1. Introduction
Cardiff Prayer Room is committed to protecting your privacy and treating any information you share with us with care, respect and confidentiality.
We recognise that people may come to Cardiff Prayer Room with matters that are deeply personal or sensitive. If you submit a prayer request, contact us, or otherwise share information with us, we will handle that information responsibly and will only use it for the purposes explained in this Privacy Policy.
We will not sell your personal information, and we will not use your prayer requests for advertising or marketing purposes.
This Privacy Policy explains what information we collect, why we collect it, how we protect it, and the rights you have over your personal information.
2. Who we are
Cardiff Prayer Room is responsible for the personal information collected through this website.
If you have any questions about this Privacy Policy or how we handle your information, please contact us through the Contact page on this website.
3. Information we may collect
Depending on how you use the website, we may collect:
- your name;
- your email address or other contact details;
- prayer requests and other information that you choose to provide;
- information you provide when contacting us;
- information you choose to provide when interacting with the Prayer Wall;
- technical information about your device or your use of the website, where this is collected through cookies or similar technologies.
Prayer requests
A prayer request may contain personal and sensitive information, including information about your health, circumstances, family, relationships, beliefs or other aspects of your private life.
We therefore treat prayer requests as confidential information and take particular care with them.
Under UK data protection law, information revealing religious beliefs and information concerning health can constitute special category personal data, which receives additional protection.
4. Confidentiality of prayer requests
Confidentiality is important to us.
When you submit a prayer request, we will normally restrict access to that request to the people who need to receive it in order to provide the prayer and support service offered by Cardiff Prayer Room.
We will not normally publish your prayer request publicly or disclose it to other people without your permission.
Where our prayer request form gives you the option of sharing a request on the Prayer Wall, we will only publish it according to the option you select.
You should not feel obliged to provide your name or other identifying information in a prayer request unless it is necessary for the purpose you have chosen.
Important limits to confidentiality
Although we take confidentiality seriously, we cannot promise absolute confidentiality in every circumstance.
We may need to disclose information where this is:
- required by law;
- necessary to protect someone from serious harm;
- necessary in relation to safeguarding concerns, particularly where a child or vulnerable person may be at risk;
- necessary to protect someone’s vital interests; or
- otherwise necessary to comply with our legal obligations.
Where disclosure is necessary, we will seek to share only the information that is reasonably necessary for the particular purpose.
5. How we use your information
We may use personal information to:
- receive and respond to prayer requests;
- pray for people who have asked us to pray for them;
- respond to enquiries;
- administer and maintain the Prayer Wall where you have chosen to share a request;
- communicate with you where you have asked us to do so;
- maintain the security and proper functioning of the website;
- comply with legal and regulatory obligations.
We will not use information contained in prayer requests to send advertising or commercial marketing.
We will not sell, rent or trade your personal information.
6. Your choice when submitting a prayer request
We want people to have meaningful control over what happens to their prayer requests.
Where appropriate, our prayer request form will provide separate choices concerning:
- whether you wish us to receive and pray for your request; and
- whether you wish the request to be shared on the public Prayer Wall.
Submitting a private prayer request does not mean that you are agreeing to have it published publicly.
Where we rely on your consent to process sensitive information, that consent will be obtained through a clear affirmative action. You may withdraw consent at any time. UK GDPR requires consent to be freely given, specific and informed, and requires that withdrawing consent is made straightforward.
7. Sharing information with others
We keep disclosure of personal information to a minimum.
We will not normally disclose the contents of a private prayer request to people outside the Cardiff Prayer Room team without your permission.
We may use carefully selected service providers to operate the website or provide necessary technical services, such as website hosting, email delivery, security, spam prevention or form processing.
Where another organisation processes personal information on our behalf, we will take appropriate steps to ensure that the information is handled securely and only for authorised purposes.
8. The Prayer Wall
Some prayer requests may be shared publicly on the Prayer Wall.
We encourage you not to include unnecessary identifying information in a request that you wish to have published.
Where possible, prayer requests intended for public display should avoid information such as:
- full names;
- home addresses;
- telephone numbers;
- email addresses;
- detailed medical information;
- information that could unnecessarily identify another person.
If you subsequently ask us to remove a prayer request from the Prayer Wall, please contact us and we will consider the request promptly.
9. How long we keep information
We will not keep personal information for longer than is reasonably necessary for the purpose for which it was collected.
Prayer requests and related information will be reviewed periodically and deleted or securely disposed of when they are no longer required.
The exact retention period may depend on the nature of the information and the purpose for which it was provided.
We may retain limited information where this is necessary to comply with a legal obligation, establish or defend a legal claim, or maintain a record that someone has asked us not to contact them.
The UK GDPR requires organisations to tell people how long their information will be kept, or the criteria used to determine the retention period.
10. Keeping your information secure
We take reasonable and appropriate technical and organisational measures to protect personal information against:
- unauthorised access;
- accidental loss;
- inappropriate disclosure;
- alteration; and
- destruction.
Access to confidential prayer requests will be restricted to those who have a legitimate need to access them.
However, no internet-based system can be guaranteed to be completely secure. You should therefore avoid including information in an online prayer request that you would not wish to transmit electronically.
11. Cookies and website analytics
Our website may use cookies and similar technologies to enable the website to function properly and, where applicable, to understand how visitors use the website.
Where we use analytics or other non-essential cookies, we will provide appropriate information and obtain consent where required.
You can control cookies through your browser and, where applicable, through the cookie controls provided on this website.
[This section should be amended to reflect the actual cookies, analytics and plugins installed on the website.]
12. Links to other websites
This website may contain links to external websites, including social media services such as Facebook and Instagram.
Once you leave the Cardiff Prayer Room website, the privacy practices of the external website will apply. We encourage you to read the privacy policy of any external service you use.
Cardiff Prayer Room is not responsible for the privacy practices or content of external websites.
13. Your data protection rights
Under UK data protection law, you may have rights including the right to:
- ask what personal information we hold about you;
- request a copy of your personal information;
- ask us to correct inaccurate information;
- ask us to delete your personal information in appropriate circumstances;
- ask us to restrict how we use your information in appropriate circumstances;
- object to certain processing;
- withdraw consent where we are relying on consent;
- exercise other rights available to you under data protection law.
The rights available to you depend on the circumstances and the legal basis on which we are processing your information.
If you have given consent for us to use your information, you can withdraw that consent. Withdrawal of consent does not affect processing that was lawful before the withdrawal.
To exercise your rights, please contact us using the details on our Contact page.
14. Children’s information
We recognise that people of all ages may wish to ask for prayer.
If a prayer request concerns a child or young person, please avoid providing unnecessary identifying information.
We will take particular care when handling information concerning children and will respond appropriately to any safeguarding concern.
Where a prayer request raises a safeguarding concern, our normal confidentiality arrangements may be overridden where this is necessary to protect a child or another person from harm.
15. Changes to this Privacy Policy
We may occasionally update this Privacy Policy to reflect changes to the website, the way we handle personal information, or changes in legal or regulatory requirements.
The date at the top of this page indicates when the policy was most recently updated.
16. Contact us
If you have any questions about this Privacy Policy, the confidentiality of a prayer request, or the way we use your personal information, please contact us through the Contact page.
If you have submitted a prayer request and would like it removed, would like to withdraw consent, or would like to know what information we hold about you, please tell us clearly what you are requesting and we will respond appropriately.