Privacy Policy

Who We Are

Ekklesia Foundation is a Christian charity based in Exmouth, Devon, United Kingdom. We are in the process of registering with the Charity Commission for England and Wales.

For the purposes of UK GDPR, Ekklesia Foundation is the data controller responsible for your personal data.

What Personal Data We Collect

We collect only the data necessary to fulfil the purpose for which you have provided it. Depending on the form you complete, this may include:

• Full name — to address you personally in communications
• Email address — to send you updates and information you have requested
• Phone number — optional, to contact you about events or prayer slots
• Church name — optional, to understand which churches are engaging with our events
• Area of interest — optional, to tailor communications to what is most relevant to you

We do not collect sensitive personal data (such as health information, financial data, or government identifiers) through our website forms.

How We Collect Your Data

We collect personal data directly from you when you:

• Register your interest in the 24/7 Prayer Week via our website form
• Join the Ekklesia Foundation waitlist via our website form
• Contact us directly by email

We do not collect data indirectly from third parties, nor do we purchase data lists.

Why We Process Your Data and Our Legal Basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Consent

When you submit a form on our website, you are giving us your explicit consent to contact you about the specific initiative you signed up for (the 24/7 Prayer Week or Ekklesia Foundation updates). You may withdraw your consent at any time by contacting us at info@ekklesiafoundation.com or by clicking the unsubscribe link in any email we send.

Legitimate Interests

We may process your data where it is in our legitimate interests as a Christian charity to communicate with individuals who have expressed interest in our work, provided this does not override your rights and interests.

We will only use your data for the purpose for which you provided it. We will never use your data for unrelated purposes without first seeking your consent.

How We Use Your Data

We use your personal data to:

• Send you updates about the 24/7 Prayer Week in Exmouth, including dates, venue, and prayer slot information
• Send you news and updates about the launch and activities of Ekklesia Foundation
• Respond to any enquiries you send to us
• Improve our communications and understand which initiatives are of most interest

We will never sell, rent, or share your personal data with third parties for their own marketing purposes.

Third Parties and Data Processors

To operate our website and communications, we use the following trusted third-party services. Each acts as a data processor on our behalf and is bound by a Data Processing Agreement:

• Netlify — website hosting and form submission collection (USA, SCCs in place)
• Zapier — automated data transfer between services (USA, SCCs in place)
• Airtable — secure contact database (USA, SCCs in place)
• Mailchimp (Intuit) — email communications (USA, SCCs in place)
• Plausible Analytics — cookieless website analytics (EU-based, no personal data collected)
• Meta Platforms (Facebook/Instagram) — advertising and conversion tracking, only with your cookie consent (USA, SCCs in place)

All US-based processors operate under Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office, ensuring lawful international data transfer under UK GDPR.

We do not share your data with any other third parties without your explicit consent.

How Long We Keep Your Data

We will retain your personal data only for as long as necessary to fulfil the purpose for which it was collected:

• Prayer Week registrations — retained for 12 months after the event, then securely deleted unless you have opted into ongoing Ekklesia Foundation communications
• Ekklesia Foundation waitlist — retained until you unsubscribe or request deletion
• Email enquiries — retained for 2 years, then deleted

You may request deletion of your data at any time — see Your Rights below.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data ("right to be forgotten")
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to us processing your data based on legitimate interests
• Right to withdraw consent — you can withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@ekklesiafoundation.com. We will respond within 30 days.

Cookies

We use cookies to understand how visitors find and use our website, and to improve the effectiveness of our advertising. We ask for your consent before setting any non-essential cookies.

Strictly Necessary Cookies

These are set by Netlify, our hosting provider, and are essential for the website to function. They do not require consent.

Analytics — Plausible Analytics

We use Plausible Analytics to understand how many people visit our site and where they come from. Plausible is cookieless and privacy-first — it does not track individuals, does not use cookies, and does not require consent under UK GDPR. No personal data is collected or shared.

Marketing Cookies — Meta (Facebook) Pixel

With your consent, we use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. This cookie allows Meta to show our ads to people who have visited our site, and to build audiences of people likely to be interested in our events. This cookie is only set after you click "Accept Cookies" on our cookie banner. You may withdraw consent at any time by clearing your browser cookies or contacting us.

Meta is a US-based company and operates under Standard Contractual Clauses for UK data transfers.

Managing Your Cookie Preferences

When you first visit our site, a cookie banner will appear. You may accept or decline non-essential cookies. Your preference is stored in your browser. To change your preference, clear your browser's local storage and revisit the site.

Data Security

We take the security of your personal data seriously. All data is transmitted over encrypted HTTPS connections. Our third-party processors maintain their own security measures, including encryption at rest and in transit.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

ICO Registration

Ekklesia Foundation is in the process of registering with the Information Commissioner's Office (ICO) as required by the Data Protection Act 2018. Our registration number will be published here once confirmed.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the ICO:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: