Last Updated: January 21, 2025

Introduction

Welcome to Church Workers Training (“we,” “us,” or “our”) at https://www.churchworkerstraining.com. This Privacy Policy outlines how we collect, use, protect, and share your personal information when you interact with our website, services, or communications.

We are committed to complying with global privacy laws, including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and others. By using our services, you agree to the terms outlined in this policy.

Scope and Definitions

This policy applies to:

• Visitors to our website
• Newsletter subscribers
• Users interacting with our services

Key Definitions:

• Personal Data: Information that identifies or relates to you (e.g., email addresses, IP addresses).
• Processing: Any action performed on data (e.g., collection, storage, deletion).
• Data Controller: Church Workers Training (responsible for data decisions).
• Data Processor: Third parties acting on our instructions (e.g., Google Analytics).

Data Collection and Processing

What We Collect

Legal Basis for Processing

• Consent: For newsletters and non-essential cookies.
• Legitimate Interests: For website security and analytics.
• Legal Obligations: Compliance with tax or regulatory requirements.

How We Use Your Data

Primary Purposes

• Service Delivery: Sending newsletters, responding to inquiries.
• Analytics: Monitoring traffic patterns and user engagement.
• Security: Detecting and preventing fraudulent activity.
• Improvements: Enhancing website functionality and content.

Retention Periods

Third-Party Services

Data Processors We Work With

*Specific providers will be disclosed upon request.

International Data Transfers

• Data may be transferred outside your country using Standard Contractual Clauses (SCCs).
• Third-party providers adhere to EU-U.S. Data Privacy Framework principles where applicable.

Your Privacy Rights

Global Rights

You may:

1. Access your personal data.
2. Correct inaccurate information.
3. Delete data (excluding legal obligations).
4. Object to processing based on legitimate interests.
5. Withdraw consent for newsletters or cookies.

Regional Rights

*We do not sell data, but honor opt-out requests via GPC signals.

How to Exercise Rights

1. Email: connectwith@churchworkerstraining.com
2. Portal: Launching Q2 2025 (tracking ID provided upon request)
3. Response Time: 30 days (10 days for CCPA deletion requests)

Data Security

Our Protections

• Encryption: SSL/TLS for data in transit; AES-256 for stored data.
• Access Controls: Role-based permissions and multi-factor authentication.
• Audits: Bi-annual penetration testing and vulnerability assessments.
• Training: Annual privacy compliance workshops for staff.

Breach Protocol

1. Contain and assess the breach within 24 hours.
2. Notify affected users and authorities within 72 hours (if required).
3. Provide free credit monitoring for impacted users (if applicable).

International Data Transfers

• Primary servers located in the EU/EEA.
• U.S.-based third parties use SCCs or Binding Corporate Rules.
• Detailed transfer maps available upon request.

Children’s Privacy

• Age Restriction: Users under 16 must obtain parental consent.
• Verification: Email confirmation from parents for minor accounts.
• Deletion: Contact us to remove underage data promptly.

Policy Updates

• Notification: Email alerts for material changes; website banners for minor updates.
• Effective Date: Changes apply 30 days after posting.
• Archive: Full version history available below.

Contact Information

*To prevent fraud, we verify identity before disclosing physical addresses.