Privacy
In short: the only personal information this church holds about you is what you have given us on purpose. We never sell it, and the only organisation we pass it to is HMRC, when you have asked us to claim Gift Aid.
Last updated: October 2026.
Sabaoth Church London, a church in South London and part of the Sabaoth Church network. Registered Charity No. 1218941.
For anything about your information, write to sabaothlondon@gmail.com. A person reads it, and we are the ones who decide how your information is used, which in data protection language makes us the data controller.
If you fill in a Gift Aid declaration we collect your name, home address, postcode and email address. We collect the address and postcode because HMRC requires them in order to process a Gift Aid claim: without them the claim cannot be made.
Our legal basis is legal obligation. Gift Aid is a tax relief, and the rules for claiming it are set by HMRC rather than by us.
We share this data with HMRC. That is the whole point of the declaration.
We keep these records for at least six years, as HMRC requires, counted from the end of the tax year the claim relates to. The declaration is stored through Netlify Forms, the service that runs this website; alongside your answers it records the version of the declaration you agreed to and the time you sent it.
If you use the contact form we collect your name, your email address, the reason you are getting in touch and your message. We use them only to reply to you and, if you ask for it, to pray for you or arrange a conversation with a pastor.
Our legal basis is your consent, which you give by ticking the box on the form. Some messages, such as prayer requests, can reveal things about your faith or your health; we treat these as confidential, and they are read only by our pastoral team. A prayer request is shared with our prayer team only by first name, never with your contact details, unless you tell us otherwise.
The form is processed by Netlify Forms, the service that runs this website, and the messages are delivered to our church inbox. We keep messages for up to 12 months, unless we are still in touch with you about them, and then delete them. You can ask us to delete your message at any time.
Card, Apple Pay and Google Pay donations are handled by Stripe on their own pages. Your card number never reaches this website and we never see or store it. What we see afterwards is that a donation arrived, and the name and email you gave Stripe.
Stripe explains what it does with your data in its own notice: stripe.com/privacy.
Less than you might expect. This is the complete list, checked against the code rather than assumed.
No analytics. There is no Google Analytics, no tag manager, no pixel and no other tracking script anywhere on this site. We do not know which pages you looked at.
No cookies, and nothing stored in your browser. This site sets no cookies of its own and keeps nothing in local storage. There is no consent banner because there is nothing to consent to.
Fonts, map and film are served from this site. The typefaces are hosted here, not fetched from a font network. The world map is drawn from geographic data built into the page, so no map company is contacted. The films on this site, including our "how to find us" videos, are our own files, not YouTube, Vimeo or Instagram embeds. The picture of where we meet is an image stored here; the "Open in Google Maps" button only contacts Google if you click it.
Booking a coffee uses cal.com. When you scroll to the booking block on the home or about page, your browser loads it from cal.com, which means cal.com sees your IP address and browser, and receives whatever you type into it. Their notice is at cal.com/privacy. If you never reach that part of the page, nothing is loaded.
Hosting. The site is hosted by Netlify, which keeps ordinary server logs, including IP addresses, to serve pages and block abuse: netlify.com/privacy.
There are two forms on this site that send your answers to us: the Gift Aid declaration and the contact form. Both are described above. Any other sign-up box you may see is not connected to anything yet: it shows a confirmation but sends nothing anywhere, so nothing is stored.
Links out are only links. Instagram, YouTube, Sabaoth Italia, Google Maps and Stripe hear about you only if you click through to them.
This part is about our gatherings rather than the website. We sometimes photograph or film services for social media. We will tell you when filming is happening, there is a no-camera area, and we do not publish identifiable pictures of children without written consent from a parent. If a picture of you is online and you want it gone, email us and we will take it down. No explanation needed.
You can ask us to show you what we hold about you, to correct it if it is wrong, and to delete it. You can also ask us to stop using it, or to send it to you in a portable form.
To do any of that, email sabaothlondon@gmail.com. We will reply within one month and we will not charge you.
One exception, and we would rather be upfront about it: Gift Aid records cannot be deleted before the HMRC retention period ends. Once you have made a declaration and we have claimed on it, we are required to keep the record for at least six years. You can cancel a declaration at any time, which stops future claims, but the record of the past ones has to stay until that period is over. Everything else we hold about you can be deleted on request.
If you think we have handled your information badly, tell us first and we will try to put it right.
You also have the right to complain to the Information Commissioner\u2019s Office, the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not need our permission and you do not have to come to us first.