For many of us in church leadership, the acronym "GDPR" usually brings a slight sense of dread.
It feels like a wall of paperwork. A barrier between you and the people you want to care for. You worry about clicking the wrong button or sending a text to someone you shouldn't.
We’ve all been there. Trying to welcome a new family while simultaneously wondering if they’ve ticked the right box on a paper form that’s currently getting coffee spilled on it.
But things have changed.
As of February 2026, the rules around how UK churches and charities can communicate have shifted. The good news? It’s designed to make things a little more human.
The New Reality: Soft Opt-in for Churches
The Data (Use and Access) Act 2025 introduced what’s known as the "soft opt-in" for charities. This officially came into force on the 5th of February 2026.
Before this, the rules were quite rigid. You usually needed explicit, "check-this-box" consent to send anyone a marketing email or text message. For a church, "marketing" often just means telling someone about a newcomers' lunch or a new small group.
The struggle was real. You’d meet someone who was clearly interested in the life of the church, but because they hadn't ticked a specific box, you felt legally stuck.
This new rule changes the pace. It acknowledges that if someone has shown real interest in your church, you should be able to follow up with them: as long as you do it kindly and give them an easy way to say "no thank you."
Why This Matters for Your Church
This change isn't about spamming people. It’s about connection.
It allows your church administration software uk to work for you, rather than against you. It means that when someone supports your church: perhaps by signing up for an event or showing interest in a ministry: you can stay in touch without the initial "consent" hurdle being quite so high.
However, there are four simple rules you need to follow to stay on the right side of the law:
1. It only applies to new lists
This is the most important part. You cannot retroactively apply "soft opt-in" to your old database. The rule only applies to contact details collected after the 5th of February 2026. For your existing people, the old rules still apply.
2. They must have shown interest
You can’t just add random people to your list. They must have expressed interest in your church or supported your charitable purposes. This could be someone who filled out a visitor card, signed up for a community event, or donated.
3. You must offer an "Opt-Out" at the start
When you first collect their details (like on a Church Loop custom form), you must clearly tell them that you’ll be in touch and give them a simple way to opt-out right then and there.
4. Every message must have an "Unsubscribe"
Every email and every text must include a clear way for them to stop receiving messages. Simple, clear, and respectful.
Moving from "Database" to "People"
When we talk about GDPR, we often get bogged down in technical talk. We talk about "CRM databases" and "automation workflows."
But churches aren't businesses. We deal with people.
The goal of using church management software uk shouldn't be to build a massive list of data. It should be to make sure that the person who walked through your doors on Sunday feels seen and remembered on Tuesday.
Simple systems. Human pace.
By using these new rules thoughtfully, you can create a follow-up journey that feels like a natural extension of your Sunday morning welcome.
How to Handle the Transition
If you are looking to refresh your church growth tools uk, now is a great time to look at how you store your people’s stories.
Instead of scattered scraps of paper and multiple spreadsheets, consider moving to a system that keeps everything in one place. When your records are organised, staying compliant with GDPR isn't a chore: it’s just how you work.
A few practical steps to take this month:
- Check your forms: Ensure your visitor cards or online forms have a clear "opt-out" message.
- Update your privacy policy: A quick update to mention you use the soft opt-in for charitable purposes is a good idea.
- Train your team: Make sure your welcome team knows that while the rules are friendlier, we still respect people's privacy above all else.
Making Follow-Up Calm with Church Loop
At Church Loop, we built our platform specifically for the way UK churches actually run. We know you don't have a full-time legal department. You have busy pastors and amazing volunteers.
Our system is designed to handle these journey stages naturally. When someone fills out a form, they are added to a "people profile." It's one story per person.
We make it easy to weave SMS and email into one timeline, so nobody falls through the cracks. And because we focus on the UK context, our tools are built to keep you compliant without the headache.
Simple, not complicated. Clear, not overwhelming.
A Reassuring Step Forward
GDPR in 2026 doesn't have to be a source of anxiety. These new "soft opt-in" rules are a nudge toward a more common-sense approach to church communication.
It’s about being warm, human, and unmistakably yours.
If you’re feeling overwhelmed by spreadsheets or worried about staying compliant as you grow, take a breath. You don't need a bloated system. You just need a simple way to stay connected to your people.
Take it one step at a time. Your mission is to welcome people home; the right tools are just there to help you do it.
Want to see how a simpler approach to follow-up could work for your church? Explore our Founding Church offer and join a community of UK churches moving away from the chaos.