Privacy Policy

1. Who We Are

This website, eucharisticcongressipswich.org, is operated by the Parish Priests and Senior Leadership Team of Four Parishes in the Diocese of East Anglia in connection with the Eucharistic Congress Ipswich 2026 — a week of prayer, teaching, and Mass taking place at the Ipswich Corn Exchange and across four Ipswich parishes, 6–13 September 2026.

The data controller for this website is:

St Mark
The Presbytery
180 Hawthorn Drive
Ipswich IP2 0QQ
Email: [email protected]

If you have any questions about how we handle your personal data, please contact us using the details above.

2. What Data We Collect and Why

2.1 Event Registration via ChurchSuite

When you register for an event, book a place at a Congress session, or sign up for updates, we collect information through ChurchSuite, our event management platform. Depending on the form, this may include:

• Your name and email address
• Your phone number (if provided)
• Your parish or diocese
• The sessions or events you have registered for
• Any additional information you provide voluntarily (e.g. accessibility requirements)

Why we collect this: To manage event bookings, send you confirmation and event information, plan capacity at venues, and communicate important updates about the Congress.

Legal basis: Performance of a contract (processing your registration); and where we send you relevant event updates, our legitimate interest in keeping registered attendees informed. Where we ask for sensitive information (such as accessibility needs), we will seek your explicit consent.

ChurchSuite is operated by ChurchSuite Ltd. Your data is processed by ChurchSuite on our behalf under a data processing agreement. You can read ChurchSuite’s privacy policy at churchsuite.com/privacy.

2.2 Website Analytics via Google Analytics

We use Google Analytics to understand how visitors use this website. Google Analytics places cookies on your device and collects information including:

• Pages you visit and how long you spend on them
• The website or search engine you came from
• Your approximate location (country/region — not precise)
• Your device type, browser, and operating system
• Whether you are a new or returning visitor

This information is collected in aggregate and does not personally identify you. We do not use Google Analytics to track individuals. IP addresses are anonymised.

Why we collect this: To understand which content is useful, improve the website experience, and ensure we reach the people the Congress is for.

Legal basis: Your consent, given via the cookie banner when you first visit the site.

Google Analytics data is processed by Google LLC. Google may transfer data to the United States. For more information, see Google’s Privacy Policy.

2.3 Behaviour Analytics via Microsoft Clarity

We use Microsoft Clarity, a behaviour analytics tool that helps us understand how people interact with the website through heatmaps and session recordings. Clarity may record:

• Mouse movements, clicks, and scrolling behaviour
• Pages visited and time on page
• Anonymised session replays

Clarity automatically masks any input fields that may contain personal information (such as form fields). We do not use Clarity recordings to identify individuals.

Why we collect this: To identify where visitors encounter difficulties on the site and improve usability — for example, ensuring the registration process is straightforward.

Legal basis: Your consent, given via the cookie banner when you first visit the site.

Clarity data is processed by Microsoft Corporation. For more information, see Microsoft’s Privacy Statement and the Clarity Privacy page.

3. Cookies

Cookies are small text files placed on your device when you visit a website. We use the following categories of cookie:

You can withdraw your consent for non-essential cookies at any time by clicking the “Cookie settings” link in the footer of any page. You can also manage cookies through your browser settings — see aboutcookies.org for guidance.

4. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Event registration data is retained for a reasonable period after the Congress to manage any follow-up queries, then securely deleted. We will not retain your data for future unrelated purposes without asking you separately.
• Analytics and Clarity data is retained in accordance with the respective providers’ standard retention periods (Google Analytics: 14 months by default; Microsoft Clarity: 13 months).

5. Who We Share Your Data With

We do not sell your personal data or share it with third parties for marketing purposes. We may share data with:

• ChurchSuite Ltd — as our event management platform, acting as a data processor on our behalf
• Google LLC — for analytics purposes, as described above
• Microsoft Corporation — for Clarity analytics, as described above
• Event organisers and volunteers within the Diocese of East Anglia, on a need-to-know basis (e.g. to manage capacity at specific sessions)

If we are required to disclose data by law or to protect our legal rights, we may do so.

6. Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate data
• Right to erasure — to ask us to delete your data in certain circumstances
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at [email protected]%5BINSERT%20CONTACT%20EMAIL%5D. We will respond within one month.

7. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s data protection authority:

Information Commissioner’s Office (ICO)
ico.org.uk/make-a-complaint
0303 123 1113

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top. Where changes are significant, we will take reasonable steps to notify you.

Eucharistic Congress Ipswich 2026 — Diocese of East Anglia