Privacy Policy

Last updated: January 2026

1. Introduction

St Martha’s College (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, the legal basis for doing so, and your rights under UK data protection law, including the UK GDPR and Data Protection Act 2018.

By using our website (stmarthas.org.uk) or communicating with us, you agree to the terms of this policy.

2. What Personal Data We Collect

We may collect the following types of data:

a) Information You Provide to Us

This includes personal data submitted through:

  • Website forms (e.g., enquiries, applications, registrations)
  • Email communications
  • Event or course sign-ups
  • Subscription requests (e.g., newsletters)

Typical information may include:

  • Name
  • Email address
  • Phone number
  • Postal address
  • Information related to training, course applications, or ministry enquiries

b) Automatically Collected Data

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and device information
  • Pages visited and interaction data

These are typically captured through analytics tools and cookies (see our Cookie Policy for details). Analytics tools often use cookies to understand user behaviour in an anonymous form.

3. How We Use Your Personal Data

We use your data for the following purposes:

  • To respond to enquiries and provide information about our programmes
  • To process applications for training pathways or events
  • To communicate updates, newsletters, or important notices
  • To improve our website based on aggregated analytics data
  • To meet our legal and safeguarding responsibilities as a training institution

4. Legal Bases for Processing

We process personal data under one or more of the following lawful bases:

  • Consent: For newsletters, marketing communications or optional services
  • Contract: When processing data necessary for enrolment or participation in our programmes
  • Legal Obligation: To comply with safeguarding, regulatory, or tax requirements
  • Legitimate Interests: To administer and improve our website and ensure effective communication

5. How We Store and Protect Your Data

We take the security of your information seriously and use appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access.

While most internet browsers allow you to enhance privacy through tools like cookie blocking, private browsing and security extensions, these are user‑side controls and may affect your interaction with our site.

6. Sharing Your Data

We may share your personal data with:

  • Training partners within the Diocese of Guildford
  • Third‑party service providers such as website hosting, analytics, or email delivery services
  • Regulatory or safeguarding authorities, where required by law

We do not sell your personal data and only share what is necessary for the service being provided.

7. Cookies and Tracking Technologies

Our website uses cookies to function effectively, enhance user experience and provide analytics. See our separate Cookie Policy for detailed information about the cookies we use and how to control them.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes described above, or as required by law or safeguarding obligations.

9. Your Rights

Under the UK GDPR, you have the following rights:

  • Right to access – Request a copy of the personal data we hold about you
  • Right to rectification – Ask us to correct inaccurate or incomplete information
  • Right to erasure – Request deletion of your data (in certain circumstances)
  • Right to restrict processing – Limit how we use your data
  • Right to data portability – Receive a copy of your data in a usable digital format
  • Right to object – Object to certain types of processing, including marketing
  • Right to withdraw consent – Where processing is based on consent

The ICO provides further public guidance on how individuals can control their online data and privacy.

10. External Links

If our website contains links to third‑party websites (e.g., partner organisations, hosted videos), those sites have their own privacy policies.

We are not responsible for the privacy practices of external websites.

11. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted here with an updated revision date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact comms@cofeguildford.org.uk.