Gravel Hill Baptist Church
Members Area

Privacy

Privacy Policy

Updated on June 14, 2026

This policy explains how the church handles personal data on the public site and in the Ecclesia Hub members area. It does not replace specific legal advice, but records internal transparency, security, and data-subject response practices.

Who controls the data

The church operating this Ecclesia Hub instance is the controller of the personal data registered here. Administrative access should be limited to authorized leadership and used only for pastoral, administrative, and community communication purposes.

What data may be collected

We may process name, email, phone, member profile data, event attendance, courses, registered contributions, prayer requests, form messages, and technical records needed for authentication, security, and auditability.

Purposes of use

Data is used to provide access to the members area, organize church activities, support pastoral care, administer courses, events, communication, financial transparency, and respond to requests made by the data subject.

Legal bases

Processing may rely on consent, performance of a contract or preliminary procedures, legal obligation, the church's legitimate interest, and protection of life or physical safety when applicable. Sensitive data should receive stronger care and limited access.

Sharing

The church should not sell personal data. Sharing should occur only when needed for technical operation of the system, legal obligations, protection of rights, or authorization from the data subject.

Retention and disposal

Data should be kept for as long as necessary to fulfill the stated purposes, legal obligations, and accountability needs. When no longer needed, it should be deleted, anonymized, or kept with restricted access when there is a legitimate reason.

Data-subject rights

You may request confirmation of processing, access, correction, portability, sharing information, consent review, anonymization, blocking, or deletion when applicable. Use the church's official contact channel or the members privacy area.

Security

The platform uses authentication, HTTP-protected session cookies, hashed password storage, and consent records. The church should keep administrative access reviewed, use strong passwords, and maintain a secure backup routine.

Privacy channel

Internal owner
To be defined
Receipt confirmation
2 day(s)
Final response
15 day(s)