1. INTRODUCTION
The Easter Story (website URL address: https://theeasterstory.org) appreciates your interest and trust. We are a UK-based website, created to help visitors explore and understand the story and meaning of Easter. Please read this Privacy Policy carefully and provide consent where applicable to use our website and services.
2. DATA COLLECTED
DATA STORAGE LOCATION
We are a UK-based website and operate web servers hosted in the UK. Our hosting provider ensures that your data is securely stored and GDPR compliant. For more information on our hosting provider’s privacy policy, please contact us directly.
REGISTRATION DATA
If you register on our website (if applicable), we store your chosen username, email address, and any additional personal information you add to your user profile. You can view, edit, or delete your personal information at any time (except your username). Website administrators can also view and edit this information.
CONTACT FORM DATA
Information submitted through the contact form on our site is sent to our official email inbox. These submissions are only kept for customer service purposes; they are never used for marketing purposes or shared with third parties.
COMMENTS
When you leave comments on the website, we collect the data shown in the comments form, as well as the IP address and browser user agent string to help with spam detection.
GOOGLE ANALYTICS
We use Google Analytics on our site for anonymous reporting of site usage. No personally identifiable data is stored. If you would like to opt out of Google Analytics tracking your behavior, please use this link: Google Analytics Opt-out.
CASES FOR USING PERSONAL DATA
We use your personal information in the following cases:
Verification/identification of the user during website use
Providing technical assistance
Sending updates to inform users about news or changes
Checking account activity to prevent fraudulent actions and ensure security
Customizing the website for a more personal and engaging experience
Ensuring smooth performance and administrative functions.
3. EMBEDDED CONTENT
Pages on this site may include embedded content, such as YouTube videos. Embedded content from other websites behaves in the exact same way as if you visited the other website directly.
These external websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with their content, including tracking your interactions if you are logged into their platform. Below is a list of the services we may use:
YOUTUBE
We may embed YouTube videos on our site. YouTube has its own cookie and privacy policies over which we have no control. No cookies are installed from YouTube, and your IP is not sent to a YouTube server until you consent. See their privacy policy here: YouTube Privacy Policy.
(Note: We currently do not embed Facebook or Twitter content on The Easter Story website, but if this changes, we will update this section.)
4. COOKIES
This site uses cookies — small text files placed on your device — to help provide a better user experience. Generally, cookies are used to retain user preferences, store information (such as for forms or interactive features), and provide anonymized tracking data for tools like Google Analytics. Cookies exist to improve your browsing experience.
If you prefer, you can disable cookies on this site (and others) by adjusting your browser settings. We recommend consulting your browser’s help section for guidance on managing cookies.
NECESSARY COOKIES (ALL SITE VISITORS)
cfduid: Used by our CDN provider to identify individual clients behind a shared IP address and apply security settings.
PHPSESSID: Used to identify your unique session on the website.
NECESSARY COOKIES (IF LOGIN FEATURES ARE ENABLED)
If The Easter Story website enables login or user accounts in the future, the following WordPress cookies may apply:
wp-auth: Used to authenticate logged-in visitors, password verification, and user checks.
wordpress_logged_in_{hash}: Tracks logged-in status.
wordpress_test_cookie: Ensures cookies are functioning correctly.
wp-settings-[UID]: Customizes your view of the WordPress admin and site interface.
wp-settings-time-[UID]: Works alongside wp-settings to manage individual user settings.
5. WHO HAS ACCESS TO YOUR DATA
If you are not a registered client for our site, there is no personal information we can retain or view regarding yourself.
If you are a client with a registered account, your personal information can be accessed by:
- Our system administrators.
- Our supporters when they (in order to provide support) need to get the information about the client accounts and access.
6. THIRD PARTY ACCESS TO YOUR DATA
We do not share your data with third parties in a way that reveals personal information like your name or email. The only exceptions are trusted partners we work with to deliver the services and content you expect from us. Please see below:
PASSION TRUST (passiontrust.org)
As the charity commissioning and overseeing The Easter Story website, the Passion Trust may access limited data where necessary to help manage, maintain, or improve the site.
MEDIA SUSSEX LTD (mediasussex.co.uk)
Media Sussex Ltd is the website development and management company supporting The Easter Story website. They may access site data strictly for development, maintenance, or support purposes.
We ensure that any partner or contractor accessing your data does so responsibly and only when required to deliver or improve the services we offer through this site.
7. HOW LONG WE RETAIN YOUR DATA
When you submit a support ticket or a comment, its metadata is retained until (if) you tell us to remove it. We use this data so that we can recognize you and approve your comments automatically instead of holding them for moderation.
If you register on our website, we also store the personal information you provide in your user profile. You can see, edit, or delete your personal information at any time (except changing your username). Website administrators can also see and edit that information.
8. SECURITY MEASURES
We use the SSL/HTTPS protocol throughout our site. This encrypts our user communications with the servers so that personal identifiable information is not captured/hijacked by third parties without authorization.
In case of a data breach, system administrators will immediately take all needed steps to ensure system integrity, will contact affected users and will attempt to reset passwords if needed.
9. YOUR DATA RIGHTS
If you have a registered account on this website or have left comments, you can request an exported file of the personal data we retain, including any additional data you’ve provided to us.
You can also request that we erase any personal data we hold. This does not include data we are obliged to keep for administrative, legal, or security purposes. In short, we cannot erase essential data required for any active account or service (such as basic account details like an email address).
Please note: if you request full erasure of your data, we may no longer be able to provide you with support or other website-related services.
GDPR RIGHTS
Your privacy is critically important to us. We aim to comply fully with the General Data Protection Regulation (GDPR) for visitors from the European Union. For more details on GDPR, please see the EU GDPR Information Portal.
10. THIRD PARTY WEBSITES
The Easter Story website may include links to third-party websites. These external sites are not screened or controlled by us for privacy or security compliance, and you release us from any liability related to the conduct, content, or policies of these third-party websites.
All social media sharing links (whether displayed as text links or social media icons) will not connect you to any third-party platform unless you explicitly click on them.
Please note that this Privacy Policy — along with any other policies or amendments — does not create enforceable rights for third parties, nor does it require the disclosure of any personal information related to site users. The Easter Story bears no responsibility for the data collected or used by advertisers or external websites linked from our pages. We recommend reviewing the privacy policies and terms of service of each third-party site you visit.
11. RELEASE OF YOUR DATA FOR LEGAL PURPOSES
At times it may become necessary or desirable to ThemeREX, for legal purposes, to release your information in response to a request from a government agency or a private litigant. You agree that we may disclose your information to a third party where we believe, in good faith, that it is desirable to do so for the purposes of a civil action, criminal investigation, or other legal matter. In the event that we receive a subpoena affecting your privacy, we may elect to notify you to give you an opportunity to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obligated to do either. We may also proactively report you, and release your information to, third parties where we believe that it is prudent to do so for legal reasons, such as our belief that you have engaged in fraudulent activities. You release us from any damages that may arise from or relate to the release of your information to a request from law enforcement agencies or private litigants.
Any passing on of personal data for legal purposes will only be done in compliance with laws of the country you reside in.