How GoodSeed looks after your information

Who we are

GoodSeed Giving provides online giving pages for churches. When you give to a church, the church is the data controller for your gift and your details, and GoodSeed processes them on the church’s behalf. For your own GoodSeed account (if you create one), GoodSeed is the controller.

What we collect

• Your name, email address and the gifts you make.
• If you choose Gift Aid: your house name or number, postcode and your declaration — HMRC requires the church to keep these.
• If you agree, your permission for the church to email you about its work.

Card and bank details are entered directly with Stripe, our payment provider. GoodSeed never sees or stores them. If you save a card to your GoodSeed account, Stripe keeps it for you and passes it to a church’s Stripe account only when you choose to give there; GoodSeed keeps just the card brand, last four digits and expiry date so you can recognise it. You can remove a saved card at any time.

Why we use it

To process your gift and send your receipt; to let the church keep proper financial records and claim Gift Aid; to let you manage your giving; and to keep the service secure. The lawful bases are performing the service you asked for, the church’s legal obligations, and legitimate interests in running a secure service.

Who it is shared with

The church you give to; Stripe, to take the payment; HMRC, when the church claims Gift Aid; and the hosting and email providers we use to run the service. We never sell your information or use it for advertising.

How long we keep it

Churches must keep Gift Aid records for at least six years after the end of the accounting period they relate to. Other records are kept while the church uses GoodSeed and for as long as it needs them for its accounts.

Your rights

You can ask for a copy of your information, ask for it to be corrected or deleted, or object to how it is used. You can download your data and close your account from your profile. For your records held by a church, contact that church. You can also complain to the Information Commissioner’s Office (ico.org.uk).