Privacy Policy

Pastor Brian Muganyizi Ministry, the Ministry, respects your privacy and is committed to protecting the personal information you share with us through this website. This Privacy Policy explains how we collect, use, store, and protect your information when you visit the website, give online, buy merchandise, register for events, volunteer for outreaches, submit contact forms, or otherwise interact with ministry content.

This policy is issued in line with the Data Protection Act, 2019 of Kenya. The Ministry is the data controller for personal data processed through this website. The relevant regulator is the Office of the Data Protection Commissioner.

By using this website, you confirm that you have read this Privacy Policy and agree to the processing of your personal data as described here.

Minimum Age

This website is intended for use by persons aged 18 years and above, or by persons aged 13 and above with verifiable parental or guardian consent. The Ministry does not knowingly collect personal data from children under the age of 13. If you believe a child under 13 has provided personal data without appropriate consent, contact us and we will take steps to delete such data promptly.

Event and outreach participation involving minors may require additional written parental or guardian consent, which the Ministry will request separately.

Information We Collect

We may collect the following categories of personal data:

• Identity data, including name, phone number, and email address.
• Location data, including city, region, and delivery address.
• Organisational data, including church, ministry, or organisation name.
• Transaction data, including giving records, merchandise orders, payment references, payment status, and Lipa Polepole plan details.
• Event and volunteer data, including registration details, attendance records, and volunteer signup information.
• Communication data, including contact form messages.
• Technical and usage data, including pages viewed, device type, browser type, anonymised IP address, session data, and general analytics.

We do not store full card numbers, M-Pesa PINs, Airtel Money PINs, or other sensitive payment credentials. Payment credentials are handled by approved third-party payment processors.

How We Use Your Information

We process personal data on lawful bases under the Data Protection Act, including performance of a contract, compliance with legal obligations, and consent where required. We use your information to:

• Process donations, offerings, and Lipa Polepole plans.
• Process and fulfil merchandise orders.
• Register and manage event attendees.
• Coordinate outreach volunteers.
• Respond to contact and invitation requests.
• Send transactional confirmations, receipts, and order updates.
• Improve website performance and ministry communication.
• Prevent fraud, spam, misuse, and unauthorised access.
• Comply with applicable legal and regulatory requirements, including tax and audit obligations.

Payment Information

Payments may be processed through Paystack or other approved payment gateways. Those providers process payment credentials according to their own security and privacy policies. We store only the transaction reference, payment status, amount, payment purpose, and related order or donation record for reconciliation and record keeping.

Cookies and Analytics

The website may use cookies in two categories:

• Essential cookies, required for the website to function, including session management, security tokens, and cart or checkout state.
• Analytics and preference cookies, used to measure traffic, track engagement with sermons, blogs, events, and giving pages, and improve content recommendations.

Analytics and preference cookies are activated only after you give consent. We do not sell personal data to advertisers or third-party data brokers.

Content Recommendations

The platform may use anonymous website activity, such as pages viewed, sermon videos clicked, categories visited, or articles read, to recommend sermons, blogs, events, or ministry content. This recommendation logic does not use personally identifiable profiling.

Data Sharing and Third-Party Processors

We may share limited personal data with trusted third-party service providers who help operate the platform, including:

• Payment processors, including Paystack.
• Email service providers.
• Hosting and infrastructure providers.
• Analytics tools.
• Cloud media storage providers, including Cloudinary.
• Security and monitoring tools.

We share only the minimum data necessary for those services to function. In accordance with the Data Protection Act, the Ministry will maintain appropriate data processing arrangements with third-party processors who handle personal data on our behalf.

We do not sell, rent, or trade personal data to any third party for their own marketing purposes. We may disclose personal data where required by law, regulation, court order, or a competent government authority.

Data Security

We implement reasonable technical and organisational measures to protect personal data, including:

• Secure HTTPS connections on all pages.
• Access-controlled admin dashboard with role-based permissions.
• Password hashing using industry-standard algorithms.
• Payment webhook signature verification.
• Secure environment variables and secret management.
• Regular data backups.
• Admin activity logging.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security.

Your Rights

Under the Data Protection Act, 2019, you have the following rights in respect of your personal data:

• Right of access to request a copy of your personal data.
• Right of correction for inaccurate or incomplete data.
• Right of deletion in appropriate circumstances.
• Right to withdraw consent where processing is based on consent.
• Right to object to certain processing.
• Right to information about how your personal data is used.

To exercise these rights, contact the Ministry. We aim to respond within 21 days. If you are dissatisfied with how we handle your request, you may lodge a complaint with the Office of the Data Protection Commissioner at odpc.go.ke.

Data Retention

We retain personal data only for as long as necessary for ministry operations, payment reconciliation, legal compliance, dispute handling, reporting, and record keeping. Transaction and donation records may be retained for up to seven years for audit and tax compliance. Other data will be deleted or anonymised when no longer required.

Contact

For privacy questions, data access requests, or complaints, contact the Ministry through the website contact form or any official contact details published by the Ministry.