EKKLESIA.NG PRIVACY POLICY
This Privacy Policy explains how Ekklesia.ng collects, uses, stores, protects and otherwise processes personal data.
1. Who We Are
Ekklesia.ng is a church management and growth technology platform.
For this Privacy Policy, "Ekklesia", "we", "us" and "our" refer to the entity operating Ekklesia.ng.
2. Information We Collect
Depending on how you interact with Ekklesia, we may collect:
Account Information
- name;
- email address;
- telephone number;
- username;
- password credentials in protected form;
- organisation/church information;
- role;
- branch information.
Church Information
A Church may enter:
- member names;
- contact details;
- visitor records;
- attendance;
- membership information;
- department information;
- cell-group information;
- leadership information;
- follow-up records;
- event registrations;
- communication preferences;
- prayer or pastoral-care information where the Church chooses to use those features.
Transaction Information
Where applicable:
- subscription information;
- payment references;
- transaction status;
- invoices;
- payment provider identifiers.
Ekklesia generally does not need to store full payment-card credentials where payments are processed by third-party payment providers.
Technical Information
We may collect:
- IP address;
- browser type;
- device information;
- operating system;
- log information;
- approximate location derived from technical information where necessary;
- authentication events;
- security events.
Usage Information
We may collect information about how users interact with the Platform, including:
- pages visited;
- features used;
- login events;
- errors;
- performance information.
3. How We Use Information
We may use information to:
- provide Ekklesia services;
- create and manage accounts;
- authenticate users;
- manage subscriptions;
- process transactions;
- provide customer support;
- send service notifications;
- send security alerts;
- facilitate church communications;
- maintain records;
- prevent fraud and abuse;
- monitor security;
- improve the Platform;
- troubleshoot technical problems;
- comply with legal obligations.
4. Church Customer Data
Where a Church uploads member, visitor or other personal data into Ekklesia, the Church generally determines the purpose for which that information is processed.
Ekklesia processes such information to provide the services instructed by the Church, subject to the applicable DPA.
5. Legal Basis
Where applicable, personal data may be processed based on:
- consent;
- contractual necessity;
- legal obligations;
- legitimate interests;
- protection of vital interests;
- other lawful bases recognised under applicable law.
The applicable lawful basis depends on the specific processing activity.
6. Sensitive Information
Some Church records may contain information requiring additional care.
Churches must not collect or upload sensitive information unless they have an appropriate lawful basis and safeguards.
Where Ekklesia processes such information on behalf of a Church, processing will be subject to the Church's instructions and the applicable DPA.
7. Cookies
Ekklesia may use cookies and similar technologies for:
- authentication;
- security;
- session management;
- preferences;
- analytics;
- performance.
Users may configure their browser to restrict cookies, although certain Platform functions may stop working properly.
8. Service Providers
We may use trusted third-party providers for:
- cloud hosting;
- email;
- SMS;
- WhatsApp;
- payment processing;
- analytics;
- security;
- backups;
- infrastructure.
Where appropriate, contracts and data-processing arrangements will govern these relationships.
9. International Transfers
Some service providers may process information outside Nigeria.
Where personal data is transferred across borders, Ekklesia will take steps required by applicable data-protection law.
10. Security
We use reasonable technical and organisational safeguards designed to protect information from unauthorised access, alteration, disclosure or destruction.
Security measures may include:
- access controls;
- authentication;
- encryption where appropriate;
- logging;
- monitoring;
- backups;
- secure development practices;
- staff access restrictions.
No internet-based service can guarantee absolute security.
11. Data Retention
We retain information only for as long as reasonably necessary for:
- providing services;
- legitimate business purposes;
- legal obligations;
- dispute resolution;
- security;
- accounting;
- backup and recovery.
Retention periods may vary depending on the category of information.
12. Data Subject Rights
Subject to applicable law, individuals may have rights relating to their personal data, including rights to:
- access information;
- request correction;
- request deletion;
- object to certain processing;
- request restriction;
- withdraw consent where processing is based on consent;
- request information about processing.
Where Ekklesia processes information on behalf of a Church, requests may need to be directed to the relevant Church first.
13. Children's Information
Churches must ensure that personal information relating to children is collected and processed in accordance with applicable law and appropriate safeguards.
Ekklesia does not knowingly use children's information for unrelated commercial purposes.
14. Data Breaches
If Ekklesia becomes aware of a security incident involving personal data, we will assess and respond according to applicable law and contractual obligations.
Where notification is legally required, Ekklesia will make appropriate notifications.
15. Marketing
Where permitted, we may send information about Ekklesia services, updates or relevant products.
Users may opt out of promotional communications.
Transactional and security communications may continue where necessary.
16. Changes
We may update this Privacy Policy from time to time.
The updated version will be published on the Platform.
17. Contact
Privacy/Data Protection Contact:
Email: info@ekklesia.ng
Ekklesia.ng
MYPLAYSTORE DIGITAL
Enugu