Privacy Policy

Effective date: June 19, 2026

Kingdomcity Church Nanyuki (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect when you visit our website, use our online forms, shop, or otherwise interact with us — and how we use, store, and safeguard that information.

1. Who We Are

Kingdomcity Church Nanyuki is a church community located at Nanyuki, Laikipia County, Kenya. For questions about this policy or your personal data, contact us at welcome@kingdomcitychurchnanyuki.org.

2. Information We Collect

Depending on how you interact with our website, we may collect the following types of information:

2.1 Information you provide directly

• Contact form: name, email address, phone number (if provided), and message content.
• Newsletter signup: first name, last name, and email address.
• Shop checkout: name, email, phone number, and order details (items purchased and quantities).
• Event registration or inquiries: any details you choose to share when signing up or contacting us about events.

2.2 Information collected automatically

• Device and browser data: such as IP address, browser type, operating system, and general location (city/region level).
• Usage data: pages visited, time spent on the site, and referring website addresses.
• Cookies and similar technologies: small files stored on your device to help the site function and remember preferences (see Section 7).

2.3 Payment information

When you give online or pay for shop orders, we display M-Pesa Paybill instructions on our website. We do not collect or store your M-Pesa PIN, mobile money passwords, or full payment card details on this website. Payment processing is handled directly by your mobile money provider or bank.

3. How We Use Your Information

We use personal information for legitimate church and ministry purposes, including to:

• Respond to your messages, prayer requests, and pastoral care inquiries.
• Send newsletters, event updates, and church communications you have subscribed to receive.
• Process and fulfil shop orders, including contacting you about collection or delivery.
• Improve our website, content, and user experience.
• Maintain the security and integrity of our website and systems.
• Comply with applicable legal obligations.

4. Legal Basis for Processing

We process personal information in accordance with applicable data protection laws, including the Data Protection Act, 2019 of Kenya. Depending on the context, we rely on one or more of the following:

• Consent — for example, when you subscribe to our newsletter or submit a contact form.
• Legitimate interests — to operate our website, communicate with our community, and administer church activities, where those interests are not overridden by your rights.
• Contractual necessity — to process shop orders you place with us.
• Legal obligation — where we are required to retain or disclose information by law.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information only in these limited circumstances:

• Service providers: trusted third parties who help us operate our website, email communications, or hosting — bound by confidentiality and data protection obligations.
• Legal requirements: when required by law, court order, or to protect the rights, safety, or property of our church, our members, or others.
• With your consent: when you have given explicit permission for a specific disclosure.

6. Data Retention

We keep personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. For example:

• Contact form submissions are retained until your inquiry is resolved, and for a reasonable period thereafter for follow-up.
• Newsletter subscriber data is kept until you unsubscribe or ask us to delete it.
• Shop order records are retained as needed for order fulfilment, accounting, and dispute resolution.

7. Cookies & Similar Technologies

Our website may use cookies and local storage to:

• Remember items in your shopping cart between visits.
• Keep you signed in to secure areas (such as the site admin dashboard).
• Understand how visitors use our site so we can improve content and navigation.

You can control cookies through your browser settings. Disabling cookies may affect certain features, such as the shop cart or embedded video players.

8. Third-Party Services & Links

Our website may include content or links from third parties, including:

• YouTube — for live stream and video embeds (subject to Google’s privacy policy).
• Google Maps — for location and directions on our Contact page.
• Social media platforms — links to our Facebook, Instagram, TikTok, and YouTube profiles.

We are not responsible for the privacy practices of third-party websites or services. We encourage you to review their privacy policies before providing personal information.

9. Data Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Under the Data Protection Act, 2019, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information, subject to legal and legitimate retention needs.
• Object to or restrict certain processing activities.
• Withdraw consent at any time (for example, by unsubscribing from our newsletter).
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

To exercise any of these rights, contact us at welcome@kingdomcitychurchnanyuki.org. We will respond within a reasonable timeframe.

11. Children’s Privacy

Our website is intended for a general audience. We do not knowingly collect personal information from children under 18 without parental or guardian consent. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it promptly.

12. International Transfers

Some of our service providers (such as website hosting or email services) may process data outside Kenya. Where this occurs, we take steps to ensure appropriate safeguards are in place consistent with applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Effective date” at the top of this page will be revised when updates are made. We encourage you to review this page periodically.