London City Mission Privacy Policy

At London City Mission (LCM) we understand the importance of protecting your personal information. This Privacy Policy will explain what information we collect, why we collect it, who we share your data with and how you can access your data protection rights.

If you don’t want to read all the detail, here are the things we think you’d really want to know:

About us

London City Mission is a registered company with Companies House (company number 04284615), and a registered charity with the Charity Commission (charity number 247186). We’re a Christian organisation with a desire to see everyone on the margins invited to follow Jesus Christ. For the purposes of data protection legislation LCM is the Controller of the personal information we obtain from the individuals we interact with.

How do we collect and use your personal data?

We collect most of our information directly from you, including when you get in touch with us via our website, when you decide to financially support the work we do, when you have contact with us at our events and book tables, or when you encounter us via our door-to door ministry.

What personal information do we process?

The personal information we process will depend on our relationship with you.

Supporters

A supporter is anyone who contributes to the objectives of London City Mission – this includes volunteers, those who support us in prayer, financial supporters and those who invite us to speak at events.

We will collect personal information from our supporters in the following scenarios:

  • when you get in touch with us
  • When you ask/sign up to receive updates about our work
  • when you make a donation
  • when you share your business card with an LCM representative
  • when you attend an event or order resources

We collect the following information volunteered by you:

  • name and job title or role (if relevant)
  • contact information including postal address, email address and phone number
  • bank account details (should you wish to set up a direct debit)
  • debit or credit card details
  • Gift Aid status
  • Special category information such as data on your faith, health and local church
  • your testimony of faith
  • any other relevant information you may give us
  • any pictures or videos you allow us to capture

Children

We do collect children’s data in limited circumstances such as their:

  • names
  • contact details
  • personals stories
  • pictures

Where the child is aged under 18, we obtain consent from an appropriate adult before we take any personal information. All contact with children will be in line with our safeguarding policy.

Tenancy

We collect and hold personal data provided by individuals for tenancy applications to help us confirm your right to rent in England. We also collect verification of your identity, employment status and personal needs to help us in the tenancy application process. LCM have a legal obligation to process this data. We use third parties to undertake reasonable checks (including credit agencies) as part of the application process.

Employment

We hold personal data provided by applicants during our recruitment process for staff and volunteers. If you are not successful, we will keep this data on file for 12 months before safely destroying this.

Information about criminal convictions

LCM’s dedicated prisons ministry not only shares the gospel with prison inmates but also provides support to ex-inmates by facilitating them into church relationships and employment. In these instances, we will collect data relating to criminal convictions where the law requires us to do so. We do have in place an appropriate policy document and safeguards which we are required by law to maintain when processing such data.

How do we keep your data secure?

LCM stores the personal information we collect:

  • in our Customer Relationship Management (CRM) system
  • within our secure Microsoft 365 environment
  • in secure filing cabinets
  • on LCM issued and controlled laptops and phones
  • within our HR information system (for employment data)

We have safeguards in place to ensure the security of your data such as role-based access to systems, the use of passwords, data protection training and policies and procedures.

Who might we share your personal data with?

Generally, only appropriate LCM colleagues and volunteers will be able to see the personal data we hold on you. However, there will be times when we need to share your personal information with third parties to abide with law, or to provide a service to you. Such instances include (but aren’t limited to);

  • Emergency services
  • IT service providers
  • Mailing houses
  • Specialist companies that deliver wealth screening
  • Local Authorities (our tenants only)
  • Utility Companies (our tenants only)
  • HM Revenue & Customs (for gift aid purposes etc) and regulatory bodies where required
  • Carefully selected consultants assisting with our services

We do not sell your personal data or information to any third-party organisations.

How long do we hold your personal data for?

We will only keep your data as long as is necessary for the purpose we have collected it, or for as long as the law dictates we should hold it to fulfil statutory obligations.

What are your rights in relation to your personal data?

You do have the following rights over your personal data:

  • Right of access: You can ask for confirmation of what personal information we hold on you and request a copy of that personal information. Provided we are satisfied that you are entitled to see the personal information requested and we have successfully confirmed your identity, we will provide you with your personal information subject to any exemptions that apply. We will apply a reasonable fee any associated administrative costs of complying with duplicate, excessive or manifestly unfounded requests.

  • Right to be informed: You can request information about how and why we process your personal data such as why we process it, how long we retain it and who it is shared with. This privacy notice provides this information, but please get in touch if you require more details.

  • Right of erasure: You can request that we delete your personal information from our records as far as we are required to do so. In some cases, we may suppress your personal information to stop further communications with you, rather than delete all of your personal information.

  • Right of rectification: If you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated. You can also ask us to check the personal information we hold about you if you are unsure whether it is accurate.

  • Right to restrict processing: You have the right to ask for processing of your personal information to be restricted if there is disagreement about its accuracy or legitimate use.

  • Right to object to processing: You have the right to object to processing in certain circumstances. Please contact us to if you want to exercise this right.

  • Right to data portability: Where we are processing your personal information (that you have provided to us) either (i) by relying on your consent or (ii) because such processing is necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into a contract, and in either case we are processing your personal information using automated means (i.e. with no human involvement), you may ask us to provide the personal information to you – or another service provider – in a machine-readable format.

  • Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision (i) is necessary to enter into/perform a contract between you and us/another organisation, (ii) is authorised by UK law to which LCM is subject (as long as that law offers you sufficient protection), or (iii) is based on your explicit consent. We may use automated decision-making for marketing purposes.

Should you wish to exercise any of these rights, please fill out the form below, or contact the Data Protection Officer via email – dpo@lcm.org.uk, or by post - The Data Protection Officer, London City Mission, 175 Tower Bridge Road, London SE1 2AH.

You do also have the legal right to complain about data protection issues to the Information Commissioner’s Office (ICO). You can do this by writing to:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

The use of Artificial Intelligence (AI) and automated decision making

We do use AI and automated decision making, including profiling, in certain circumstances. We have internal safeguards in place to ensure this type of processing is conducted proportionately and legally. We use profiling to enable us to tailor our communications with you ensuring our supporters and volunteers receive specific marketing which we believe you will be interested in.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effects for you or affects you in any other significant way.

If you are seeking to exercise this right, please contact us using the provided DPO details.

Cookies

Our website uses cookies. Our cookie policy can be found here

Contact us

If you have any queries, questions or complaints about how we handle your personal data, or if you’d like to exercise one of your data protection rights, please contact us using any of the below means:

Email – dpo@lcm.org.uk

In writing: The Data Protection Officer

London City Mission

175 Tower Bridge Road

London SE1 2AH

This policy was last reviewed in November 2025.