Plain-Language Summary
What this means for you
We collect only the personal information you voluntarily give us (your name, email, and location). We use it solely to manage your discipleship journey on this site. We do not sell it, share it for advertising, or use it for anything you have not consented to.
Section 01
Overview
To Christ 4 Christ ("we", "us", or "our") is a Christian discipleship ministry operating at tochristforchrist.org. We are committed to handling your personal information with the same care and integrity that we apply to our spiritual mission.
This Privacy Policy explains how we collect, use, store, and protect personal data submitted through our website, including the sign-up form, Prayer Wall, and lesson progress tracker. It is written in compliance with the Kenya Data Protection Act, 2019 (DPA 2019) and its accompanying regulations.
By using our website and voluntarily submitting your personal information, you acknowledge that you have read and understood this policy.
Section 02
Who We Are
For the purposes of the Kenya Data Protection Act, 2019, To Christ 4 Christ (Martin Kambo)is the Data Controller of personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Website: tochristforchrist.org
Contact Email: hello@tochristforchrist.org
Country of Operation: Kenya
We are in the process of registering with the Office of the Data Protection Commissioner (ODPC) of Kenya as required under Section 17 of the DPA 2019.
Section 03
Data We Collect
We collect only the minimum personal information necessary to provide our service ("data minimisation" as required by Section 25 of the DPA 2019). We collect data in two ways: information you actively provide, and limited technical data your browser sends automatically.
| Data Type | What It Is | Why We Need It |
|---|---|---|
| First Name | Your given name as entered in the sign-up form | To personalise your progress tracker and welcome email |
| Last Name | Your family name (optional) | For our pastoral records |
| Email Address | Your email as entered in the sign-up form | To send your welcome email and discipleship updates |
| Location | City or country as entered by you (optional) | To understand the geographic reach of our ministry |
| Lesson Progress | Which lessons you have marked complete | To display your progress tracker on the site |
| Prayer Requests | Text submitted to the Prayer Wall | To display your request on the community wall |
| Form Submission Time | Timestamp of when you signed up | To maintain accurate records |
We do not collect sensitive personal data such as health information, financial data, biometric data, or racial or ethnic origin. We do not collect data from social media logins or advertising networks.
Section 04
How We Use Your Data
We use personal data only for the specific purposes for which it was collected, in accordance with Section 26 of the DPA 2019. We will never use your data for purposes that are incompatible with why you shared it with us.
| Purpose | Legal Basis (DPA 2019) |
|---|---|
| Displaying your name and progress tracker on the site | Consent (Section 30) |
| Sending a welcome email when you register | Consent (Section 30) |
| Sending discipleship updates and lesson reminders | Consent (Section 30) |
| Publishing your prayer request on the Prayer Wall | Consent given at point of submission |
| Aggregate statistics (e.g. "how many people joined") | Legitimate interest — data is anonymised |
| Pastoral follow-up by ministry leadership | Consent (Section 30) |
Section 05
Consent
Under Section 30 of the Kenya Data Protection Act 2019, we are required to obtain your freely given, specific, informed, and unambiguous consent before processing your personal data. We obtain this consent when you submit the registration form on our website.
By completing and submitting the sign-up form, you consent to:
- To Christ 4 Christ storing your name, email, and location
- Your name appearing in your personal progress tracker on this website
- Receiving a welcome email and periodic discipleship updates at the email address you provide
- Your data being processed by our third-party service providers (Netlify and EmailJS) as described in Section 6
Withdrawing consent: You have the right to withdraw consent at any time. To do so, email us at hello@tochristforchrist.org with the subject line "Withdraw Consent". We will process your request within 7 business days and confirm deletion of your data.
Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
Section 06
Third-Party Processors
We use a small number of carefully chosen third-party service providers ("Data Processors") to operate this website. These processors act only on our instructions and are contractually bound to protect your data. We do not sell data to or share data with any other parties.
Netlify, Inc.
Hosts this website and receives form submissions when you register.
🌍 United States · GDPR-compliant · Privacy Policy
EmailJS
Sends the welcome email to you when you register. Your email address is transmitted through their service.
🌍 United States · GDPR-compliant · Privacy Policy
Google Fonts
Delivers the fonts used on this website. Your IP address may be logged by Google when fonts are loaded.
🌍 United States · Privacy Policy
Anthropic, PBC
Powers AI moderation of Prayer Wall submissions. Your prayer text is sent to the API for review before appearing publicly. No identifying data is retained by Anthropic.
🌍 United States · Privacy Policy
We require all processors to implement appropriate technical and organisational security measures. We do not permit them to use your data for their own purposes.
Section 07
International Data Transfers
Our service providers (Netlify, EmailJS, Google, and Anthropic) are based in the United States of America. When you submit your personal data through our website, it is transferred outside Kenya to servers located in the United States.
Under Section 48 of the Kenya Data Protection Act 2019, we may transfer personal data outside Kenya where the recipient country provides an adequate level of data protection. All our processors maintain compliance with the EU General Data Protection Regulation (GDPR), which provides a standard of protection comparable to the DPA 2019.
By using our website and submitting your information, you expressly consent to this international transfer as described.
Section 08
Data Retention
We retain your personal data only as long as is necessary for the purpose for which it was collected, as required by Section 39 of the DPA 2019.
| Data | Retention Period |
|---|---|
| Registration data (name, email, location) | Until you request deletion, or 3 years of inactivity |
| Lesson progress (stored in your browser) | Until you clear your browser storage or request reset |
| Prayer Wall submissions | Until you request removal, or 2 years |
| Email correspondence | 2 years from last contact |
| Netlify form submission logs | Governed by Netlify's retention policy (30 days on free plan) |
When data is no longer required, we will securely delete or anonymise it.
Section 09
Children's Privacy
This website is intended for persons aged 18 years and older. We do not knowingly collect personal data from children under 18. Under the Kenya Data Protection Act 2019 and the Children Act (Cap. 141), processing the personal data of a child requires the consent of a parent or legal guardian.
If you are a parent or guardian and believe your child has submitted personal information to us without your consent, please contact us immediately at hello@tochristforchrist.org and we will delete that information promptly.
Section 10
Prayer Wall — Special Notice
Our Prayer Wall is a publicly visible feature of the website. When you submit a prayer request, that request — along with the name you provide — will be visible to all visitors of the site.
Please be aware of the following before submitting:
- All Prayer Wall submissions are reviewed by our AI moderation system before appearing publicly.
- You may choose to post anonymously — your name will then appear as "Anonymous".
- Do not include sensitive personal information (such as specific medical details, financial information, or contact numbers) in your prayer request.
- By submitting, you consent to your request being displayed publicly on this website.
- To request removal of your prayer, email us at hello@tochristforchrist.org.
Section 11
Your Rights Under the DPA 2019
The Kenya Data Protection Act 2019 grants you the following rights in relation to your personal data. We are committed to honouring these rights within the timelines required by law.
-
Right of Access (Section 26(a)): You may request a copy of all personal data we hold about you at any time. We will respond within 21 days.
-
Right to Rectification (Section 26(b)): If any data we hold about you is inaccurate or incomplete, you may request that we correct it.
-
Right to Erasure (Section 26(c)): You may request that we permanently delete all personal data we hold about you. We will confirm deletion within 7 business days.
-
Right to Object (Section 26(d)): You may object to processing of your data for any purpose, including receiving emails from us.
-
Right to Data Portability (Section 26(e)): You may request your data in a portable, machine-readable format (e.g. CSV) so you can transfer it to another service.
-
Right to Withdraw Consent (Section 30(3)): You may withdraw consent for any processing at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at hello@tochristforchrist.org with the subject line "Data Rights Request". You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke if you believe we have not handled your data lawfully.
Section 12
Security of Your Data
We take the security of your personal data seriously. We implement the following measures in line with Section 41 of the DPA 2019:
- HTTPS encryption — all data transmitted between your browser and our website is encrypted using TLS.
- Password protection — our admin panel is protected by a password.
- Local storage — your lesson progress is stored only in your own browser and is never transmitted to our servers.
- Trusted processors only — we use only established, reputable service providers with their own robust security programmes.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ODPC within 72 hours of becoming aware of it, and will notify you directly if the breach poses a high risk to you.
Section 13
Cookies & Browser Storage
This website uses localStorage (a browser technology similar to cookies) to remember your sign-up details and lesson progress locally on your device. This data never leaves your browser unless you explicitly submit a form.
| Storage Key | What It Stores | Expires |
|---|---|---|
| tc4c_user | Your first name, email, and location from sign-up | Until browser storage is cleared |
| tc4c_completed | IDs of lessons you have marked complete | Until browser storage is cleared |
| prayed_ids | IDs of prayer requests you have prayed for | Until browser storage is cleared |
Google Fonts may set a session cookie to serve fonts efficiently. We do not use any advertising, tracking, or analytics cookies. You can clear all browser storage at any time through your browser settings.
Section 14
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users by email.
We encourage you to review this page periodically. Your continued use of the website after any changes constitutes acceptance of the updated policy.
Section 15
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to make a complaint, please contact us using the details below. We aim to respond to all data-related enquiries within 5 business days.