Privacy Notice
Who We Are
Mercy UK is a Christian mental health charity that supports individuals to live free and stay free. We raise awareness of the connection between faith and mental health, offer support to those in need, and provide training and Christ-centred resources. We are committed to protecting your personal information and being transparent about how we use it.
As a “data controller” we are responsible for determining the purposes and means of processing your data.
Registered address: Cornerstone Building, Lowertown, Oxenhope, West Yorkshire, BD22 9JE Contact for data protection: dp@mercyuk.org
What This Notice Covers
This privacy notice explains:
- What personal data we collect
- How and why we use your data
- The legal bases for processing
- Who we share your data with
- How long we retain it
- Your rights and how to exercise them
What Personal Data
We Collect We collect personal data when you:
- Enquire about or use our services
- Register as a regular giver
- Attend training or events
- Apply for employment or voluntary work
- Request prayer or share a testimony
Types of data may include:
- Contact details, name, and date of birth
- Health or spiritual information (special category data)
- Financial details
- Interaction history
- Photos or video from events
- Employment information
We may also receive data from third parties (e.g., a referring church).
Lawful Bases for Processing
We process your data using the following lawful bases:
- Consent (e.g., marketing, prayer requests, testimonials)
- Contractual obligation (e.g., delivering services)
- Legal obligation (e.g., financial compliance)
- Vital interests (e.g., safeguarding)
- Legitimate interests (e.g., improving our services, communicating with supporters)
How We Use Your Information
We use your data to:
- Deliver and improve services
- Communicate about events or updates
- Process donations or job applications
- Monitor and evaluate programme effectiveness
- Respond to safeguarding or emergency situations
- Promote our charitable work We never sell your data.
Special Category Data & Safeguarding
Where we collect sensitive information (e.g., health, beliefs), we use appropriate safeguards. We follow strict safeguarding protocols and only share information when legally necessary.
Who We Share Your Information With
We may share data with:
- Third-party associates under contract (e.g., IT or donation platforms)
- Event host churches
- Health professionals (for appropriate care)
- Advisors (legal, audit, safeguarding)
- HMRC (e.g., Gift Aid)
- Other organisations (only with lawful justification)
International Transfers
Where data is transferred outside the UK/EEA (e.g., via third-party associates), we ensure protection through Standard Contractual Clauses or similar safeguards.
Cookies and Analytics
Our website uses cookies and third-party tools (e.g., Google, Facebook) to improve performance and marketing.
How Long We Keep Your Data
We securely delete or destroy data when no longer needed.
Data Type Retention Period
Service user records 12 months after last contact
Financial records 7 years (HMRC guidance)
Employment records 7 years after employment or application
Health & Safety records 7 years
Prayer/testimony content Retained with ongoing explicit consent
Your Rights
You have the right to:
- Access your data
- Correct inaccurate information
- Request deletion
- Object to or restrict processing
- Withdraw consent
- Lodge a complaint with the ICO
To exercise your rights, contact us at: dp@mercyuk.org. We will respond within one calendar month. Certain legal exemptions may apply when the information involves third parties, including our associates.
Updates to This Notice
We review this notice regularly. Last updated: June 2025