Privacy Policy

1. Introduction

St Euphrasia Mission Salford (part of the Syro-Malabar Catholic Eparchy of Great Britain) is committed to protecting the privacy and personal data of our parishioners, volunteers, catechists, and website visitors in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy outlines how we collect, process, store, and protect your information when you visit our website (syromalabarchurchsalford.com) or access our Catechist Safeguarding Portal.

2. Information We Collect

We may collect and process the following categories of personal information:

• Public Website Visitors: Name, email address, phone number, and message content submitted through our contact and prayer request forms.
• Catechist Portal Users: Full name, telephone number, personal email address, church-assigned email address, home address, and church teaching assignments.
• Safeguarding & Compliance Data: Disclosure and Barring Service (DBS) certificate numbers, issue/expiry dates, DBS Update Service numbers, and safeguarding training completion records required by diocesan safeguarding standards.
• Google Single Sign-On (OAuth): When logging in via Google, we receive only basic profile information (your email address, name, and unique Google account identifier) necessary to verify your identity.

3. How We Use Your Information

We process personal data strictly for lawful pastoral and administrative purposes:

• To manage catechism classes, student registers, and pastoral activities.
• To maintain compliance with UK statutory child protection and church safeguarding regulations.
• To respond to pastoral inquiries and contact submissions.
• To authenticate catechists and volunteers accessing the private portal using Google Sign-In.

We never sell, rent, or trade your personal information with any commercial third parties.

4. Google User Data Policy

Our portal utilizes Google OAuth 2.0 to allow authorized catechists and parish volunteers to sign in safely without creating additional passwords.

• Scopes Requested: We only request non-sensitive identity scopes (openid, profile, and email).
• Usage: Google user data is used solely to authenticate your identity, create or match your catechist profile, and verify organizational domain credentials.
• Storage: We only store your email, name, and unique account identifier. We do not access, view, or store your Google password or private Google account files.

5. Data Storage & Security

All personal data and safeguarding records are stored securely in encrypted databases. Access to volunteer files and safeguarding certifications is strictly restricted to the Parish Priest, Head Teacher, and accredited Safeguarding Officers.

6. Your Rights Under UK GDPR

Under UK data protection law, you have rights including:

• Right of access: You have the right to request copies of your personal data.
• Right to rectification: You can request corrections to inaccurate or incomplete information.
• Right to erasure: You may request the deletion of your personal data, subject to legal and safeguarding statutory record-retention requirements.

7. Contact Information

If you have any questions about this Privacy Policy or how your data is handled, please contact: