Privacy and Data Protection Policy Terms of Use Cookies and Similar Technologies
Data Protection
Altar of Lively Stones ("the Church") is committed to protecting the privacy and confidentiality of personal information. Personal data collected through the Church's website, forms, check-in stations, database and related records is used solely for legitimate church purposes, including membership and visitor administration, pastoral care and support, ministry coordination, event management, communication with members and congregants, safeguarding responsibilities, and compliance with applicable legal requirements. Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss, misuse or disclosure.
Access to personal information is restricted to authorised church leaders, staff and volunteers who need it to carry out their church-related duties, and who are required to keep it confidential. Information may be disclosed to trusted service providers acting on the Church's behalf, or where the law requires it, and only where suitable data protection and confidentiality safeguards are in place. The Church keeps personal information only for as long as necessary for the purposes for which it was collected, or as the law requires, and processes it in accordance with the Data Protection Act, 2021 of Zambia and the Church's internal data governance policies.
Who is responsible
The data controller is Altar of Lively Stones, Ndola, Zambia. Questions or requests about your information can be sent to info@altaroflivelystones.org.
Consent and sensitive information
Information about your membership, attendance or participation in church activities can reveal your religious beliefs, which the Data Protection Act treats as sensitive personal data. We collect and use it only with your consent, or where the Act otherwise permits. You can withdraw your consent at any time by contacting us. Withdrawing consent does not affect processing that has already taken place.
Your rights
You may ask us to confirm whether we hold information about you, to give you a copy, to correct it, and to stop using or delete it where the law allows. You may also object to certain uses and withdraw consent. To make a request, contact info@altaroflivelystones.org. We will respond within a reasonable time, and within any period the law sets. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner of Zambia.
Children
We collect information about children only from a parent or guardian, who may exercise the child's rights on their behalf. We use it only to run children's ministry, including attendance and safety.
Service providers and transfers outside Zambia
We use trusted service providers to host our website and records, send messages and keep attendance records: Google (Firebase hosting, database, sign-in and functions), Resend (email), WATI and Kapso (WhatsApp messaging, using the WhatsApp developer API) and Planning Center (attendance). Some of these providers store information on servers outside Zambia. Where this happens, we transfer information only with your consent and under suitable safeguards. We do not sell personal data.
Security incidents
If a security breach affects your information, we will notify the Data Protection Commissioner within 24 hours as the law requires, and we will tell affected people as soon as practicable.
How long we keep information
| Type of information | How long we keep it |
|---|---|
| Visitor and contact forms (contact messages, visit forms) | Kept while we follow up with you and for as long as needed to keep in touch with you as a visitor or member; then removed or anonymised. |
| Attendance records (check-ins) | Kept for as long as needed to run church administration, pastoral care and attendance reporting; then removed or anonymised. |
| Prayer requests | Kept for as long as needed to pray for and follow up the request; then removed. |
| Testimonies | Kept while under review. Published testimonies stay on the site until you ask us to remove them. |
| Giving records | Kept for as long as the law requires for financial and accounting records. |
| Children's records | Kept for as long as the child takes part in children's ministry; then removed or anonymised. |
| Staff accounts | Kept while the person holds a role that needs access; then closed. |
Cookies and similar technologies
Our website does not use advertising or tracking cookies. See our Cookies and Similar Technologies page for exactly what is stored on your device and which outside services your browser contacts.
Changes to this policy
We may update this policy. The date and version at the top of this page show when it last changed (version 2026-10). Forms record the version you agreed to.
Questions? Write to info@altaroflivelystones.org. See also our Terms of Use and Cookies page.