Last updated: 15 September 2026.
About this notice
This notice covers visitors to the Harvest Field Church website and people who contact us through its enquiry form or by email. It does not attempt to cover every record created through church membership, pastoral care, safeguarding, volunteering, employment, donations or other church activities. Where another use of personal information needs its own explanation, we will provide one separately.
Who is responsible for your information?
Harvest Field Church is the data controller for the personal information described in this notice. Harvest Field Church is a registered charity, number 1120158.
Our privacy contact is:
Harvest Field Church
Lynworth Hall
Mendip Road
Lynworth
Cheltenham GL52 5ED
Email: enquiries@harvestfieldchurch.co.uk
Information you give us through the contact form
The form asks for your name, email address and message. You may also choose to give us your phone number and home town. We use this information to understand your enquiry, reply personally and, where you ask us to do so, arrange further contact.
Our lawful basis is normally our legitimate interest in answering genuine enquiries and helping people who wish to learn about or make contact with Harvest Field. We may also use information where necessary to comply with a legal obligation.
The form is not intended for detailed health, safeguarding or confidential pastoral information. If you need to raise something sensitive, please use the form simply to ask us to contact you. If sensitive information is sent unexpectedly, we will handle it carefully, limit its use to what is necessary and only retain or share it where data-protection law permits.
The form uses a hidden anti-spam field and a submission timestamp. These help us reject automated nuisance messages. They are not used to profile visitors or make decisions that have legal or similarly significant effects.
Information collected when you visit the website
Like most webservers, our server creates technical logs when a page or file is requested. These may include your IP address, the date and time, the requested address, browser or device information, the referring page and whether the request succeeded. We use this information to operate the website, investigate faults, maintain security and prevent misuse. Our lawful basis is our legitimate interest in providing a reliable and secure website.
We do not use these logs to identify ordinary visitors or build profiles about them.
Cookies and analytics
The public pages of this website do not currently set cookies and do not use Google Analytics or another visitor-tracking service. The website’s fonts are supplied from our own server, so your browser does not contact Google Fonts when displaying them.
Technical webserver logs are described above, but they are not cookies and do not store information on your device.
If we introduce cookies or analytics in the future, we will update this notice and provide a clear choice before using any technology that requires consent.
Who can see or receive your information?
Website enquiries are normally read only by Pastor Simon. Information may be shared with another appropriate Harvest Field leader where this is necessary to answer the enquiry, the person would reasonably expect it and there is a proper reason to do so.
We also use carefully selected service providers to operate the website and email:
- Amazon Web Services provides the server infrastructure on which the website and its technical logs are hosted.
- Google provides the email service used to retrieve, store and read messages sent to the church enquiries address.
These providers process information under their own security and data-protection arrangements. We may also disclose information where required by law, to protect someone’s vital interests, or to establish, exercise or defend legal claims.
We do not sell personal information or provide enquiry details to organisations for their marketing.
International processing
Some service providers may process information outside the United Kingdom. Where a restricted international transfer takes place, we expect it to be covered by UK adequacy regulations, an approved contractual safeguard or another lawful transfer mechanism.
How long do we keep information?
- Routine website enquiries are normally kept for no longer than 12 months after the enquiry has been answered or otherwise completed.
- If contact develops into an ongoing pastoral or church relationship, relevant information may become part of an appropriate church record. It will then be managed according to the purpose of that record rather than retained indefinitely as a website enquiry.
- Technical server logs are kept only as long as reasonably necessary for security, fault diagnosis and server administration, and normally for no longer than 12 months.
- Information that must be retained for a legal, safeguarding, financial or regulatory reason may be kept for the period required for that purpose.
We securely delete or anonymise information when it is no longer needed.
How we protect information
We use proportionate technical and organisational measures to protect personal information against loss, misuse and unauthorised access. Access is restricted to people who need the information for an appropriate church purpose. No internet transmission or storage system can be guaranteed completely secure, but we take reasonable steps to keep information safe.
Your data-protection rights
Depending on the circumstances and the lawful basis being used, you may have the right to:
- ask for a copy of personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete information;
- ask us to restrict how information is used;
- object to processing based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent where we rely on consent.
These rights are not absolute and do not all apply in every situation. To exercise a right, contact us using the details above. We may need enough information to confirm your identity, but we will not ask for more than is reasonably necessary.
Questions and complaints
Please contact us first if you have a question or complaint about how we have handled your information. You can use the email or postal address above. We will acknowledge a data-protection complaint within 30 days, investigate it appropriately, keep you informed where necessary and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office. Information about doing so is available at ico.org.uk/make-a-complaint/data-protection-complaints.
External websites
This website links to external services, including Google Maps and Pastor Simon’s Teaching Pages on Substack. Following a link takes you to another organisation’s website, whose own privacy and cookie information applies. We do not send your contact-form entries to those services.
Changes to this notice
We will review this notice when the website or our relevant practices change. The date at the top shows when it was last updated.