the above legal bases, we will ensure that one or more of the following applies:
- You have given your explicit consent. You can withdraw that consent at any time, using the contact details provided below;
- We carry out processing in the course of our legitimate activities with appropriate safeguards as a not-for-profit body with a religious aim and on condition that the processing relates solely to our members, or to former members, or to people who have regular contact with us in connection with our purposes and that the personal information is not disclosed outside the Scottish Episcopal Church without your consent;
- In a life or death situation;
- Processing relates to personal data manifestly made public by the data subject;
- Processing is necessary for the establishment, exercise or defence of legal claims or where courts are acting in their judicial capacity.
Sharing your personal data
We will only share your personal data where this is necessary for the purposes set out above. Information will not be shared with any third party outside the Scottish Episcopal Church unless we have your consent or we are obliged or permitted to do so by law.
How long do we keep your personal data?
We keep your personal data for no longer than reasonably necessary. We will keep your personal information for as long as you are a member or have regular contact with us or so long as we are obliged to keep it by law or may need it to respond to any questions or complaints or for the purpose of legal proceedings. We may also keep it for statistical purposes, but if so we will only use it for that purpose. When the information is no longer needed it will be securely destroyed or permanently rendered anonymous.
Your rights and your personal data
Unless subject to an exemption under the UK GDPR, you have the following rights with respect to your personal data: –
- The right to request a copy of your personal data which we hold about you;
- The right to request that we correct any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for us to retain such data;
- The right to withdraw your consent to the processing at any time;
- The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller, known as the right to data portability;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request that a restriction be placed on further processing;
- The right to lodge a complaint with the Information Commissioner’s Office.
Further processing
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
Contact Details
To exercise all relevant rights, queries or complaints please contact the Clergy & Lay Representative at stannesmidross@gmail.com.
You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance
This notice was last updated on 10/07/2026