Your information

Who is responsible

The Parochial Church Council of St George the Martyr with St Alphege & St Jude, Southwark is the data controller. Contact hello@borough.church or write to St George the Martyr, Borough High Street, London SE1 1JA.

What we collect and why

We collect your name, email, organisation if supplied, requested space, dates and times, activity, expected attendance and notes. We ask whether your organisation is a charity or not-for-profit and whether the activity involves under-18s or adults needing additional support.

We use this information to assess suitability, check availability, discuss prices and safeguarding arrangements, and respond to your enquiry. Required fields help us assess the request; you can contact us by email if you cannot complete the form. Please do not provide participants’ names, medical details or other sensitive personal information.

Where you enquire about hiring personally, we use the details necessary to take steps at your request towards a hire agreement. Where you act for an organisation, we rely on our legitimate interests in managing room hire and communicating with its representative. We also rely on legitimate interests to protect the service against abuse and keep proportionate review records.

Your enquiry does not subscribe you to marketing. Staff make booking and pricing decisions. The spam check may reject an automated submission; contact us if it prevents you from enquiring.

Who can access it

Authorised church staff review enquiries in a restricted workspace. OpenAI Sites hosts the service using Cloudflare infrastructure. Cloudflare Turnstile processes technical information about your browser and device to help prevent spam. If a booking proceeds, staff enter the relevant details into ChurchSuite. This form does not automatically create a booking, invoice or bank payment.

Hosting and support may involve processing outside the UK. OpenAI’s applicable data-processing terms provide contractual safeguards for UK data, including standard contractual clauses with the UK Addendum. We do not describe this service as UK-only storage. You can ask us about the applicable safeguards.

OpenAI Sites data-processing terms · Turnstile privacy information

How long we keep it

For unsuccessful or withdrawn enquiries, we normally remove the enquiry content from the working system within six months of closing the enquiry. We may retain specific information needed to resolve a complaint or meet a legal obligation, reviewing that need regularly. Confirmed booking and accounting records have separate retention arrangements.

A minimal record of the enquiry reference, submission identifier and removal action remains for accountability and to prevent old submissions being recreated. This does not retain your contact details, activity, dates, pricing or review notes.

Removal from this app does not itself remove copies in correspondence, ChurchSuite or the hosting provider’s recovery backups. Requests concerning those copies are handled separately. Backup copies may remain until the provider’s recovery period ends.

Your rights

You can ask to access or correct your information, or request erasure or restriction. Where applicable, you can request a portable copy. These rights depend on the circumstances and legal requirements.

You can object to uses based on legitimate interests. Contact hello@borough.church, quoting your enquiry reference if available. We will consider your request and explain any information we need to retain.

You can complain to the Information Commissioner’s Office. The church’s general privacy notice (PDF) covers its wider activities.