Last updated: September 3, 2026. This policy explains what personal information this website collects, why, and what your rights are. It is written to meet the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Who we are
This website is run by Greater Grace Christian Church of S.E. London (registered charity number 1085961), a church meeting in South East London. For anything to do with your personal information, contact us at:
- Email: pmorley01@gmail.com
- Post: Greater Grace Church, 42 Wildfell Road, London SE6 4HU
We are the “data controller” for the information described below.
The information we collect, and why
When you contact us through the site
If you fill in the enquiry form on the Plan Your Visit page, we collect the name, email address and message you provide. We use this only to reply to you and to follow up if you have asked us to. The message is sent to us by email; it is not published anywhere and is not added to a mailing list. Our lawful basis is our legitimate interest in responding to people who get in touch, and taking steps at your request.
Analytics — only if you agree
We would like to understand how the site is used so we can improve it. To do that we use Google Analytics, which sets cookies and collects information such as the pages you visit, roughly where in the world you are, and the type of device and browser you use. Your IP address is shortened (“anonymised”) before it is stored.
Google Analytics is switched off by default. It only runs if you choose “Accept” on the cookie banner. You can change your mind at any time by clearing this site’s cookies in your browser, which brings the banner back. Our lawful basis is your consent.
Spam protection
To stop automated abuse of our forms we use Google reCAPTCHA. When you start filling in a form, reCAPTCHA loads and sends information to Google — including your IP address and how you interact with the page — so Google can tell us whether the submission is likely to be from a person or a bot. reCAPTCHA is not loaded unless and until you interact with a form. Google’s use of this information is governed by the Google Privacy Policy and Terms of Service. Our lawful basis is our legitimate interest in keeping the site secure.
Content embedded from other websites
Some pages include content hosted elsewhere:
- Google Maps on the Plan Your Visit and Service Times pages. The map is not loaded until you click “Show map”. Once loaded, Google may collect data as described in its privacy policy.
- YouTube videos on the sermon and Watch on YouTube pages. A video is not loaded until you press play, and we use YouTube’s “privacy-enhanced” mode. Once you play a video, YouTube may set cookies and collect data.
- Sermon audio streamed from Spotify for Podcasters when you press play on a sermon.
- Web fonts supplied by Google Fonts, which are requested from Google’s servers when a page loads and may involve your IP address being processed by Google.
We do not control these third parties and recommend you read their own privacy policies.
Website hosting and security logs
Our website is hosted by GoDaddy. Like most websites, the hosting servers automatically record technical information such as your IP address, the time of your visit and the pages requested, in server logs used to keep the site secure and running. Our lawful basis is our legitimate interest in the security and reliability of the site.
Cookies
Cookies are small files stored on your device. This site uses:
| Cookie | Purpose | Set when |
|---|---|---|
| gg_consent | Remembers whether you accepted or declined analytics cookies | You choose an option on the cookie banner (kept 1 year) |
| _ga, _ga_<id> | Google Analytics — tells returning visits apart and measures usage | Only after you accept analytics (kept up to 2 years) |
| _GRECAPTCHA | Google reCAPTCHA — spam protection for forms | Only when you interact with a form (kept ~6 months) |
| WordPress session/login cookies | Keep website editors signed in to the admin area | Only for logged-in church staff — not set for ordinary visitors |
You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site working.
Who we share your information with
We do not sell your personal information and we do not share it for marketing. We share it only with the service providers that make this website work — our website host (GoDaddy) and, where relevant, Google (Analytics, reCAPTCHA, Fonts, YouTube) — and only as needed to provide those services. We may also disclose information if the law requires us to.
Where your information is processed
Some of our providers, including Google, are based in the United States and may process your information there. Where information is transferred outside the UK, it is protected by an appropriate safeguard recognised under UK data protection law, such as the UK extension to the EU-US Data Privacy Framework or the UK’s International Data Transfer Agreement / standard contractual clauses.
How long we keep your information
- Enquiry messages: kept for as long as needed to deal with your enquiry and any reasonable follow-up, then deleted.
- Analytics data: retained by Google for up to 14 months, then automatically deleted.
- Server security logs: kept for a short period by our host and then overwritten.
Your rights
Under UK data protection law you have the right to ask us to:
- give you a copy of the personal information we hold about you;
- correct information that is wrong or incomplete;
- delete your information, or restrict how we use it;
- object to us using your information where our basis is legitimate interest;
- withdraw your consent to analytics at any time.
To exercise any of these rights, email us at pmorley01@gmail.com. We will respond within one month.
Making a complaint
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk, helpline 0303 123 1113.
Children
This website is intended for a general audience and is not directed at children. We do not knowingly collect personal information from children through the site without the involvement of a parent or guardian. If you believe a child has provided us with personal information, please contact us and we will delete it.
Giving and donations
Online giving is not yet handled on this website. When a giving facility is added, any payment will be processed by a dedicated provider, and that provider’s privacy policy will apply to the information you give them. This policy will be updated at that time.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.