Privacy Policy

Who is responsible for your data

KingdomPages is the data controller for the personal information described on this page. Reach us about anything on this page through our contact form — choose "A privacy or data request".

What we collect, and why

We collect only what a directory needs to work. There is no profiling, and we do not sell data to anyone.

What	When	Why (lawful basis)
Your name, email address, phone number and role at the church	When you claim a church listing	To verify you are connected to that church before handing you control of its listing. Legitimate interests — protecting churches from someone taking over a listing that is not theirs.
Your name, email address, phone number and your message	When you send an enquiry, prayer request or plan-a-visit message to a church	To pass your message to that church. Consent — you choose to send it.
Your name, email address and password	When you create an account	To let you sign in and manage your church's listing. Contract.
A proof document or photo	If you upload one to support a claim	To verify the claim. Legitimate interests.
A one-way hash of your IP address	When you submit any form	To detect and block spam. We store a hash, not the address itself, so it cannot be read back. Legitimate interests.
Analytics about pages viewed	Only if you accept analytics cookies	To understand which towns and denominations people search for. Consent.

Your location is never stored

If you use "Use My Location", your browser gives us your approximate position for that one search so we can order churches by distance. It is used to run the search and is never written to our database or shared with anyone. Refusing it costs you nothing — you can search by town or postcode instead.

Who else sees your information

Your information goes to a very short list of places, and nowhere else:

• The church you contacted. If you send an enquiry, prayer request or visit request, the church receives your name, your message, and whichever contact details you provided — that is the point of sending it. What the church then does with it is governed by that church's own privacy practices, not ours.
• Our email provider, to deliver messages and account emails.
• Google Analytics, but only if you accepted analytics cookies. Your IP address is anonymised.
• Anyone we are legally required to disclose to, such as in response to a valid court order.

We do not sell your data, rent it, or share it for advertising.

How long we keep it

• Enquiries and prayer requests — 24 months, then deleted.
• Claim records — kept while the claim stands, and for 24 months after a listing is released, so we can resolve disputes about who controlled a listing.
• Account details — until you ask us to close the account.
• Spam hashes — 12 months.

Church listings are not personal data — mostly

Most listing information (a church's name, address, service times, public phone number) is organisational information about a place of worship, not personal information about an individual. Where a listing names a specific person — a vicar or a contact — that is personal data, and you can ask us to remove it using the details below.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete it, where we have no continuing reason to keep it;
• restrict or object to how we use it;
• send it to you, or another provider, in a portable format;
• withdraw consent at any time, where consent is what we relied on.

Send a privacy request and we will respond within one month. If you are not happy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We set only the cookies needed to run the site unless you accept analytics. The full detail is in our Cookie Policy. If your browser sends a Global Privacy Control signal we treat that as a refusal automatically.

Where your data is held

Our servers are in the United Kingdom. Some of our providers, such as our analytics provider, may process data outside the UK under the safeguards required by UK data protection law.

Children

This site is intended for adults. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data we will update this page and change the date at the top. Material changes will be flagged on the site.