Privacy Notice
Every Nation Stellenbosch
1. Introduction
Every Nation Stellenbosch (“we”, “us”, “our”) is a religious organisation committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).
This Privacy Notice explains how we collect, use, store, and protect your personal information when you engage with our church.
2. Responsible Party
Church Name: Every Nation Stellenbosch
Information Officer: Mark Ryan Griffiths
Physical Address: Unit 1, Devon Valley Rd, Devon Valley, Stellenbosch 7600
Email Address: info@enstb.co.za
Contact Number: 021 882 9007
Information Officer: Mark Griffiths
3. Categories of Personal Information We Collect
We may collect and process the following personal information:
- Identification information (name, surname, ID/passport number where required)
- Contact details (email address, phone number, physical address)
- Demographic information (date of birth, marital status, family details)
- Membership and attendance records
- Donation and financial information
- Volunteer and ministry involvement information
- Communication records (including messaging platforms)
- Audio-visual material (photos, videos, and recordings from church activities)
4. Special Personal Information
As a religious organisation, ENSTB may process special personal information as defined under POPIA.
This may include:
- Religious beliefs
- Prayer requests
- Pastoral care or counselling information
- Children’s personal information
In terms of POPIA, the processing of special personal information is generally prohibited unless specific conditions are met.
We process such information only where permitted under POPIA, including where:
- The processing is carried out in the course of our legitimate religious activities;
- The information relates to members, former members, or individuals in regular contact with the church; and
- The information is not disclosed outside the church without consent, unless required by law
Where required, we obtain explicit consent, particularly for:
- Sharing prayer requests beyond church leadership
- Processing children’s personal information
- Any disclosure outside the church community
We apply additional safeguards to ensure that special personal information is:
- Processed confidentially and in a secure manner
- Limited to what is necessary for the intended purpose
- Protected against unauthorised access or disclosure
5. Purpose of Processing
We process personal information for the following purposes:
- Managing church membership and participation
- Facilitating church services, ministries, and events
- Communicating with members and attendees
- Providing pastoral care and spiritual support
- Coordinating volunteer and ministry involvement
- Administering donations and financial records
- Ensuring the safety and well-being of individuals participating in church activities
- Complying with legal and regulatory obligations
6. Justification for Processing Personal Information
We process personal information in accordance with POPIA based on one or more of the following justifications.
Additional conditions apply to the processing of special personal information as set out in Section 4.
6.1 Consent
We process personal information where you have provided voluntary, specific, and informed consent, including for:
- Participation in messaging groups or communication platforms
- Receiving non-essential communications or newsletters
- Use of photographs, videos, or recordings
- Sharing personal information beyond the church community
You may withdraw your consent at any time, subject to legal or operational limitations.
6.2 Legitimate Activities of a Religious Organisation
We process personal information where it is necessary for our legitimate religious activities in accordance with POPIA.
This applies to individuals who are members, former members, or who have regular contact with the church.
Such activities include:
- Maintaining membership and attendance records
- Organising services, ministries, and events
- Providing pastoral care
- Communicating with members and regular attendees
- Managing volunteer participation
6.3 Legal Obligations
We may process personal information where necessary to comply with applicable laws, including financial, tax, and regulatory requirements.
6.4 Legitimate Interests
We may process personal information where it is necessary for the legitimate interests of the church, provided such processing does not override your rights and freedoms.
7. Processing of Children’s Personal Information
ENSTB recognises that children’s personal information requires enhanced protection under POPIA.
We collect and process personal information relating to children under the age of 18 only where:
- Consent has been obtained from a parent or legal guardian; or
- Processing is otherwise permitted by law
Children’s personal information may include:
- Identification and contact details
- Participation in church activities (e.g., children’s ministry, youth groups, camps)
- Emergency contact and medical information
- Photographs, videos, or recordings
We take additional care to ensure that:
- Only necessary information is collected
- Appropriate safeguards are implemented
- Information is not shared externally without parental or guardian consent
Parents or guardians may request access to, correction of, or deletion of their child’s personal information, or withdraw consent at any time.
8. Sharing of Personal Information
We may share personal information with:
- Church leadership and authorised personnel
- Trusted service providers who support our operations
- Regulatory or governmental authorities where required by law
We do not sell personal information.
9. Cross-Border Transfers
Where personal information is transferred outside South Africa (e.g., through cloud-based service providers), we will ensure that:
- The recipient is subject to adequate data protection laws; or
- Appropriate safeguards are in place; or
- You have provided consent
10. Information Security
We implement appropriate technical and organisational measures to protect personal information against:
- Loss or damage
- Unauthorised access
- Unlawful processing
11. Retention of Personal Information
We retain personal information only for as long as necessary to:
- Fulfil the purposes outlined in this notice
- Comply with legal, regulatory, or operational requirements
12. Your Rights (Data Subject Rights)
Under POPIA, you have the right to:
- Access your personal information
- Request correction or deletion
- Object to processing
- Withdraw consent (where applicable)
- Lodge a complaint with the Information Regulator
Requests may be directed to the Information Officer.
13. Complaints to the Information Regulator
Website: https://www.justice.gov.za/inforeg/
Email: complaints.IR@justice.gov.za
14. Updates to This Privacy Notice
We may update this Privacy Notice from time to time. The latest version will be made available by the church.
15. Contact Details
For questions or concerns regarding this Privacy Notice or your personal information, please contact:
Deputy Information Officer: Esri Kotze
Email: esri@enstb.co.za
Phone: 082 879 7002
16. PAIA Manual
Our Promotion of Access to Information Act (PAIA) Manual is available upon request or via (insert link), and explains how you may request access to records held by Every Nation Stellenosch.