Member Account Privacy

When you create a member account we collect the information you enter on the registration form: your name, gender, date of birth, phone number, email address and home address, your preferred way of being contacted, and — if you choose to give one — an emergency contact.

If you create a family account, we also store the same kinds of details for the people you add to your household, along with their relationship to you.

We store your password only as a secure, one-way hash. Nobody at the church — including the IT Administrator — can see or recover your password.

We use this information to run the life of the congregation: to know who is part of our church family, to contact you about services and events, to keep pastoral and membership records, and to reach someone on your behalf in an emergency.

We do not sell your information, and we do not share it with advertisers.

Access is limited by role:

• You can see and update your own profile at any time.
• A household administratorcan see and manage the people in their own household — and only their own. One family can never see another family's records.
• Church leadership — the Pastor, Executive Members and the IT Administrator — can see member and household records in order to care for the congregation and keep the records accurate.
• Ministry leaders, finance and media volunteers cannot see member or household records.

Private pastoral and leadership notes are kept separate from the information you see on your own profile, and are never shown to other members.

Children's profiles are never shown publicly. Their birth dates and contact details are visible only to church leadership and to the administrator of their own household.

Children and dependants do not receive their own login. An adult in the household with an email address may be invited to create one; that invitation is single-use and expires.

We ask only for the information the church actually needs to care for your family.

Your connection to this site is encrypted. Passwords are hashed, never stored in readable form, and checked against known breached-password lists when you choose one. Verification and invitation links are single-use and expire.

Administrative changes to member records are written to an audit log, so the church can see who changed what and when.

When a member record is removed it is normally archivedrather than deleted, so the church's historical records — baptisms, confirmations, membership history — are not lost. Archived records are hidden from day-to-day use.

Permanent deletion is restricted to the IT Administrator and requires explicit confirmation.

You can view and correct your own information at any time from your profile. You can change how you prefer to be contacted, or ask the church office to deactivate your account.

To request a copy of your information, ask for a correction, or ask us to remove your record, contact the church office.