Privacy Policy

Milton Baptist Church CIO, registered charity 1191696, is responsible for personal information it collects through its church activities and public website. Privacy questions can be sent to office@milton-baptist.org.uk.

You can browse public pages without creating an account. To understand which pages are useful, the site records daily aggregate page counts and fixed categories when someone selects an important next step such as plan a visit, event signup, room hire or giving. It does not store IP addresses, destination URLs, cookies, device identifiers, user agents, referrers or search-query text for these counts. Limited technical logs may also be retained for security, reliability and fault diagnosis. Public pages must not expose finance, pastoral or safeguarding case information.

Event signup uses either MBC event registration, operated by Milton Baptist Church, or ChurchSuite, as shown on the registration page. Paid MBC event checkout uses Stripe when available. Newsletter preferences are handled through ChurchSuite. Room-booking requests are handled through MBC Room Hire, operated by Milton Baptist Church. Videos use YouTube's privacy-enhanced domain where possible. Giving is handled through Dona. Each service applies its own privacy information when you choose to use it.

MBC Room Hire YouTube Scheduling is a private feature operated by Milton Baptist Church for its designated channel administrator. It uses YouTube API Services after the administrator accepts the privacy notice and terms and authorises access through Google.

The feature reads the church channel identifier, upcoming broadcast details and encoder stream identifiers and names. It uses these to link selected church events to broadcasts and avoid duplicate scheduling. It does not request your Google password or encoder stream keys. It sends selected event titles, descriptions and broadcast times to Google, including the church's copyright and streaming licence wording, together with broadcast visibility, audience and encoder association where needed. Private booking contact fields and AV notes are excluded. The administrator reviews the details and can choose whether later event edits update a linked broadcast.

MBC encrypts the connection credential and stored YouTube information. Event links, settings and limited operation history support scheduling, fault investigation and duplicate prevention. This Google data is not sold or used for advertising or AI training.

While the service is operating, privacy maintenance runs every five minutes, even when scheduling updates are disabled. Google access is rechecked once the last successful verification is 23 hours old. Linked broadcast information is due for refresh 14 days after its last successful check; if refresh fails, it is erased when it reaches 27 days. Detailed operation data is due for erasure seven days after the request was created. An invalid Google grant removes the connection and stored API data.

Disconnecting stops further scheduling updates, clears stored YouTube information and destroys its data keys. MBC immediately attempts to revoke Google access. If removal cannot be confirmed, a separately encrypted credential may be kept for retries, with a six-day key expiry. The tool explains when removal is unconfirmed or a retry cannot be saved. You may need to remove access yourself through Google Account permissions, then record that you have done so in the tool. Disconnecting does not delete broadcasts already on YouTube.

Backups prepared by the application exclude Google credentials and API data. Raw recovery copies may contain encrypted remnants, with their separate keys excluded from backups. If the host is offline, cleanup cannot run; expired keys are rejected and removed before further YouTube operations on restart. We do not promise immediate physical deletion of every backup copy. Recovery requires fresh Google authorisation and manual review and relinking before scheduling resumes.

For questions or requests about data held by MBC, contact office@milton-baptist.org.uk. Google explains its own processing in the Google Privacy Policy.

If you email or telephone MBC, the church will use the information you provide to respond and administer the relevant enquiry. Do not send confidential safeguarding information through general website forms.

The MBC application does not add advertising cookies. Connected video, booking or signup services may set their own cookies when opened or embedded.

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict use of your personal data, or to object or complain. Contact the church office first. You can also contact the Information Commissioner's Office.

This notice explains the public website and the MBC services described above. MBC's organisation-wide privacy policies and retention schedules remain owned and reviewed by the trustees.