Privacy Policy
Data Protection & Your Rights
Last Updated: 21 June 2025
The Flock is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller Information
Data Controller: Your church organisation (data controller varies by tenant)
Sign in to see your church's specific contact details. The Flock is the data processor on behalf of each church.
Data Processor: The Flock
Processor Email: privacy@theflock.global
Data Protection Officer: dpo@theflock.global
2. What Personal Data We Collect
Essential Information
- Full name
- Email address
- Phone number
- Date of birth
- Location/City
Church-Related Data
- Branch location
- department involvement
- Attendance records
- Service participation
- Prayer requests
3. Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Church membership management | Legitimate interest in pastoral care |
| Service attendance tracking | Legitimate interest in community management |
| Communication about church events | Consent (you can opt out anytime) |
| Prayer request management | Consent (explicitly given) |
| Emergency contact information | Vital interests and consent |
4. How We Share Your Data
We may share your data only in these limited circumstances:
- Church leadership: For pastoral care and department coordination
- Branch leaders: For local fellowship coordination
- Emergency services: In case of medical emergency with your consent
- Legal compliance: When required by law or court order
5. Data Retention
Active Members
Data retained while you remain an active member of the church community.
Inactive Members
Data anonymised or deleted after 3 years of inactivity, unless legally required to retain.
6. Your GDPR Rights
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Request deletion of your data
Right to Portability
Receive your data in a structured format
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
Encryption
Data encrypted in transit and at rest
Secure Hosting
EU-based servers with security certifications
Access Control
Role-based access restrictions
8. Cookies and Tracking
We use cookies to improve your experience. You can manage cookie preferences at any time.
9. Contact & Complaints
This privacy policy is reviewed annually and updated as needed.
Version 1.0 - June 2025