GBC PERSONAL INFORMATION PRIVACY COMMITMENT STATEMENT

In accordance with applicable laws, Grace Bible Church (the “Church”) is committed to protecting the privacy of its members, adherents, donors, volunteers, employees, directors, officers and any other persons about or from whom the Church collects personal information. The Church embraces the principles of the Canadian Standards Association Model Code for the Protection of Personal Information to ensure that all personal information is properly collected, used only for the purposes for which it is collected and is disposed of in a safe and timely manner when no longer required.

In being, or becoming, a member or adherent of the Church, it is recognized by all such individuals that the Bible portrays believers as members of one body (see I Corinthians 12). This requires the sharing of personal information with the body. The Church, its members and adherents, by voluntary implied contract, submit to, and are bound by, the constitution and the bylaws of the Church.

Except for the above implied consent to collect, use and retain personal information, no personal information will be sold, rented, leased or otherwise made available to any person without the explicit consent of the member or adherent. Except as otherwise required by the constitution and the bylaws or the operation of law, every member and adherent has the right, at any time, to withdraw his or her implied or explicit consent for the use of his or her personal information for any or all previously authorized uses.

With respect to the privacy of personal information the above means that all members and adherents have given their implied consent to use their personal information for all internal purposes of the Church to the extent that such use is in agreement with the bylaws and policies and the pronouncements of the Church from time to time.

Other persons or organizations who act for, or on behalf of, the Church are required to comply with the principles and the Policy and will be given restricted access to personal information solely to perform the services they may be retained to perform for the Church.

The Church has a designated Privacy Officer. Any inquiry, request or concern related to privacy matters should be made in writing to the Privacy Officer:

Privacy Officer

Grace Bible Church

2 Grand Avenue South, Cambridge, ON, N12 2L2

gbcsocialnetworks@gmail.com

PRIVACY POLICY

1. Accountability

The Church is responsible for maintaining and protecting the personal information under its control. The appointed Privacy Officer is responsible to ensure that the Church complies with its privacy obligations in accordance with applicable national and provincial privacy laws.

2. Identifying Purposes

The Church collects and uses personal information for a variety of purposes including, but not limited to,

providing services to individuals ministered to by the Church;
establishing and maintaining members lists;
managing payroll and benefits;
conducting employee performance evaluations;
establishing and maintaining lists of donors.

The Church shall identify and explain the purposes for which it collects personal information, to the person from whom the personal information is being collected, before or at the time the information is collected.

3. Consent

Consent will be obtained from the person whose personal information is collected, used and disclosed, unless obtaining the consent would be inappropriate or not required by law. Consent may be implied by virtue of their membership in the Church or because of the person’s conduct within the Church. When it is appropriate, consent will be obtained.

A person may withdraw his or her consent at any time, subject to legal or contractual restrictions and reasonable notice. The person will be informed of reasonably foreseeable implications of the withdrawal.

4. Limiting Collection

Information collected will be limited to that required for the purpose or purposes identified by the Church. The Church is committed to collecting personal information in a fair, open and lawful manner.

5. Limiting Use, Disclosure and Retention

Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the person or as required by law. All collected personal information shall be destroyed, erased or made anonymous as soon as the purpose for which it was collected is no longer relevant, or as permitted by the law, or required under insurance requirements or Plan to Protect policies. Nothing in this Privacy Policy prevents the elders, pastoral staff, deacons and ministry leaders from collecting, retaining and using information related to individuals ministered to by the Church, since such information assists in providing quality services to those ministered to.

6. Accuracy

Personal information shall be maintained in as accurate, complete and up-to-date form as necessary in order to fulfill the purposes for which it was collected.

7. Safeguards

Personal information will be protected by security safeguards that are appropriate to the sensitivity of the personal information. This safeguarding could include physical measures such as locked filing cabinets, record keeping rooms and office doors, and organizational measures such as restricted access to files with personal information or technological measures such as security software and password protection.

8. Personal Information we Collect and How we Use it

Cookies

GBC uses cookies to perform various tasks on our website, including but not limited to site usability (e.g. remembering your filter preferences), site visitor tracking (i.e. aggregated anonymous data to track and count visitors to the site, and analyze how they interact with it), and legal compliance (e.g. tracking your agreement to this privacy policy or your approval of the use of cookies). Our website requires cookies to function; accordingly, if you disable cookies it may not perform optimally.

Personally Identifying Issues

GBC collects various personally identifiable information from our users, should they choose to provide it. Some examples include

Email Addresses

We collect your email address, if you choose to provide it, for the purposes of providing you information about upcoming events or initiating personal correspondence. You may opt out of communications from GBC at any time. We also use your email address to provide information about financial transactions such as online donations or event registrations. You may not opt out of these communications, except by opting out of online giving and online event registration payments.

Credit Card Number or Banking Number

We collect your credit card number or banking account number, if you choose to provide it, to enable online giving and online event registrations. GBC does not save or store your credit card or banking account information. You may request our assistance in deleting your information or cancelling a recurring transaction at any time. We utilize the services of third-party companies to provide payment services. Third parties may store your information and any information you provide is governed by their policies.

Third parties include but are not limited to:

Address

We collect your address, if you choose to provide it, for the purpose of processing online giving or event registration transactions, and for the purpose of sending correspondence and tax-deductible receipts and statements. You may request our assistance in deleting your address at any time.

Phone Number

We collect your phone number, if you choose to provide it, for the purpose of sending communications about upcoming events, initiating correspondence, and providing information about financial transactions such as online donations or event registrations. You may opt out of sharing your phone number at any time, but you may not opt out of receiving transaction-related messaging except by opting out of online giving and online event registration payments.

9. Openness

Information regarding the privacy policy of the Church, as well as the personal information management, shall be available as requested. The information will include:

Name and address of the Privacy Officer
Means of gaining access to personal information held by the Church
Copy of the information that explains the Church’s policies, standards or codes

10. Access to Personal Information

Access to personal information will be granted, where the Church is legally required to release the information and provided that the disclosure does not violate any applicable statutes or contracts, to the person to whom the information pertains where there is an appropriate written request. The existence, use and disclosure of the personal information will be granted within a reasonable period of time. Any inaccuracy or incompleteness of personal information will be amended as required.

11. Challenging Compliance

Complaints or inquiries about the collection, use, disclosure or retention of personal information and the Church’s compliance with these ten principles should be directed to the Privacy Officer. The Privacy Officer will investigate complaints and ensure that appropriate measures are taken.

12. How we Share your Data

Your privacy and digital security is extremely important to us. We do not share your data with any unaffiliated third parties. We never sell or rent your data to anyone. We will not send unsolicited marketing communications – you can opt out of any marketing communications at any time, and we will not give your data to third party marketers.

We provide your data to third party companies we pay to provide us with services such as information technology or email marketing. We do not authorize third parties to use your data except for the specific purposes for which we provide it.

Third parties with which we have data processing relationships include but are not limited to the following:

Planning Center Online (PCO)
Google
Apple
Mailchimp
Microsoft Office 365
Stripe
Squarespace

All names are trademarks of their respective owners and they do not endorse, nor are they endorsed by GBC.

The third-party services we have data processing agreements with have world-wide geographic footprints. Therefore, it is likely your data is processed in their facilities world-wide, and data processing is not limited to Canada, the United States or the European Union. We reserve the right to transfer your data between geographic locations and between third party processors.

Last Updated: March 4, 2020