Privacy Policy

1. RESPONSIBLE PARTY
Grace Kingdom Community Centre (GKCC), a registered Non-Profit Company (NPC), is responsible for the processing of personal information undertaken through its Website, church administration, events and related activities, subject to applicable law. GKCC is registered as NPC 2013/100395/08.

2. INFORMATION OFFICER
GKCC is a small organisation and is in the process of formalising its internal POPIA governance arrangements, including the designation and registration of its Information Officer where required. Until those arrangements are formally recorded, privacy enquiries may be directed to info@gkcc.org.za or reception@gkcc.org.za. GKCC will update this Policy when the designated Information Officer details are formally established.

3. SCOPE
This Policy applies to personal information processed through www.gkcc.org.za, online forms, event registrations, donations, church administration, youth programmes, children’s trips and activities, communications, CCTV and other GKCC operations.

4. CATEGORIES OF INFORMATION
GKCC may process names and surnames, identification or passport information where required, dates of birth, gender, physical or postal addresses, telephone numbers, email addresses, emergency-contact information, church or ministry information, event and attendance information, payment and transaction information, photographs and audiovisual recordings, communications preferences, and information supplied in connection with youth, children’s and community programmes.

5. CHILDREN AND MINORS
GKCC may process personal information relating to children participating in youth programmes, children’s trips and other activities. Such processing is undertaken with appropriate parental or lawful-guardian consent and subject to applicable legal requirements. GKCC will apply appropriate safeguards to information concerning minors and will not knowingly make such information publicly available merely because it has been collected for programme administration.

6. SPECIAL PERSONAL INFORMATION
Certain information may constitute special personal information under applicable law depending on its content and context. GKCC will process such information only where a lawful basis and appropriate safeguards exist. GKCC does not require disclosure of sensitive information merely for general website use unless reasonably necessary for a specified purpose.

7. PURPOSES OF PROCESSING
Personal information may be processed to administer church membership and ministry activities; register participants; administer events and trips; communicate with members, visitors and donors; process donations and ticket transactions; issue receipts and invoices; administer fundraising campaigns; maintain accounting and statutory records; manage security and CCTV; publish approved church communications; administer youth and community programmes; respond to enquiries; prevent fraud and abuse; and comply with legal obligations.

8. LAWFUL PROCESSING
GKCC will process personal information on a lawful basis appropriate to the circumstances, including consent where required, contractual or transactional necessity, legitimate organisational purposes where permitted, compliance with legal obligations, and other lawful grounds recognised by applicable South African data-protection law.

9. DIRECT MARKETING AND COMMUNICATIONS
GKCC may communicate church announcements, programmes, events, fundraising initiatives and related information by email, telephone, WhatsApp, SMS or other communication channels. Where applicable law requires consent or an opt-out mechanism, GKCC will implement the relevant requirements. Recipients may request that non-essential communications cease.

10. PHOTOGRAPHS AND AUDIOVISUAL MATERIAL
GKCC may photograph or record church services, events and community activities and may publish selected material on its Website or social-media channels where appropriate. GKCC will take reasonable measures to address consent requirements, particularly where identifiable minors are involved.

11. CCTV
GKCC operates CCTV at its premises for security, safety, incident management and protection of persons and property. CCTV footage is access-controlled and retained only for as long as reasonably necessary, subject to operational requirements, investigations and applicable law.

12. THIRD-PARTY OPERATORS
GKCC uses third-party technology and service providers, which may include website, form, database, payment, communications, cloud-storage, social-media and event-management providers. Where such providers process personal information on GKCC's behalf, GKCC will seek to apply appropriate contractual, security and governance measures consistent with applicable law.

13. PAYMENT INFORMATION
Online payments are processed entirely through third-party payment providers. GKCC does not collect complete payment-card details directly through its Website checkout. GKCC may receive transaction details necessary for reconciliation, receipts, invoices, fraud prevention and recordkeeping.

14. RECIPIENTS AND DISCLOSURE
GKCC does not sell personal information. Information may be disclosed to authorised personnel, service providers, payment processors, professional advisers, regulators, law-enforcement bodies or other recipients where reasonably necessary and legally permitted or required. Donor information is not publicly disclosed.

15. CROSS-BORDER PROCESSING
Some third-party technology providers may process or store information outside South Africa. Where this occurs, GKCC will take reasonable steps to ensure that the transfer or processing is undertaken in accordance with applicable POPIA requirements and the relevant provider's contractual and security obligations.

16. SECURITY SAFEGUARDS
GKCC implements reasonable technical and organisational safeguards appropriate to the nature of the information processed. These may include access controls, account permissions, password protection, secure payment-provider processing, restricted administrative access and appropriate operational procedures.

17. RETENTION
GKCC • www.gkcc.org.za Personal information will be retained only for as long as reasonably necessary for the purpose for which it was collected, for legitimate church and administrative recordkeeping, for financial and statutory obligations, for dispute resolution, or as otherwise required or permitted by law.

18. DATA-SUBJECT RIGHTS
Subject to applicable law, individuals may request access to personal information held about them, request correction or updating of inaccurate information, request deletion where legally permissible, object to certain processing, withdraw consent where consent is the applicable basis, and exercise other rights provided by POPIA.

19. REQUESTS AND COMPLAINTS
Privacy requests should be sent to info@gkcc.org.za or reception@gkcc.org.za. GKCC will assess and respond to requests in accordance with applicable law. Individuals may also lodge a complaint with the Information Regulator where they believe their personal information has been processed unlawfully.

20. COOKIES AND WEBSITE TECHNOLOGIES
The Website may use cookies, analytics and similar technologies for functionality, security, performance measurement and user experience. Third-party services integrated into the Website may apply their own technologies and policies.

21. POLICY CHANGES
GKCC may amend this Policy to reflect changes in law, technology, operations or governance. The current version will be published on www.gkcc.org.za with its effective date. This document is published by GKCC for website and payment-provider compliance purposes. It should be read together with the specific terms displayed for individual events or campaigns where applicable.