Privacy policy

Effective date: 3 March 2026

This privacy policy explains how All Saints’ Church, St Andrews collects, uses and protects personal information through this website only.

This policy applies solely to data collected via https://www.allsaints-standrews.org.uk/.

It does not cover personal data processed by the church in other contexts such as pastoral care, electoral roll records, safeguarding, baptisms, weddings or funerals. Those are covered by separate parish data protection arrangements.

---

1. Who we are

All Saints’ Church, St Andrews is a congregation of the Scottish Episcopal Church and a charity registered in Scotland

• Scottish Guarantee Company (Company Number SC333868)
• Scottish Charity Number SC0411717

For the purposes of data protection law, the data controller for this website is:

The Revd Canon Alasdair Coles, Rector
All Saints’ Rectory
39 North Street
St Andrews
KY16 9AQ
Scotland

Email: rector@allsaints-standrews.org.uk

Telephone: +44 (0)1334 473193

---

2. Legal basis for processing

We process personal data in accordance with:

• UK General Data Protection Regulation
• Data Protection Act 2018

For website activity, we rely on the following lawful bases:

• Legitimate interests
• To operate, maintain and improve the website, respond to enquiries and manage venue or activity requests.
• Moderating and publishing comments submitted to the website.

Contract

Where you make a venue booking or other request that requires us to take steps at your request before entering into an agreement.

Consent

Where you voluntarily contact us and provide your personal information for a specific purpose.

You may withdraw consent at any time by contacting us.

---

3. What information we collect

a) Information collected automatically

When you visit this website, we may collect limited technical information, including:

• IP address
• Browser and device type
• Pages visited and links clicked
• Approximate location based on IP address
• Basic interaction data such as scrolling and page engagement

This information is collected using analytics tools including Microsoft Clarity.

Microsoft Clarity helps us understand how visitors use the site by collecting pseudonymised usage data such as page views, mouse movements and scrolling behaviour. It does not directly identify you.

We use this information to improve website content, usability and performance.

b) Information you provide voluntarily

We collect personal data only when you choose to contact us directly by email or telephone.

This may include:

• Your name
• Your email address or telephone number
• Any information you include in your message

We use this information solely to:

• Respond to your enquiry
• Manage venue bookings or activity requests
• Provide information you have requested

We do not use website enquiry data for marketing purposes.

c) Comments on posts

Please do not post confidential or sensitive personal information in public comments.

• By submitting a comment, you agree that your contribution may be published and moderated in accordance with this policy.
• Comments relating to safeguarding concerns should not be posted publicly. Please contact the Rector directly.

If you leave a comment on a post, we collect the information shown in the comments form, which may include:

• Your name
• Your email address
• The content of your comment
• Your IP address
• Browser information

This information is collected to:

• Publish your comment
• Prevent spam and misuse
• Maintain the security of the website
• Comments may be publicly visible on the website together with the name you provide.

We advise you not to include sensitive personal information in comments.

---

4. How we use your information

We use personal data only where necessary and for limited purposes.

We may use your data to:

• respond to enquiries
• manage venue bookings and related communications
• monitor and improve website performance
• maintain website security

We do not sell, rent or trade personal data.

---

5. Data sharing

We share personal data only where necessary to operate this website.

Our service providers include:

• SiteGround – our website hosting provider. Server logs may include IP addresses and access times for security and maintenance purposes.
• Microsoft Clarity – provides website analytics and session behaviour insights.

These providers process data on our behalf and are subject to appropriate contractual and security obligations.

We do not share personal data for advertising or marketing.

---

6. International data transfers

Some technical data collected through analytics services may be processed outside the UK.

Where this occurs, appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses
• data processing agreements with service providers

These safeguards ensure data is handled in accordance with UK data protection law.

---

7. Data retention

We keep personal data only for as long as necessary.

• Enquiry emails are retained only as long as required to respond and for reasonable administrative record-keeping.
• Analytics data is retained for a limited period to support website improvement.
• Server logs are retained temporarily for security and maintenance purposes.
• Comments may remain published on the website unless removal is requested or moderation requires deletion.

We review stored data periodically and delete information that is no longer required.

---

8. Security

We take appropriate technical and organisational measures to protect personal data, including:

• secure hosting environments
• password-protected systems
• restricted administrative access
• use of trusted service providers

No online system can be guaranteed completely secure, but we take data protection seriously and follow recognised good practice.

---

9. Cookies

This website uses cookies to improve functionality and understand usage.

Types of cookies may include:

• Functional cookies – to enable core site features
• Analytical cookies – to understand visitor behaviour
• Third-party cookies – used by Microsoft Clarity

You can manage non-essential cookies through the cookie consent banner.

Further details are available on our Cookie Policy page.

---

10. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact the data controller using the details above.

---

11. Children

This website is not intended for children under 16. We do not knowingly collect personal data from anyone under 16 through this website.

If you believe a child has provided personal data via this website, please contact us and we will delete it promptly.

---

12. Complaints

If you have concerns about how we handle personal data relating to this website, please contact us in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: https://ico.org.uk/

Telephone: +44 (0)303 123 1113

---

13. Changes to this policy

We may update this policy from time to time to reflect changes in the law or website practice.

The effective date at the top of this page will be updated when changes are made.