Who we are (Data Controller): Gospel Mount (“we”, “us”, “our”), a UK-based Christian blog.
Contact (privacy): privacy@gospelmount.org
This notice explains how we handle your personal data under
UK GDPR, the DPA 2018 and PECR.
1) What data we collect
- Basic identifiers: name, email address, IP (Internet Protocol) address, user-agent.
- Content you submit: comments, contact-form messages, prayer requests, testimonials.
- Newsletter data: email address and subscription preferences.
- Usage data: page views, referrers, timestamps, approximate location from IP.
- Technical data: device/browser data, cookies and similar technologies.
- Special category data: only if you choose to share it (e.g., a prayer request). We process this only with your explicit consent (UK GDPR Art. 9(2)(a)).
We do not intentionally collect data from children under 13. If you believe a child has provided data, contact us to remove it.
2) Why we use your data and lawful bases
| Purpose | Examples | Lawful basis |
|---|---|---|
| Site operation & security | Load pages, prevent spam/fraud, rate-limit | Legitimate interests (keep the site safe and functional) |
| Comments & community | Publish your comment, show your avatar (if enabled) | Legitimate interests; you choose to post |
| Respond to enquiries | Reply to contact-form/email requests | Legitimate interests (responding) or Contract (pre-contract steps) |
| Email newsletter | Send Gospel Mount updates | Consent (withdraw any time) |
| Analytics & performance | Understand readership and improve content | Consent (non-essential cookies) |
| Compliance | Legal/records, handling rights requests | Legal obligation |
5) International transfers
Some providers store/process data outside the UK (e.g., in the USA). Where this occurs, we rely on
SCCs with the UK Addendum or the
IDTA, plus additional safeguards.
6) How long we keep data
- Comments: for the life of the post unless you request deletion.
- Contact enquiries: normally 24 months.
- Newsletter data: until you unsubscribe or your address bounces. Unconfirmed signups are automatically deleted after 7 days.
- Newsletter consent records: we store the consent text, your IP address at the time of signup, and the date of confirmation. These records are retained for compliance purposes even after unsubscription, unless you request full data deletion.
- Server/security logs: up to 12 months.
- Special category data (e.g., prayer requests): shortest necessary period; you can withdraw consent at any time.
We may retain minimal records to demonstrate compliance (e.g., consent logs).
7) Your rights
- Access, rectify, erase or port your data.
- Restrict processing; object to processing based on legitimate interests.
- Withdraw consent (newsletter/analytics) at any time.
To exercise rights, email privacy@gospelmount.org. Newsletter subscribers can also delete their data instantly using the “Delete my data” link included in every email footer. We may need to verify your identity. We respond within one month (extendable in complex cases).
You also have the right to complain to the
ICO (ico.org.uk, 0303 123 1113).
8) Security
We use TLS in transit, least-privilege access, patching/updates, backups and monitoring. No internet service is 100% secure; please take care when posting public comments.
9) Third-party links
Our site links to other sites (e.g., social networks). Their privacy practices apply when you follow those links.
10) Changes
We’ll update this policy when needed and change the “Last updated” date. Material changes will be signposted on this page.
11) Contact
Gospel Mount (Data Controller)Email: privacy@gospelmount.org