top of page

Pilgrimage for Grace Privacy Policy

Last updated: 16/01/2026

​

Pilgrimage for Grace (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you visit www.pilgrimageforgrace.uk, register interest, apply to walk or volunteer, submit petitions, or otherwise interact with us.

Pilgrimage for Grace is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

​​

1. Data we collect

We may collect the following personal data:

  • Name, email address, telephone number, postal address (when you register interest, apply as a walker/volunteer, or submit a petition).

  • Age, gender, location (for organisational purposes).

  • Priest’s name and contact details (for recommendation letters - applicants confirm that they have obtained the consent of any priest whose contact details they provide.).

  • Health/fitness declarations (self-certification only; no medical records).

  • Payment details (processed securely by third-party providers; we do not store card information).

  • Technical data (IP address, browser type, pages visited) via cookies and analytics.

Special category data (such as health information and religious affiliation) is processed only where necessary and on the basis of:

  • Explicit consent; and/or

  • Substantial public interest (safeguarding and duty of care), in accordance with Schedule 1 of the Data Protection Act 2018.

Age and gender are collected solely to ensure appropriate pastoral care, safeguarding, accommodation planning, and balanced group management.

Where special category data is processed, this is done in accordance with Article 9 UK GDPR and Schedule 1 of the Data Protection Act 2018, as described above.

2. How we use your data

We use your data only for the purposes of organising and promoting the Pilgrimage for Grace, namely:

  • Processing applications and registrations.

  • Communicating pilgrimage details and updates.

  • Managing petitions carried during the pilgrimage (understood as spiritual petitions offered in prayer; these are not published or retained beyond the pilgrimage unless explicitly requested by the individual).

  • Complying with legal obligations (e.g., safeguarding, accounting).

  • Improving the website (anonymous analytics only).

We do not sell, rent or share your personal data with third parties except:

  • With your explicit consent.

  • With service providers (e.g., payment processors, email services) bound by strict confidentiality.

  • If required by law.

3. Lawful basis

We process your data on the following lawful bases (UK GDPR / Data Protection Act 2018):

  • Contract – to fulfil your application or registration.

  • Legitimate interests – organising a safe and lawful pilgrimage.

  • Legal obligation – safeguarding and financial records.

  • Consent – for certain communications (you may withdraw consent at any time).

4. Data storage and security

  • Wherever possible, Data is stored securely on encrypted servers in the UK or EEA. Where any service provider is located outside the UK or EEA, appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) are in place.

  • We retain data only as long as necessary (normally 2 years after the pilgrimage, or longer for financial/legal records).

  • Access is restricted to authorised Committee members only.

5. Your rights

Under UK GDPR you have the right to:

  • Access your personal data.

  • Correct inaccurate data.

  • Request deletion (subject to legal retention obligations).

  • Restrict or object to processing.

  • Withdraw consent.

  • Lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

  • Right not to be subject to automated decision-making

  • Data portability (where applicable)

We do not use automated decision-making or profiling.

To exercise these rights, email admin@pilgrimageforgrace.uk.

6. Cookies

We use essential cookies only (no advertising or tracking cookies). You can manage preferences via your browser.

7. Changes to this policy

We may update this policy from time to time. Changes will be posted here with the updated date.

8. Contact

For any privacy questions, please contact us here.

bottom of page