Privacy policy

What we collect

We only collect what you choose to give us through the forms on this site, and what we need to run it:

• Prayer requests: your request and, if you give them, your name, phone number and email. You can submit anonymously.
• Testimonies: your name, contact details, testimony and whether you agree to us sharing it.
• First-timer and visitor cards: your name, phone, email, address, how you heard about us and how you would like us to reach you.
• Member, worker and Shunammite registrations: your name, title, gender, birthday, marital status, occupation, address, phone, email, department, photo, emergency contact, and for Shunammite partners your monthly pledge and signature.
• Minister check-in: your title, name and church.
• Contact messages: your name, contact details and message.
• Technical data: with your permission, analytics and marketing cookies (see our cookie policy). Our hosting provider also keeps short-lived server logs, such as IP addresses, for security.

How we use it

We use your information to pray with you, follow up with you as a visitor, keep church membership, workforce and partnership records, plan programmes, reply to your messages, and send you reminders and updates you have signed up for by SMS, email or WhatsApp.

Prayer requests are shared only with the church's prayer team. Testimonies are only published on the site or in church if you tick the box agreeing to it, and we may edit them for length.

We never sell or rent your personal information, and we do not use it for anything unrelated to the life of the church.

Our legal basis

Under the Nigeria Data Protection Act 2023, we process your information because you consent to it when you submit a form, because it is needed to carry out something you asked for (such as a Shunammite partnership), or for the church's legitimate interest in caring for its members and visitors. Analytics and marketing cookies are only used with your consent.

Who can see it

Inside the church, only staff and leaders whose role needs it can see your records, and access is controlled by permissions in our admin system. We use trusted service providers to run the site, who process data on our behalf only:

• Supabase: database and secure file storage
• Netlify: website hosting
• Resend: email delivery
• Termii: SMS delivery
• Meta (WhatsApp, Facebook, Instagram): WhatsApp messages and, with your consent, the Meta Pixel
• Google: analytics, with your consent
• YouTube, Facebook and Vimeo: embedded livestreams and messages

Online giving

We do not collect or store card or bank details on this site. Online gifts are processed by our payment provider on their own secure page, under their own privacy policy. We only receive confirmation of the gift.

How long we keep it

We keep your information for as long as you have a relationship with the church, or as long as we need it for the purpose you gave it, plus any period required by law (for example, for financial records). When we no longer need it, we delete it or make it anonymous.

How we protect it

Data is sent over encrypted connections, uploaded files are kept in private storage, and staff accounts are protected by sign-in and role-based permissions. No system is perfectly secure, but if we ever have a breach that puts you at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.

Your rights

You can ask us at any time to:

• Show you the information we hold about you, or give you a copy
• Correct anything that is wrong or out of date
• Delete your information, or stop using it for a particular purpose
• Stop sending you messages. For WhatsApp, you can also just reply STOP
• Withdraw consent you gave earlier

Children

Our online forms are meant for adults. If you are under 18, please ask a parent or guardian to fill them in with you.

Changes to this policy

We may update this policy as the site changes. The date at the top shows when it was last updated. Significant changes will be announced on this site.