Data Protection - Information about consent  

Your personal data will be treated as strictly confidential and will only be shared with other members of the church for purposes connected with the church.

You can grant consent to all the purposes; some of the purposes or none of the purposes.  Where you do not grant consent we will not be able to use your personal data; (so for example we may not be able to let you know about forthcoming services and events); except in certain limited situations, such as where required to do so by law or to protect members of the public from serious harm. You can find out more about how we use your data from our Data Privacy Notice, which is on display in the church and available on our website or from the Parish Office.
You can withdraw or change your consent at any time by contacting the Parish Administrator at St Andrew’s Church Office, St Andrew Street, Hertford SG14 1HZ or  Please note that all processing of your personal data will cease once you have withdrawn consent, other than where this is required by law, but this will not affect any personal data that has already been processed prior to this point.

Extracts from our Data Privacy Notice:


How long do we keep your personal data?

We keep data securely in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website.
Specifically, we retain gift aid declarations and associated paperwork for up to 7 years after the tax year to which they relate; we keep electoral roll data in church archives; and parish registers (baptisms, marriages, funerals) permanently (older registers at County Archives).

Your rights and your personal data 

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: -

  • The right to request a copy of your personal data which the PCC of Hertford St Andrew holds about you;
  • The right to request that the PCC of Hertford St Andrew corrects any personal data if it is found to be inaccurate or out of date; 
  • The right to withdraw or change  your consent at any time; [This will not affect any personal data that has already been processed prior to this point];
  • The right to request your personal data is erased where it is no longer necessary for the PCC of Hertford St Andrew to retain such data;  [Subject to a legal requirement to retain or where erasure is impracticable];
  • The right to request that the data controller provide the data subject with his/her personal data and, where possible, to transmit that data directly to another data controller (known as the right to data portability)   where requested.
  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
  • The right to object (where applicable)  to:
    • Processing based on legitimate interests or the performance of a task in the public interest/exercise of authority (including profiling);
    • Direct marketing (including profiling); and
    • Processing for purposes of scientific/historical research and statistics.
  • The right to lodge a complaint with the Information Commissioners Office.