What are you looking for?
Find out how you're making a difference
Read our Impact ReportCould you provide essential medical care for mothers and babies in Chad?
Give nowPray for mothers and babies in Chad.
Download your resourcesGet updates from the frontline of mission.
Mission workersCould you provide essential medical care for mothers and babies in Chad?
Download your resourcesNeed a BMS speaker for your church?
Request a speakerAt BMS World Mission, it is important to us to keep your data safe and to adhere to our obligations under the UK data protection laws. We only collect personal data for specific purposes and once that purpose has finished, we delete the data. In the following sections you will read how, when and why we collect data and how we handle and use it. If you have any questions or feedback, please don’t hesitate to get in touch by emailing mail@bmsworldmission.org or calling 01235 517700.
1. Who we are
We are the Baptist Missionary Society (“BMS”, “we”, “us”), also known as BMS World Mission, a charitable company registered at Companies House under company number 10849689 and registered with the Charity Commission under charity number 1174364. Our contact details are: 129 Broadway, Didcot, Oxfordshire, OX11 8XD, mail@bmsworldmission.org, 01235 517700.
For the purposes of data protection law, we are the ‘controller’ of the personal data we collect and hold about you and we are therefore responsible for it.
Our Data Protection Officer is the officer of BMS who is responsible for all matters relating to the protection of personal data, and can be contacted at dataprotection@bmsworldmission.org
We are registered with the Information Commissioner’s Office (“ICO”) with registration number Z8899170.
2. Information about you
By using our website and completing and returning forms from BMS publications, we may collect the following information about you in the following ways:
2.1 Information which you give us
We collect information about you when you fill in forms on our website or in our publications and when you communicate with us. This includes (but is not limited to) the information you provide us with when you make a donation, sign up to become a Church Partner, sign up to become a BMS 24:7 Partner, sign up to receive information about serving with BMS, sign up to support a mission project, pledge to leave a gift in your Will to BMS, order resources whether free of charge or not, request a BMS speaker, sign up to stay informed, sign up to receive our weekly email, provide feedback or contact us. When you interact with us on places like Facebook, Twitter or LinkedIn, we might gather the information you make available.
This can include your full name, address, email address, phone number, financial and credit card information, employer details for processing a payroll gift, taxpayer status for claiming Gift Aid, which church you are attending and date of birth.
Under data protection law, certain categories of personal information are recognised as sensitive, including health information and information regarding religious beliefs (‘sensitive personal data’). Sometimes we might provide you with the option to consent to sharing the name of your church with us to be able to interact with you on a more personal level or in the course of a role you have in your church. Where you provide us with sensitive personal data, such as where you worship, we will process this using one of the following permitted criteria: with your explicit consent, where you manifestly make this information publicly available, or where you have regular contact with us in connection to your religion or place of worship. If you decide to share with us this sensitive personal data about yourself, we will keep it secure and only for as long as it is necessary.
2.2 Information we collect about you
By visiting and interacting with our site we also collect certain information about you automatically, through Cookies (see section 2.3), specifically Google Analytics. This includes technical information such as your IP address, browser type, time zone setting as well as information about your visit including date and time of your visit, clickstream to, through and from the website, how much time you spend on each webpage, how you interact with the website. Using this data helps us find out if our website is working well and helps us to improve it.
When you make donations using online giving platforms we match the donation to our own database, and record the date, amount and type of donation. When we receive a Will that includes BMS as a beneficiary, we will keep this Will on file as long as needed.
Based on your consent, we collect information from third parties such as event organising platforms (for example Eventbrite) or sites like Just Giving when you fundraise for BMS, or UK Baptist Unions with whom we have a data sharing agreement. Please take a look at their privacy policies to see how they use your data.
2.3 Cookies
Like most other websites, our website uses cookies.
Cookies are small files which websites store on your computer and which contain various types of information about your visit to a website. They are not viruses or malicious software but they are generally aimed at providing you with a good experience when browsing a site by, for example, remembering your preferences so that you do not need to reset them every time you visit the website.
Cookies can record information about how you browse the internet. They can therefore be used by websites to advertise goods and services which, based on your browsing history, are similar to goods and services which you have previously searched online. This is why some users reject or delete cookies.
Cookies normally expire after a length of time which can vary from a few minutes to more than a year. Some cookies are ‘session cookies’ which are deleted when you close your internet browser or after a period of inactivity. Others are ‘persistent cookies’ which remain on your computer until their expiration date.
We do not store cookies on your computer without your consent, unless they have the sole purpose of carrying out the transmission of communications or they are strictly necessary for providing an online service.
You may restrict or block cookies which are set by any website through your browser settings. Your browser settings also allow you to clear your browsing history and delete cookies. Information about how you can do this can be found on this link https://ico.org.uk/for-the-public/online/cookies. Mobile devices may have their own settings and you need to refer to the manual of the device.
Please note that restricting or disabling cookies may impact the functioning of parts of our website.
A list of the cookies we use is available within the site’s cookie opt-in settings.
3. Why we collect this information
We take into account and are compliant with all legal requirements set out in the Data Protection Act 2018. Our processing of your personal information as described in this policy is allowed based on one or more lawful grounds.
In this section we list the different purposes for which we collect and use your personal information, as well as the legal grounds on which we rely to justify such data processing.
Where we rely on our legitimate interest to process your data (including contacting you), we only do so after carefully considering how it might impact you and your rights and weighing this up against our need to contact you.
Processing purpose |
Legal basis for processing |
---|---|
Receiving donations, including gifts in Wills, acknowledging receipt of donations and keeping a record of donations received. |
The information is necessary for our legitimate interest to properly administer donations received and to maintain adequate and accurate financial accounts. |
Claiming Gift Aid on eligible donations. |
The information is necessary for our legal obligation to HMRC to claim Gift Aid. |
Managing Direct Debit instructions by contacting your bank and sharing the financial information you have provided. |
We collect and process Direct Debit information based on your consent. |
Thanking for your gift or for something you did for BMS to confirm safe receipt and express our gratitude by email, call or mail. |
We thank you based on our legitimate interest to confirm receipt of the gift. |
Maintaining our church partnership network, using the information you provide when you sign up to be a church partner. |
The information is necessary for our legitimate interest to maintain the network. |
Maintaining our BMS 24:7 Partnership and other committed, giving supporter network, using the information you provide when you sign up to be a 24:7 Partner or send committed, regular gifts to BMS. |
The information is necessary for our legitimate interest to maintain the network. |
Running the Birthday Scheme (BS), using the information you provide (name, address and date of birth) when you sign up to be a BS member or send gifts for the BS. Any participating church receives instructions on how to run the scheme, how to send the gifts and your personal data to BMS, which data to collect, which resources to use and an information to adhere to data protection laws. |
The information is necessary for our legitimate interest to maintain and run the BS. BMS is a joint controller of members’ data together with each participating church. BMS set the BS up as an offer to churches to run it at their church as a church fundraising tool. BMS determines which data need to be collected by a volunteer, the Birthday Scheme Co-ordinator (BSC), who is selected by the church. BMS determines that the BSC sends a birthday card on the member’s birthday (purpose) and provides the BSC with a register, leaflets to join and cards (means) to process that data. However, BMS doesn’t select the members and without the church’s decision to join and contribute in selecting the volunteers, running the scheme and sending the BS gifts to BMS, the BS would not run in a particular church and the personal data would not be collected. While BMS provides the means to collect and manage the personal data, the church can decide to hold the data in a different way (eg on their own database). This means that BMS and the church both have a major contribution in determining the purpose and means of processing the personal data of the BS members, which makes them joint controllers. Churches will therefore also have their own privacy policy determining their legal basis for processing your personal data. |
Ask for financial support (appeals) and non-financial support such as volunteering or prayer. |
The information is necessary for our legitimate interest to finance our work and maintain the network. |
Sending our BMS magazines and other BMS communications to church role holders and other BMS supporters, using the contact details provided. |
The information is necessary for our legitimate interest to maintain the network. |
Keeping you updated about BMS work by email, when you have requested information, using the email address and contact details you have provided. |
We send you email updates based on your consent. |
Managing and responding to requests for a BMS speaker, using the details you have provided. |
The information is necessary for our legitimate interest to properly manage speaking engagements. |
Operating, maintaining, improving our website and keeping it secure, using the information gathered by cookies on the website. |
The information is necessary for our legitimate interest to ensure the smooth functioning of our website and its continuous improvement. |
Keeping you updated about what we are doing, our latest news and appeals, when you have requested this information by mail, email or phone. |
We send you this information based on your consent. |
Processing and sending out your order for items from our resource centre, whether free of charge or not. |
The information is necessary for our contractual obligation to complete your order. |
Where we rely on our legitimate interest to process your data (including contacting you), we only do so after carefully considering how it might impact you and your rights and weighing this up against our need to contact you.
We will hold your data securely and only those who need to will be able to see or use this information.
4. DISCLOSURE OF YOUR INFORMATION
At times we may share your information with others. The following is a list of who we will or might share your information with:
Our employees, contractors and volunteers on a need-to-know basis;
Website developers and administrators;
Analysts and consultants who might help us improve and optimise our website;
Marketing and communications agencies;
Payment service providers;
Banks;
HMRC;
Accountants and financial advisors;
Legal advisors;
Service providers who assist us with protecting ourselves from fraud and money-laundering;
Service providers who assist us with managing our credit;
Prospective buyers or other acquirers of our assets;
Law enforcement authorities;
Organisations which we may have a legal obligation to disclose information to.
5. WHERE WE KEEP YOUR PERSONAL DATA
All your personal information covered by this policy is stored in the UK and European Union. We will not transfer your information outside the UK or European Union unless we are permitted to do so by law and we will inform you about such transfer before it is done. We will never sell, share or swap your data with another organisation.
6. RETENTION OF DATA
We will keep your personal information only for as long as required for the relevant activity and in accordance with legal requirements. Where your information is no longer required, we will ensure it is disposed of in a secure manner.
7. YOUR RIGHTS IN RELATION TO YOUR DATA
You have a number of rights under data protection law. These include:
The right to access your personal data and to obtain certain information about it;
The right to rectify the data if it is inaccurate;
In some circumstances, such as when the data is no longer required or if the use of the data has no legal justification, the right to have that data erased;
In some circumstances, the right to object to our handling of your data;
In some circumstances, the right to restrict our handling of your data;
The right to obtain a copy, in a commonly used electronic form, of your data that you have provided to us, if the data is processed by automated means and the processing is based on your consent or contractual necessity.
More details about how these rights apply can be found in our Data Protection Policy (available upon request).
You also have the right to withdraw your consent at any time when we rely on consent as a legal ground to justify our handling of your personal data. This would not affect the lawfulness of anything done before consent is withdrawn but it would stop us from continuing to use the relevant information.
You can exercise your rights or obtain more information about them by contacting our Data Protection Officer at dataprotection@bmsworldmission.org
If you want to make changes to your details or communication preferences, please email supporterservices@bmsworldmission.org, call 01235 517638 or write to BMS.
8. COMPLAINTS TO THE INFORMATION COMMISSIONER
You have a right to complain to the Information Commissioner’s Officer (ICO) about the way in which we collect and handle your personal data. Complaints to the ICO can be made on the ICO’s website https://ico.org.uk/.
9. THIRD PARTY WEBSITES
Our website may refer or contain links to other websites. Please note that this privacy policy does not apply to information collected through these websites. These third party websites should have their own privacy policies which describe how they might collect your data and use it.
We are not responsible for these third party websites or the information which they might collect and, therefore, you are encouraged to view their policies before browsing through third party websites or providing them with information about you.
10. CHANGES TO THIS POLICY
We may change this privacy policy in which case we will upload the updated policy on the website.
It is advisable to refer to the privacy policy regularly, particularly before sharing information about you which you consider to be sensitive.
11. CONTACT
Should you have any questions, concerns or requests please contact our Data Protection Officer at dataprotection@bmsworldmission.org