Privacy Policy

Effective Date: 22 September 2025
Lighthouse (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you interact with us, whether through our website, services, or activities.

1. Who We Are
Website Name: Lighthouse
Business/Organization Name: Lighthouse
Nature of Organization: Church and faith-based community
Email Address: admin@inss.co.za
Address: 7A Beethoven St, SW5 Vanderbjilpark, 1911, Gauteng, South Africa
We act as the Data Controller for your personal data under the General Data Protection Regulation (GDPR).

2. What Personal Data We Collect
We may collect and process the following types of personal data:
Contact Information: Name, email address, phone number, and postal address.
Spiritual or Community Engagement Information: Information you provide when signing up for church events, prayer requests, or volunteering.
Communication Data: Emails, messages, or inquiries you send to us.
Technical Data: IP address, browser type, device information, and cookies when you use our website.
Donation Information: If you make donations, limited payment-related data (processed securely through third-party providers; we do not store full payment details).

3. How We Use Your Personal Data
We use your personal data for the following purposes:
To provide church services, community updates, and ministry-related communications.
To respond to your inquiries and prayer requests.
To process donations and maintain financial records as required by law.
To manage volunteers, events, and church activities.
To improve our website and online experience.
To comply with legal obligations.

4. Lawful Basis for Processing
Under GDPR, we rely on the following lawful bases for processing your data:
Consent: When you sign up for newsletters, events, or provide prayer requests.
Contract: When we provide a service you have requested.
Legal Obligation: For compliance with tax, financial, or regulatory requirements.
Legitimate Interests: For church administration, communication with members, and improvement of our services.

5. How We Share Your Data
We respect your confidentiality. We do not sell or rent your data. However, we may share your information with:
Service Providers: Third-party vendors who help us with website hosting, communication tools, or payment processing (bound by data protection agreements).
Legal Authorities: If required by law, court order, or to protect the rights and safety of our church and community.

6. Data Storage and Security
Your personal data is stored securely and only accessible by authorized church staff or trusted partners.
We implement appropriate technical and organizational measures to protect data from unauthorized access, alteration, disclosure, or destruction.
Data may be stored in South Africa and, where necessary, in the European Union or other jurisdictions that meet GDPR standards.

7. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Once no longer needed, data will be securely deleted or anonymized.

8. Your Data Protection Rights
Under GDPR, you have the following rights:
Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Correct any inaccurate or incomplete information.
Right to Erasure: Request deletion of your personal data, subject to legal obligations.
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Request transfer of your data to another organization.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw consent at any time for processing based on consent.
To exercise your rights, please contact us at admin@inss.co.za.

9. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to:
Improve website functionality and user experience.
Analyze traffic and performance.
Remember your preferences.
You may control cookies through your browser settings. For more details, see our Cookie Policy (if applicable).

10. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as standard contractual clauses or equivalent measures, are in place to protect your data.

11. Children’s Privacy
We are committed to protecting children’s privacy. We do not knowingly collect personal data from children under 13 without parental or guardian consent.

12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised effective date.

13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us at:
Lighthouse
7A Beethoven St, SW5 Vanderbjilpark, 1911
Gauteng, South Africa
Email: admin@inss.co.za