Privacy Policy

The Luis Palau Association UK (LPA) is a registered charity in the UK and Scotland that works to proclaim the Christian Message in the UK and across the world. We do this in partnership with local churches and other ministries by facilitating social action activities, events, festivals and other initiatives. This privacy policy explains how we use any personal information we collect about you. LPA is registered as a data controller with the Information Commissioner’s Office.


What information do we collect about you?

We collect information about you when you enquire about using any of our services, as part of us providing you with our service(s), or when you register an interest in supporting us. We will also collect information about you if you contact us to apply for a role working for LPA. Website usage information may be collected using cookies.

We may collect, use, store and transfer different kinds of personal data about you as follows:

  • Identity Data includes things like: first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.

  • Contact Data includes: billing address, delivery address, preferred communications address, email address and telephone numbers.

  •  Financial Data includes: bank account and payment card details.

  • Transaction Data includes: details about payments to and from you, donations you make to us, and other details of products and services you have purchased from us.

  • Technical Data includes: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

  • Profile Data includes: your username and password (for websites we administer), purchases or orders made by you, your interests, preferences, feedback and survey responses.

  • Usage Data includes: information about how you use our website, products and services.

  • Marketing and Communications Data includes: your preferences in receiving marketing from us and our third parties and your communication preferences.

We may from time to time process special category data about you which relates to your religion or belief. Before doing so, we will always seek your explicit consent.

We use different methods to collect data about you, including:

  • Direct Interactions - you may give us your identity, contact and financial data when you correspond with us, including by telephone, email or post, or by filling in forms on our website. This includes personal data you provide when you:

o   apply for our products or services;

o   create an account on our website;

o   subscribe to our service or publications;

o   request marketing to be sent to you;

o   enter a competition, promotion or survey;

o   make a donation to us; or

o   give us feedback or contact us.

  • Automated Technologies or Interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect personal data by using cookies and other similar technologies. Please see our cookie policy https://palau.org.uk/cookies for further details.

  • Third Parties or Publicly Available Sources. We will receive personal data about you from various third parties and public sources.


Why are we collecting your information?

Partnering Churches/Organisations – we have a legitimate interest in building strong relationships with churches and other organisations that we partner with in order to deliver our charitable purposes. We will initially use the information we collect from you to contact you to arrange an appointment, to provide you with details of our work in your area.  As a faith-based charity, we may offer you our support through prayer, so we will record whether you are happy for us to do this so we can make sure we respect your wishes.

We may also contact you to invite you to take part in research and feedback in relation to our work. We may also contact you to invite you to any events that we may run from time to time, if we consider that they might be suitable for you.

Supporters – we will use the information we collect from you, including your level of interest, support for us and location, to tell you more about our work. We will also thank you for your support, and invite you to continue to support us. We may also use your information to invite you to fundraising or other events, or to ask if you would be able to increase your support. We will also process your information on the basis of our legitimate interest to improve our fundraising strategies. We will also analyse the information we collect about you and use publicly available information to aid our understanding of our supporters, understand the level of potential donations, profile supporters into categories and help provide a personalised service to you on our website content and emails. We will always do this in compliance with the rules in relation to direct marketing, including those set out by the Fundraising Regulator. 

Job applicants – we will use the information we collect from you to process and consider your application for a role at LPA. Your information will only be shared with our Human Resources department and other LPA staff who will be involved in the selection and recruitment process. We will only request a reference or a DBS disclosure with your prior consent.

Phone calls – we may record both inbound and outbound phone calls on the basis of our legitimate interest in monitoring our service and training our staff. If there is a dispute or misunderstanding about what was said during a telephone call, we may use call recordings to help clarify the contents of conversations we have had.

Market research and demographic data – We have a legitimate interest in ensuring we continue to improve, and we may use your contact details to contact you to ask for your comments and opinions on how we might improve and develop our work. We may also use your information to study and better understand the composition of our client and supporter base.


Generally, we do not rely on consent as a legal basis for processing your personal data, save for the processing of any special category data, although we will seek consent before sending you direct marketing communications via email or text message. You have the right to withdraw consent to our marketing at any time by contacting us.

We process personal information for certain legitimate business purposes, which include some or all of the following:

  • where the processing enables us to enhance, modify, personalise or otherwise improve our services / communications for the benefit of our supporters or partnering organisations.

  • to identify and prevent fraud.

  • to enhance the security of our network and information systems.

  • to better understand how people interact with our websites.

  • to provide postal communications which we think will be of interest to you.

  • to determine the effectiveness of promotional campaigns and advertising.

  • external and/or internal governance.

  • To register you as a new participant (performance of contract).

  • To enable you to participate in evangelistic events which you have expressed an interest in (performance of a contract and legitimate interest).

  • To manage your relationship with us (legitimate interest and complying with legal obligations).

  • To enable you to make donations (performance of a contract, legitimate interest and consent where special category data is processed).

  • To enable you to participate in a survey (legitimate interest).

  • To improve our website, products/services, marketing or customer relationships (legitimate interest).

  • To recommend products, services or events which may be of interest to you (legitimate interest).

Whenever we process data for these purposes we will ensure that we always keep your Personal Data rights in high regard and take account of these rights. You have the right to object to this processing if you wish, and if you wish to do so please click here. Please bear in mind that if you object this may affect our ability to carry out tasks above for your benefit.

Our legitimate interests.


Storing your information.

We will take all reasonable steps to ensure that the information we hold about you is kept secure. We will only hold your personal data for as long as it is required in line with our Data Retention Policy. Deleting your information may involve either the removal of the data or its anonymisation, meaning that it no longer continues to be personal data that will identify you. Please contact us using the details below if you need further details about our Data Retention Policy, or to request that your data be deleted.


Sharing your information.

We will not share your information with third parties without your consent unless the law requires us to do so.

We do share your information with service providers who enable us to store your information, take secure online payments/donations and communicate with you in an appropriate and effective way.  The safeguarding of your information is of utmost importance to us and measures are in place to review the data protection of service providers we use.

We will not normally share any information we hold about you to others without your prior consent, unless one of the following exceptions apply. We may disclose information we hold about you:

  • If it is necessary for law enforcement or similar purposes;

  • To review the quality of our service – for example, the Charities Commission or other regulatory organisations may ask us to review the quality of our service. This includes information we hold about you, to ensure we are complying with their rules;

  • As a necessary part of working with churches or contacting you as a supporter - for example, by using a third party mailing house, online database or email communication software, online payment software to process our communications;

  • As a necessary part of ensuring we comply with our legal obligations as a data controller - for example, by using a third party to migrate data or ensure it is accurate and up-to-date;

  • We may collect information that you make available on, for example, Twitter, Facebook, Linkedin or similar organisations. You may wish to check their privacy policy to find out more information on how they will process your data.

From time to time we rely on the services of third parties in order to store and process your data in a legally compliant way, communicate effectively, manage events, take donations and for other operations in agreement with our charitable purpose.  You may wish to check the privacy policy of the following service providers we may use to find out more information on how they will process your data:

Donorfy - https://donorfy.com

Mailchimp - https://mailchimp.com

Eventbrite - https://www.eventbrite.co.uk

Facebook - https://www.facebook.com

Paypal - https://www.paypal.com/uk

Stewardship - http://stewardship.org.uk

Go Cardless - https://gocardless.com

Stripe - https://stripe.com/gb

Google - https://policies.google.com/privacy

Beacon - https://www.beaconcrm.org/legal/privacy

Salesforce - https://www.salesforce.com/privacy/regions/

International Transfers

We may transfer, store and process your personal data outside the UK. Specifically, when using US based databases or communications platforms like Salesforce or Mailchimp. We take every precaution to ensure the service providers we use are compliant with current UK data protection regulations.


Requesting access to your information.

Under Data Protection legislation, you have the right to request access to information about you that we hold. To make a request for your personal information contact ukoffice@palau.org

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress

  • prevent processing for the purpose of direct marketing

  • object to decisions being taken by automated means

  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and

  • claim compensation for damages caused by a breach of the Data Protection regulations

You can also update your own communication preferences online here.

For further information on how your information is used, how we maintain the security of your information and your rights to access information we hold on you please contact ukoffice@palau.org

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/


Other websites

Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies.


Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on this webpage. This privacy policy was last updated on 2 April 2024.