Privacy policy

Draft for review. Have a lawyer familiar with the Kenya Data Protection Act, 2019 review this page before launch, and add your registered company details.

Who is responsible

Each church that uses ChurchSystem decides what information it keeps about its members and why. In the language of the Data Protection Act, the church is the data controller and ChurchSystem is the data processor acting on the church's instructions. For information on our own website and sales enquiries, ChurchSystem is the controller.

Information we collect on this website

• Details you send in the demo request form: name, church, email, phone and message
• Basic usage data, only if you accept analytics cookies

How we use it

• To reply to your request and arrange a demo
• To improve the website

We do not sell personal data.

Data held inside ChurchSystem

Churches store member, attendance, giving and pastoral records in the system. We keep each church's data separate, encrypt integration secrets, restrict sensitive records and keep an audit trail. We process that data only to provide the service.

Your rights

You may ask to access, correct or delete your personal data, or object to its processing. For data held by a church, contact that church first. For data we control, contact us at [email protected]. You may also complain to the Office of the Data Protection Commissioner.

Retention

We keep website enquiries only as long as needed to respond and for reasonable business records. Churches decide how long to keep their own records.

Changes

We will post any changes to this page.