Privacy Policy

Who is responsible for your data?

The organisation responsible for your personal data (the “data controller” under the UK GDPR and the Data Protection Act 2018) is The Arabic Church in Liverpool, an Arabic evangelical Baptist church that meets at All Nations Hub, 4 Tunnel Rd, Liverpool L7 6QD.

If you have any question or request about your data, you can contact us:

• Address

  All Nations Hub
  4 Tunnel Rd, Liverpool L7 6QD
• Phone +44 7749 742235
• WhatsApp +44 7749 742235

or through our Contact us page.

The information we receive

We try to collect as little data as possible. We don’t ask you to create an account, and we don’t use visitor analytics tools or advertising or tracking cookies.

When you submit a form on the website

Our website has three forms: “Plan your visit”, “Ask for prayer” and “Contact us”. When you submit one of them, what you have written is sent to the church by email through the website’s server. Depending on the form, this may include:

• Your name (this is optional on the prayer request form, so you can stay anonymous).
• Your email address or phone number, so that we can reply to you.
• The date you expect to visit and how many people are coming with you, if you choose to tell us.
• The text of your message or prayer request, and who you would prefer to see it (the pastor only, or the prayer team).
• Your consent, which you give by ticking the box provided.

The website itself does not keep a copy of what you write in the forms; it simply sends it by email. To protect against spam, the server briefly stores an encrypted fingerprint of your IP address along with the time you sent the form. Your address cannot be recovered from it, and it is deleted automatically within 24 hours.

When you choose to contact us on WhatsApp

You can message us on WhatsApp using the buttons on the website. If a form cannot be sent by email, the website will offer you a button to send the same message via WhatsApp instead. In that case, it is you who decides whether to send it, and we receive your message, your phone number and your WhatsApp display name. The WhatsApp service is run by WhatsApp, which is part of Meta, and has its own privacy policy.

When you phone or email us

If you phone us or email us directly, we receive your number or email address and whatever you choose to tell us.

Your language preference in your browser

When you choose a language for the website, or close the language window that appears on your first visit, your browser saves that choice in “local storage” (localStorage) under the name lac_lang. This value stays on your device only, is never sent to us, and contains no information about you other than the language code. You can delete it at any time in your browser settings. For more details, see our Cookies and storage page.

Fonts from Google Fonts

The website uses fonts loaded from the Google Fonts service. To display these fonts, your browser connects to Google’s servers, which means your IP address and some routine technical information, such as your browser type, are sent to Google. We do not receive this information ourselves.

Hosting server logs

Our website is hosted by Hostinger. As with most websites, the hosting server may log technical information about the requests it receives, such as IP address, time of visit and the page requested, in order to run and protect the website.

Map links and external websites

We do not embed maps or videos from third parties in our pages. When you tap a map button (Google, Apple or OpenStreetMap) or a link to another website, you are taken to that website, and its own privacy policy then applies to you.

Why we use it, and on what lawful basis

The law requires every use of personal data to have a “lawful basis”. These are the bases we rely on:

To reply to your messages and arrange your visit

We use what you send us through the “Plan your visit” or “Contact us” forms, or by WhatsApp, phone or email, to reply to you, to welcome you when you visit, and to follow up on what you have asked for. The lawful basis here is legitimate interests: you would naturally expect a reply when you contact us, and we do not use your data for any other purpose. We also ask you to tick a consent box before sending, so that you know how your message will be used.

For prayer requests

A prayer request may reveal your religious beliefs, or things about your health or private life. These are “special category” data, which the law gives extra protection. So we only use a prayer request on the basis of your explicit consent, which you give by ticking the box provided before sending. We use your request to pray for you and to get in touch with you if you have left us a way to do so, and we share it only with those you have chosen (the pastor only, or the prayer team).

You can withdraw your consent at any time by contacting us, and we will then stop using your request and delete it. Withdrawing consent does not affect anything done before you withdrew it.

We treat every request with care and discretion. However, if a message leads us to understand that a child or an adult at risk may be in danger of serious harm, we may need to share the necessary information with the relevant authorities to protect them, as the law requires. To find out more, see our Safeguarding Policy.

To run and protect the website

We use limited technical information, such as the temporary IP address fingerprint and server logs, to prevent spam and misuse and to keep the website secure. The lawful basis is our legitimate interest in protecting the website and the people who use it.

To remember your language and display fonts

Saving your language preference in your browser is part of a service you have asked for, which the Privacy and Electronic Communications Regulations (PECR) allow without separate consent. For loading fonts from Google Fonts, we rely on our legitimate interest in displaying Arabic and the other languages clearly.

We do not sell your data, we do not use it for marketing or advertising, and we do not make any automated decisions about you.

Who your data is shared with

Your messages are read by the people in the church who need them in order to reply to you, and prayer requests are read by the pastor or the prayer team, as you choose. Data also passes through the following service providers, who process it only to provide their service:

• Hostinger: website hosting, the form server, and the email service that receives form messages.
• WhatsApp (Meta): only when you choose to message us on WhatsApp.
• Google: through the Google Fonts service, as described above.

We do not share your data with anyone else, unless the law requires us to, or where it is needed to protect someone from serious harm.

Transfers outside the UK

Some service providers, such as Google and Meta, may process data on servers outside the UK, including in the United States. In these cases, those companies rely on safeguards recognised by UK law for data transfers, such as adequacy regulations or approved contractual clauses. You can find the details in each company’s privacy policy.

How long we keep your data

We keep your messages and requests only for as long as we need them for the purpose you sent them for, and then we delete them. The church will set a specific period for each type of message, and we will add it to this page.

• Form messages: never stored on the website, and kept in the church’s email inbox only for as long as needed.
• IP address fingerprint for spam protection: deleted automatically within 24 hours.
• WhatsApp messages: kept in the church’s WhatsApp account only for as long as needed.
• Language preference: stays in your browser until you delete it yourself.
• Server logs: kept by the hosting provider according to its own settings.

How we protect your data

Our website runs over an encrypted connection (HTTPS), does not keep copies of messages sent through the forms, and does not log their content. We make sure that access to messages, especially prayer requests, is limited to the people in the church who are responsible for them.

We advise you not to send highly sensitive information that we don’t need in order to reply to you. If you would like to talk about something private, you can ask to meet or speak with the pastor.

Your rights

UK data protection law gives you the following rights:

• Right of access: to ask for a copy of the data we hold about you.
• Right to rectification: to ask us to correct or complete any inaccurate information.
• Right to erasure: to ask us to delete your data in certain circumstances.
• Right to restrict processing: to ask us to pause using your data in certain circumstances.
• Right to object: to object to our use of your data on the basis of legitimate interests.
• Right to data portability: to ask for the data you have given us in a commonly used format, in certain circumstances.
• Right to withdraw consent: where we rely on your consent, as with prayer requests, you can withdraw it at any time.

To exercise any of these rights, contact us by phone or WhatsApp on +44 7749 742235, or through our Contact us page. There is usually no charge, we will reply within one month, and we may ask you for proof of identity before acting on your request, to keep your data safe.

If you are under 13, please ask a parent or carer to contact us on your behalf, rather than sending us your details yourself.

Making a complaint

If you have a concern about how we handle your data, please let us know first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s regulator for data protection:

• Website: the complaints page on the ICO website (ico.org.uk)
• Helpline: 0303 123 1113

Changes to this policy

We may update this policy when something changes in how the website works or in the law. We will publish any changes on this page and update the “Last updated” date at the top.

Last updated: September 2026