Privacy Policy

Last Updated: March 2026

1. Who We Are

AnotherWay.community (“we”, “us”, “our”) operates this website and associated services including events, merchandise sales, and community resources.

For the purposes of UK data protection law, we are the Data Controller of your personal data.

Contact details:

Email: [email protected]

Postal address: Another Way, Truro Cathedral. Cathedral Offices, Old Cathedral School, Cathedral Close. Truro, Cornwall TR1 2FQ

If you have any questions about this policy, please contact us.

2. What Personal Data We Collect

We may collect and process the following information:

Information You Provide

Full name, email address, phone number, billing and shipping address, event booking information, merchandise order details, church / organisation (if provided), messages and correspondence.

Payment Information

Payments are processed securely via:

Stripe

We do not store full card details on our servers. Payment information is handled directly by Stripe in accordance with their privacy policy.

3. How We Use Your Information

We use your data to:

Process event bookings, fulfil merchandise orders, send confirmations and receipts, respond to enquiries, send newsletters or updates (if you opt in), improve our website and services, comply with legal and accounting requirements.

We do not sell or rent your personal data.

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we rely on:

Contract – to process payments and deliver events or merchandise

Consent – for marketing communications

Legitimate interests – to operate and improve our services

Legal obligation – for accounting and compliance

You may withdraw consent for marketing at any time.

5. Where Your Data Is Stored

Your information may be securely stored and processed via:

GoHighLevel – CRM and marketing automation

Microsoft Outlook – email communications

Stripe – payment processing

These providers may process data outside the UK. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are used.

6. Data Retention

We retain data:

For as long as necessary to fulfil the purpose collected For financial records (typically 6 years under UK law) Until you request deletion (where legally permitted)

You may request deletion at any time.

7. Your Rights

Under UK GDPR, you have the right to:

Access your data

Correct inaccurate data

Request deletion

Restrict processing

Object to processing

Data portability

Withdraw consent

You may also complain to the:

Information Commissioner’s Office

https://ico.org.uk

8. Security

We use:

SSL encryption Secure third-party payment processing Password-protected systems Limited access controls

While no system is completely secure, we take appropriate technical and organisational measures to protect your data.