Online Privacy Notice for the Afon Nedd Ministry Area
Policy Updated [July 2026]
1. Overview
1.1 We are committed to protecting and respecting your data privacy when visiting our website. This privacy policy statement summarises what personal details we may collect from you when you use our site and what we will do with them. Further Privacy Policy statements and documents may apply Offline, and these are available, if relevant, on request.
1.2 This site is owned by Afon Nedd Ministry Area whose office is at 23, London Road, Neath SA11 1LE
1.3 Our Charity Commission registration number is 1134218. We are the ‘data controller’ of the personal information you provide to us.
1.4 We are registered as a Data controller with the Information Commissioners Office our registration number is: Insert Number ZC183378
1.5 We have appointed a Data Contact for the business who is Mrs Helen Bennett
1.6 You can contact our Data Contact at our postal address given above or via email at admin@parishofneath.org if you have any queries regarding this policy.
1.7 As a Data Controller, we will take all the necessary steps to comply with the GDPR and Data Protection Act 2018 and relevant legislation when managing any personal data which you may provide to us.
We are responsible for ensuring that data is processed:
1.7.1 Fairly and lawfully processed.
1.7.2 Processed for limited purposes
1.7.3 Adequate, relevant, and not excessive
1.7.4 Accurate and Secure.
1.7.5 Not kept longer than necessary.
1.7.6 Processed in accordance with your rights.
1.7.7 Not transferred to countries outside the UK without safeguards.
1.7.8 Processed in a manner that ensures appropriate security of the personal data.
1.8 We are committed to protecting and respecting your data privacy when visiting our website and providing us with your personal information. This privacy policy statement summarises what personal details we may collect from you before, during or after you use our site and what we will do with them.
1.9 Please Note: This Online Privacy information is a precis of our detailed written policies which are held separately. Please contact our Data Contact if you require further information regarding our data protection compliance procedures.
2. Our Privacy Notice and Data Protection policies:
2.1 We are committed to protecting your personal data privacy and, in accordance with relevant data protection laws, we uphold strict security procedures for the collection, storage, use and disclosure of your personal information.
2.2 We have described below the personal information we may gather about you, the purposes we will hold it for and the limited categories of people to whom we may disclose it.
3. What information do we collect and how may we use it?
3.1 During your visit to our site, we will only collect personal information that you choose to provide. If, for example, you contact us with an enquiry or request us to provide you with further information.
3.2 If you share other people’s data with us, you must check you have lawful authority to do so.
3.3 Other types of data we may collect from you include the following:
3.3.1 Identity data: name, username, title, date of birth. Contact data: billing and delivery address, email address, phone number.
3.3.2 Financial data: payment card details (processed by a third-party payment services provider and not stored by us).
3.3.3 Technical data: IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform based on your Cookie preference choices.
3.3.4 Usage data: with your consent to Cookies, we may keep information about how you use our website.
4. We may use the information you provide us with in the following ways:
4.1 To ensure that the content of our site is presented in the most effective manner.
4.2 To respond to your queries and requests.
4.3 To communicate with you.
4.4 To provide you with any information, requested from us.
4.5 We also reserve the right to disclose your personal information where we are required to do so by law, such as to assist in any disputes, claims or investigations relating to your account or contracts with us and to detect and prevent fraudulent transactions.
5. How do we store and protect your data?
5.1 We have robust information security management systems in place to protect your personal data. We take the security of your information seriously and have implemented appropriate technical and organisational security measures to protect it against any unauthorised or unlawful processing and against any accidental loss, destruction, or damage.
5.2 Data we receive, and process is held by us in secure electronic devices and separate back up devices and servers.
5.3 The Main Establishment for all our Data Processing is the UK. We do not operate or transfer Personal Data outside of the United Kingdom.
5.4 Due to the operation of the Internet and other computer-based applications Personal Data under our control may transit countries outside of the UK.
5.5 We will only transfer data outside the UK if adequate safeguards are in place in the destination country.
6. Third parties who provide services on our behalf
6.1 We may share your personal information with certain third parties who provide services on our behalf.
6.2 Such 3rd Parties only have access to the personal information they need to perform those services.
6.3 Such 3rd parties are bound by contractual arrangements with Us and are required to keep your personal information secure and confidential. They may only use it as permitted by us in accordance with our Privacy Policies.
6.4 If you have contracted with us, we will share data only to the extent necessary for the performance of the contract, otherwise we will obtain specific additional consent from you before sharing your data.
7. How long do we store your data?
7.1 We will not keep your data for longer than is necessary for the relevant purposes set out in this Privacy Notice and our Offline policies.
7.2 Speculative enquiries for information, the data will be retained for 12 months, unless the Consent is rescinded, in case of a follow up enquiry.
7.3 We also store personal data in line with Regulatory and legal requirements in accordance with the law.
8. Your Rights
8.1 Under the UK General Data Protection Regulation (UK GDPR) and The Data Protection Act 2018 (DPA) you have a number of rights about your personal data. To exercise any of your rights contact our Data Contact using the details given above.
8.2 You have the right to request from us access to and rectification or erasure of your personal data; the right to restrict processing; the right to object to processing as well as in certain circumstances the right to data portability as below.
8.3 In the event that you provide your data directly to us for the purpose of a contract, or in circumstances where you have provided your data by consent, you have the right to be provided with your data in a structured, machine-readable format. This is known as Data Portability.
8.4 Following a request relating to Data Portability we will transmit the relevant personal data to the data subject or their nominated data controller where it is possible and technically feasible for us to do so.
8.5 Where you have provided your data voluntarily by Consent you have the right to withdraw your Consent at any time. However, withdrawal of Consent does not affect the lawfulness of any processing of your data based on your Consent prior to its withdrawal.
8.6 You have the right to complain to the Data Regulator at the Information Commissioners Office on 0303 123 1113 or through their website www.ico.org.uk.
8.7 Where we need to process data for the purposes of entering into a Contract with you, if you fail to provide such data it may mean that we cannot establish legal relations between us and the contract may not be able to go ahead. We will inform you if this happens.
8.8 Automated decision making and profiling means making decisions without human intervention, usually with the use of a computer program or software. We do not use automated decision-making software.
8.9 Please note we will retain and use your personal information as necessary to comply with our legal obligations. If we need to use your data for a reason it was not collected and you are not aware of this, we will inform you and in appropriate cases obtain your further consent to such use.
8.10 If the processing is based on Legitimate Interests, you are entitled to know what and whose Legitimate Interests they are.
8.11 You are entitled to know the purpose of the processing, whether we or someone else is processing it and the categories of Personal Data involved.
8.12 We use the lawful basis of Legitimate Interests for processing data in the following circumstances:
8.12.1: When processing data from our CCTV equipment.
9. Lawful bases for data processing
9.1 We hold and process your data by lawfully allowed means, these include:
9.1.1 Your Consent: Consent is usually given by yourself when you contact us via this Website or personally when we discuss products or advice with you.
9.1.2 Contractual obligations: This occurs when you purchase products or services from us.
9.1.3 Legal Obligation: When the processing is necessary for us to comply with the Law.
9.1.4 Vital Interests: When the processing is necessary to protect someone's life.
9.1.5 Public Task: When the processing is necessary for us to perform a task in the public interest or for an official function and the task or function has a clear basis in Law.
9.1.6 Legitimate Interests: When the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
N.B. Legitimate Interests can only be used following the application of the prescribed three-part Legitimate Interests Assessment Test and then only when a positive outcome is indicated by the conclusions of the test. All Legitimate Interests Assessment Tests will be documented, recorded, and retained.
10. Children’s data
10.1 We will not knowingly collect information from persons under 13 years of age without their parent's or guardian's consent.
10.3 If a Parent or Guardian of a person under 13 years of age discovers their child has engaged with our website without their consent, please inform us immediately using the contact email provided above.
10.4 We have considered the elements of the AADC (Children’s code) in relation to our Online activity and concluded that we are not a relevant Information Society Service which is likely to be accessed by children.
10.5 There is nothing on our website which could be damaging to children who view the pages or the pictures.
11. Third Party Websites
11.1 From time to time our site may contain links to and from the websites of our suppliers or other third-party sites.
11.2 If you visit any of these sites you should confirm they have their own privacy policies, and you should check these before submitting any personal data on their site. We cannot accept any responsibility or liability for the policies on any other websites.
12 Data Access
12.1 You have rights of access to the data we hold about you. Should you wish to exercise these rights please contact our Data Contact whose details are given above.
12.2 There is usually no charge for the Data Access service. As soon as we are satisfied as to your identity, we will send you, without delay and in any case within one Month, the Personal Data we hold relating to you, which we are legally obliged to provide.
12.3 In the event we need more time to gather the requested information we will let you know without delay and in any event within one month.
12.4 A fee may be payable for Data Access services if the request(s) are manifestly unfounded or excessive or repetitive in nature. Alternatively, we may choose to ignore this type of request. In these cases, we will inform you of our decision and if applicable any fee that may be required.
12.5 Please contact us if you believe that any personal data or information which we hold about you is incorrect or incomplete. Any information or data which is found to be incorrect will be corrected as soon as practicable.
12.6 Please contact us if you wish to have your personal data removed entirely from our systems. As soon as we are satisfied as to your identity and the data is not required to be kept for any other lawful reason or purpose it will be removed from our systems forthwith.
12.7 If you so wish, your Data will be provided to you electronically in a commonly used format such as email.
12.8 If you are unhappy with any of the responses given to you by us you may complain about us to the regulator at the Information Commissioners Office on 0303 123 1113 or through their website www.ico.org.uk.
13. Changes to this policy.
13.1 There may be developments in how we use your data according to changes in the Law.
13.2 We reserve the right to amend this Data Protection and Privacy Policy at any time without notice and it is your responsibility to revisit this page from time to time to re-read this policy including any and each time you visit our website.
13.3 Any revised terms shall take effect as at the date of posting.
13.4 If you do not find your concern addressed here, feel free to contact us by e-mailing our Data Contact at the contact details given above.