Privacy Policy
We are committed to protecting your personal information and respecting your privacy. This policy explains how we collect, use, and safeguard your data across all our platforms.
Introduction & Scope
This Privacy Policy applies to all activities of Mind of Christ Light (MoCL), including our website, donations (Squarespace and Stripe), email communication (MailerLite), publishing platforms (Amazon KDP), and cloud services (Google Workspace, Notion).
We comply with the UK Data Protection Act 2018 and the UK GDPR, and follow equivalent global standards where applicable.
2. Data We Collect
Contact information (name, email, phone) when you sign up, subscribe, or contact us.
Donation details (amount, payment reference, method) via Squarespace/Stripe.
Website analytics (cookies, browsing behaviour).
Technical information (IP address, device, browser type).
Publishing-related details if you join volunteer/translation teams.
3. How We Use Data
Why We Use Your Data
The purpose is to communicate ministry updates, process donations, publish and distribute resources, ensure website security, and meet legal obligations.
Lawful Basis
Consent (newsletter subscriptions, cookies).
Contract (fulfilling donation transactions).
Legal obligation (accounting, tax reporting).
Legitimate interests (ensuring security, preventing fraud).
4. Sharing Data with Service Providers
Google Workspace → emails, file storage.
Squarespace → website hosting & donation processing.
Stripe → payment processing (card details encrypted).
MailerLite → mailing list management & newsletters.
Amazon KDP → royalties & publishing tools.
Wise Business → donation payouts, financial record-keeping.
(Note: “We never sell your data to third parties.”)
5. International Data Transfers
Some service providers (e.g. Amazon, MailerLite, Google, Stripe) may store or process data outside the UK/EU. We ensure appropriate safeguards (e.g. Standard Contractual Clauses, EU–US Data Privacy Framework) are in place for lawful transfers.
6. Data Retention & Security
We retain personal data only as long as necessary for the purpose collected — typically up to 7 years for financial records (per UK HMRC), and shorter periods for other data unless required by law.
We use secure servers, encryption, and role-based access to protect your information.
7. Your Rights Under GDPR
Right of access (request a copy of your data).
Right to rectification (correct inaccurate data).
Right to erasure (“right to be forgotten”).
Right to restrict processing.
Right to data portability.
Right to object to processing.
Right to withdraw consent (unsubscribe at any time).
Right to lodge a complaint with the UK ICO (Information Commissioner’s Office).
Questions or Privacy Requests?
For data requests or privacy concerns, contact us at privacy@mindofchristlight.com. We aim to respond within 30 days in line with GDPR.