Privacy Policy Statement for The International Central Gospel Church

The Data Protection Act, 2012 (Act 843) clearly sets out the rules and principles governing the collection, use, disclosure, and care for personal data or information by an organisation (Data controller) and a data user (Data processor).

The Act also establishes the Data Protection Commission as an independent statutory body to ensure and enforce compliance.

The International Central Gospel Church is committed to protecting the privacy and personal data of our members, visitors, donors, volunteers, and all individuals who interact with us.

This Privacy Policy outlines how we collect, use, store, and protect personal information in accordance with applicable data protection laws. By using the Site, you agree to the collection and use of information in accordance with this policy.

SECTION 1

A. Information We Collect

While you interact with the system, we may collect the following categories of personally identifiable information that can be used to contact or identify you.

We may:

• Identity Information: Full name, date of birth, gender, marital status.
• Contact Information: Home address, phone number, email address.
• Spiritual Data: Baptism records, membership status, pastoral care needs.
• Donation Information: Amounts donated, payment details (where necessary).
• Photographs and Videos: Captured during church events and services.
• Metadata: IP addresses, browser type, cookies, usage analytics (if applicable).

B. How We Use Your Information

We use your personal data for purposes including:

• To manage membership records and pastoral care.
• To communicate church updates, events, and spiritual resources.
• To manage volunteer or ministry involvement.
• To facilitate financial donations and issue receipts.
• To comply with legal and regulatory obligations.
• To ensure the safety and security of our congregation and premises.

C. Lawful Basis for Processing

We collect and process your data based on one or more of the following lawful grounds:

• Your consent (e.g., subscribing to a newsletter).
• To fulfill our legitimate interests (e.g., member engagement).
• For the performance of a contract (e.g., event registration).
• For vital interests (e.g., emergencies).

D. Data Sharing and Disclosure

We do not sell your data. We may share personal data with:

• Trusted third-party service providers (e.g., event registration platforms).
• Government authorities or legal institutions when required by law.
• Church leadership or relevant departments on a need-to-know basis.

E. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Afterward, data is securely deleted or anonymized.

F. Data Security

We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, disclosure, or destruction.

SECTION 2

A. Metadata Information

Cookies

Our Site may use cookies (small text files stored on your system) to enhance your browsing experience.

Cookies help us recognize returning visitors and gather statistical information about site usage. You may configure your browser to block cookies or notify you when cookies are being used.

Please note, however, that disabling cookies may affect your ability to access some features of our site.

Log Data

As you interact with our system, certain information such as Log Data is automatically collected by our system.

This may include your device's Internet Protocol (IP) address, the type and version of your browser, pages visited, date and time of your visit, and the duration spent on each page.

We may use trusted Analytic third-party tools to help us better understand how visitors engage with our website. This information is used strictly for improving the quality and effectiveness of our online ministry.

G. Third-Party Services

The third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act. Once you leave the system or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Terms of Service.

Links

When you click on links on our system, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECTION 3

H. Communications

If you choose to share your personal information with us, for example, by subscribing to our newsletter or completing an online contact form, we may use it to communicate with you.

This can include church updates, event announcements, devotionals, and other messages intended to support your spiritual growth and engagement with our ministry. You may opt out of such communication at any time.

SECTION 4

I. Data Protection Act (DPA)

Effective May 10, 2012, the Data Protection Act (843) expands the Ghanaian residents' (Data Subjects) rights concerning their personal data.

ICGC is ready to assist our members in becoming or remaining compliant with GDPR after this crucial transition.

1) Lawful, fair and transparent processing

ICGC is to process the personal data in a lawful, fair and transparent manner.

• Lawful means all processing should be based on a legitimate purpose.
• Fair means companies take responsibility and do not process data for any purpose other than the legitimate purposes.
• Transparent means that companies must inform data subjects about the processing activities on their personal data.

2) Limitation of purpose, data and storage

ICGC is expected to limit the processing, collect only that data which is necessary, and not keep personal data once the processing purpose is completed. This would effectively bring the following requirements:

• forbid processing of personal data outside the legitimate purpose for which the personal data was collected
• mandate that no personal data, other than what is necessary, be requested
• ask that personal data should be deleted once the legitimate purpose for which it was collected is fulfilled

3) Data subject rights

The data subjects have been assigned the right to ask the company what information it has about them, and what the company does with this information. A data subject has the right to

• Access your personal data.
• Request correction or deletion of your data.
• Withdraw consent at any time (where processing is based on consent).
• Object to or restrict certain types of processing.
• Complain to the Data Protection Supervisor at the Head Office regarding data issues

4) Consent

As and when the company has the intent to process personal data beyond the legitimate purpose for which that data was collected, a clear and explicit consent must be obtained from the data subject. Once collected, this consent must be documented, and the data subject is allowed to withdraw their consent at any moment.

Also, for the processing of children's data, GDPR requires explicit consent of the parents (or guardian) if the child's age is under 16.

SECTION 5

5) Personal data breaches

ICGC must maintain a Personal Data Breach Register and based on severity, the regulator and data subject should be informed within 72 hours of identifying the breach.

How to handle a breach according to the DPA

6) Privacy by Design

ICGC should incorporate organisational and technical mechanisms to protect personal data in the design of new systems and processes; that is, aspects of privacy and protection should be ensured by default.

7) Data Protection Impact Assessment (DPIA)

To estimate the impact of changes or new actions, a Data Protection Impact Assessment will be conducted when initiating a new project, change, or product. The Data Protection Impact Assessment is a procedure that needs to be carried out when a significant change is introduced in the processing of personal data. This change could be a new process, or a change to an existing process that alters the way personal data is being processed.

8) Data transfers

The controller of personal data has the accountability to ensure that personal data is protected and GDPR requirements are respected, even if processing is being done by a third party.

This means controllers have the obligation to ensure the protection and privacy of personal data when that data is being transferred outside the company, to a third party and / or other entity within the same company.

SECTION 6

J. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available at our church office and/or on our website.

K. Contact Us