GDPR and your Hubb site

Hubb includes a set of tools to help you look after the personal data your church holds – consent questions, mailing channels, a consent history on every record, and an editable privacy policy. This page is your starting point: work through the action plan below in order, then keep the further reading to hand. It isn’t legal advice – how you meet your data-protection obligations is your church’s responsibility, and if you’re ever unsure, the Information Commissioner’s Office is the place to check.

Start with your lawful basis

Before you set anything up, be clear on your ‘lawful basis’ for holding and using people’s data. For most churches that’s either legitimate interest – using data in a way people would reasonably expect for the running of the church – or the person’s explicit consent. Which one you rely on shapes whether, and how, you ask for consent, so it’s the natural starting point.

Your action plan

1. Set up your consent questions and mailing channels – create the questions people answer, and the channels they use to choose how they hear from you.
2. Edit your privacy policy – tell visitors how you’ll use their personal data.
3. Add your consent questions where you need them – on sign-up forms, payments and check-in.

---

Further information

• Where consent appears across Hubb – how consent shows up in Mailing, Query, user records, My Area and the address book.