Privacy and Security Policy

Data protection in the Methodist Church Isle of Man

Protecting the data of all who come in to contact with the Church is a practical demonstration of the central beliefs of Methodism and falls
under two of John Wesley’s core principles – Do not harm and Do good.

In doing no harm, we will ensure that we will:

• only hold the data we need,
• protect the data we hold,
• ensure it is not used incorrectly,
• keep it secure and accurate and
• process only for legitimate reasons.

This helps us to ensure that we do not harm and guides us in our actions.

In doing good, by having up to date and accurate records this enables the Church to be more efficient in our efforts to perform
acts of mercy, kindness, charity and service to others. It also demonstrates the churches professionalism and commitment to respecting privacy.
You can read the full Privacy and Data Security Policy here.

Data Security

Appendix 2 of the Privacy and Data Security Policy covers practical considerations of Data security. This acts as guidance to the Church and its representatives in how data should be kept secure. With guidance on:

• Considering who has information and how this is kept
• How to keep data safe
• Checking if the data held is relevant
• Considering sensitive data
• Tips on computer use

Social Media Guidance

Appendix 2 of the Privacy and Data Security Policy covers Social Media Guidance. Social media is a great way to communicate with others, but
this relatively new and constantly evolving form of communication comes with a different set of etiquette rules to consider. This appendix covers the
Methodist Guidance, including:

• Safety
• Disagreements and heated comment
• Respect
• Being relevant
• Being careful and considerate when sharing content
• Maintaining confidentiality

*** Data Breaches ***

The Methodist Church in the Isle of Man takes seriously its commitments under the law. If you become aware of a data breach, have a concern or if you have made an error with the data you hold, please report it immediately using these telephone numbers:
01624 625408 or 07624 474275 or by email to DPO@methodist.org.im

Examples of data breaches are:

• Human Error: Sending documents to the wrong person ur using "CC" instead of "BCC", or accidentally deleting files.
• Physical Security Breaches: Theft or loss of laptops, USB drives, or physical files containing personal data.
• Cyber Attacks: Ransomware attacks that encrypt data, and phishing scams that steal login credentials.
• Unauthorised Access/Disclosure: Employees accessing data they are not authorised to view, or publishing private data online.
• Improper Data Disposal: Leaving confidential documents in public areas or failing to shred documents.
• Failure to Use Encryption: Storing unencrypted sensitive data on portable devices.
• Third-Party Sharing: Sharing personal data with third parties without proper consent or authorisation.

Advice and Support

If you have any questions or queries, please get in touch with Louise Whitelegg our Data Protection Officer for support: dpo@methodist.org.im