St Paul's Anglican

Privacy Policy

Your privacy is important

St Paul’s Anglican Carlingford and North Rocks respects your right to privacy and is committed to dealing with your personal information carefully and responsibly. This Privacy Policy sets out how we will handle your personal Information and the choices you can make about the way your personal Information is collected and used by us. We have been guided by the Australian Privacy Principles in our approach to privacy.

In this policy, the terms “St Paul’s” and “we” or “us” refer to St Paul’s Anglican Carlingford and North Rocks. “Elvanto” refers to Elvanto Church Management Software, the digital database used by us.

What is personal and sensitive information?

‘Personal information’ is information or opinion about an identified individual or an individual who Is reasonably identifiable (refer to section 5 for examples of personal information).  Some personal information may be sensitive information.

‘Sensitive information’ includes information about an individual’s racial or ethnic origin, political opinions, religious beliefs or affiliations, criminal record or health information.

How does St Paul’s collect personal information?

We will only collect personal information where necessary for the provision of our services, and by fair and lawful means, such as in the following situations:

  • You provide us with your private information at a St Paul’s Anglican event/church service.
  • Your attendance being noted at St Paul’s Anglican church services and/or growth groups.
  • You contribute financially to support the ministry of St Paul’s Anglican (NB: no financial details are stored in Elvanto, refer below for further details).
  • As a parent or guardian, you provide personal information relating to a child (under 18 years) who attends one of our events/church services.

In general, we collect personal information directly from you, but may require you to provide personal information regarding your children, such as for medical or safety reasons. We may also collect personal information about you via third parties, for example the online payment platforms we use eg. Stripe (https://stripe.com/au/privacy) and Square (https://squareup.com/au/en/legal/general/privacy-no-account).

We will only collect sensitive information about you and/or your children with your consent and where such Information Is reasonably necessary or directly related to one or more of our functions or activities.

Protecting your personal information

Your personal information is stored on Elvanto and protected through encryption, firewalls, secure buildings and computer security systems. We will take all reasonable steps to ensure the personal information we hold about you is relevant, not excessive, accurate, complete and up-to-date.

Elvanto secures your data using secure servers which are protected from unauthorised access, modification or disclosure; for further details refer to the Elvanto privacy policy https://get.tithe.ly/legal/privacy-policy. Banking/credit card details related to giving are stored in password protected files.

The St Paul’s Anglican Cyber-security and Data Protection Policy contains additional measures taken to protect your personal information.

What types of personal and sensitive information does St Paul’s collect and hold?

Generally, we collect and hold the following types of personal information:

  • Name (first name, last name, family members and dates of birth)
  • Children’s names and dates of birth
  • Address (home, postal, other)
  • Phone numbers (home, mobile)
  • Email address
  • Attendance at a St Paul’s Congregation
  • Attendance at a St Paul’s Growth Group or other groups/events attended
  • Banking/credit card details relating to giving (NB: no financial details are stored in Elvanto, refer below for further details).
  • Health / allergy information
  • Comments and prayer points via Connect Cards
  • Financial pledges to support the ministries of St Paul’s
  • Ministry service at St Paul’s

If you would like to request that your attendance at church and/or growth group not to be recorded, please email us at office@stpaulsanglican.org.au as processes have been developed to facilitate this.

Children are given their own entry in Elvanto.

To comply with the Child Protection (Working with Children) Act 2012 (NSW), we also collect and hold the following personal information on individuals who work with children in our parish:

  • Full name
  • Date of birth
  • Working with Children Check clearance number
  • Expiry date of clearance
  • Date of last Safe Ministry training

Who has access to personal information?

The ministry and administrative staff and those authorised by the Senior Pastor have access to the information collected and retained for ministry and related activities of St Paul’s. Access to banking/credit card details related to giving is limited to those provided access to process and approve payments in the accounting and banking systems (for details of the Xero, MYOB and CommBiz privacy policies refer to https://www.xero.com/au/legal/privacy/  https://www.myob.com/au/privacy-policy and https://www.commbank.com.au/security-privacy/general-security/privacy.html)

How your personal information is used and disclosed by St Paul’s

The St Paul’s staff team uses information only for the purposes we disclosed at the time of collection, for any other purpose that would be within your reasonable expectations, or otherwise as set out in this Privacy Policy. We will not use your information for any other purpose without first seeking your consent, unless authorised or required by law. 

Generally, we will only use and disclose your personal information as follows:

  1. to maintain a record of your involvement and attendance
  2. to facilitate your participation in the activities of St Paul’s
  3. to care for you pastorally
  4. to register you for events or conferences
  5. to answer your questions
  6. for statistical purposes and reporting
  7. to keep you informed of church news and new developments that may be of interest
  8. to you via a regular electronic newsletter (if we contact this way, you will have the opportunity to decline any further such communications).
  9. to care for your health needs and provide for your safety

How do you view or correct personal information we have about you or your children?

We will generally provide you with access to your personal information. To request access to the personal information that we hold about you we encourage you to please contact us. 

We also take reasonable steps to correct personal information which is inaccurate, incomplete or out of date. If you have a login to Elvanto, you may make any changes to your personal Information at any time. You may also email us at office@stpaulsanglican.org.au.

How long will your personal information be kept?

When St Paul’s no longer needs your personal information for the ministry purpose for which it was collected, will securely destroy it, unless there is a legal reason why St Paul’s needs to continue to hold that personal information. St Paul’s has processes in place to regularly review and purge and/or de-identify personal information. The typical retention times (based on ministry needs) for various types of information, are as follows:

NB: *Credit Card details are no longer stored by St Paul’s

How to request the deletion of your personal information or receiving communication

You have the right to opt out of promotional mailings/emails or to have your personal information deleted. If you do not wish to receive further communication from us or would like us to delete your personal information, please email us at office@stpaulsanglican.org.au. We will comply with your request unless we need to retain your personal information for the purposes it was provided, or to comply with the law.

Let us know if you have any questions or complaints

We are committed to dealing quickly and appropriately with any complaint made under the Privacy Policy. If you are concerned about any possible non-compliance with this policy or that your privacy may have been compromised, please contact us in writing immediately, setting out your concerns. Please include a daytime telephone number where we can contact you. We will aim to get back to you within five working days.

Write to:

The Senior Pastor
St Paul’s Anglican Carlingford and North Rocks
PO Box 5099 Kingsdene NSW 2118.