1. Information We Collect
We collect information you provide directly to us through our website, donation portal, and contact forms. This includes: • Full name • Email address • Phone number (optional, for M-Pesa) • Transaction references from our payment processor • Messages submitted through our contact form We also collect limited technical information automatically (browser type, approximate location by IP) for security and analytics purposes only.
2. How We Use Your Information
Your information is used exclusively for ministry operations: • Processing and confirming donations • Issuing receipts and thank-you correspondence • Responding to enquiries and prayer requests • Complying with financial and legal obligations We do not sell, rent, or trade your personal information to any third party.
3. Third-Party Processors
We rely on trusted third-party service providers who process your data on our behalf: • Paystack — payment processing (card and M-Pesa) • Supabase — secure database storage • Resend — transactional email delivery • Vercel — website hosting Each processor is bound by its own privacy policy and only handles data necessary to perform its specific service. We never share card numbers or M-Pesa PINs — these are handled entirely by Paystack's encrypted infrastructure.
4. Data Retention
Donation records are retained for a minimum of seven (7) years to comply with financial reporting requirements under Kenyan law. Contact form submissions are retained for two (2) years unless you request earlier deletion. Email correspondence is retained as long as necessary to resolve the matter at hand.
5. Your Rights (Kenya Data Protection Act 2019)
Under the Kenya Data Protection Act (2019), you have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your data (subject to legal retention requirements) • Object to or restrict certain processing • Receive a copy of your data in a portable format To exercise any of these rights, contact our Data Protection Officer at privacy@jcwcm.org. We will respond within 30 days.
6. Cookies
Our website uses minimal cookies: • A secure session cookie to keep you logged into the admin dashboard (only for authorised staff) • A theme preference cookie (light or dark mode) We do not use advertising, tracking, or third-party analytics cookies.
7. Children's Privacy
Our website is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact privacy@jcwcm.org and we will delete it promptly.
8. International Transfers
Our service providers (Paystack, Supabase, Resend, Vercel) may process your data outside Kenya. Wherever possible, we require these providers to maintain data protection standards equivalent to or stronger than those required by Kenyan law.
9. Changes to This Policy
We may update this policy occasionally to reflect changes in our practices or legal requirements. The effective date at the top of this page will always show the latest version. Continued use of our site after changes constitutes acceptance of the updated policy.
10. Contact
For questions about this policy or your data, contact our Data Protection Officer: Email: privacy@jcwcm.org Post: Data Protection Officer, Jesus Christ's Worship Centre Ministry, P.O. Box 2388 - 40200, Kisii, Kenya