1. Introduction
Karen Community Seventh-day Adventist Church (“Karen Community SDA Church,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of our members, visitors, and camp meeting attendees. This Privacy Policy explains how we collect, use, store, and protect personal data through:
- ChurchConnect— our church management platform used for membership records, ministry coordination, and church administration.
- Camp Meeting— registration, scheduling, and participation in our annual Camp Meeting programme, including Camp Meeting 2026 “Believe and Live.”
This Policy is issued in compliance with the Kenya Data Protection Act, 2019 (“the Act”) and its subsidiary regulations. By using ChurchConnect or registering for Camp Meeting, you consent to the practices described in this Policy.
2. Data Controller
Karen Community Seventh-day Adventist Church is the data controller responsible for personal data collected through ChurchConnect and Camp Meeting.
- Church name: Karen Community Seventh-day Adventist Church
- Address: P.O Box 15973 - 00502 Karen, Nairobi Kenya
- Email: info@sdackc.org
- Phone: + 254 748 826 726
3. Personal Data We Collect
3.1 ChurchConnect
- Identity data: full name, date of birth, gender, national ID number (where required for membership records)
- Contact data: phone number, email address, physical/postal address
- Membership data: baptismal date, membership status, local church affiliation, ministry involvement, spiritual gifts, leadership roles
- Account data: username, hashed password, login history, JWT-based authentication tokens
- Attendance data: service attendance, event participation, small group involvement
- Stewardship data: tithe and offering records (where recorded through the platform), giving history
- Communication data: messages, prayer requests, announcements
- Family data: household/family unit linkages for pastoral care purposes
3.2 Camp Meeting Registration
- Identity and contact data: full name, phone number, email address, home church/congregation
- Registration data: age category, accommodation preferences, arrival/departure dates, track/session selections
- Special category data (collected only with explicit consent): dietary restrictions, health conditions or allergies relevant to on-site care, disability or mobility accommodations
- Minors’ data: name, age, and guardian contact information for attendees under 18
- Payment data: camp fee payment records (e.g., M-Pesa transaction reference, amount, status). We do not store card details or M-Pesa PINs.
- Photographs/video: images or recordings taken during camp sessions (opt-out available — see Section 8)
4. How We Collect Data
- Directly from you when registering on ChurchConnect or Camp Meeting, filling out forms, or communicating with church administration
- Automatically through your use of ChurchConnect (e.g., login activity, session cookies)
- From parents/guardians on behalf of minors
- From church elders, department leaders, or pastoral staff recording membership and attendance information
5. Lawful Basis and Purpose of Processing
| Purpose | Lawful Basis |
|---|---|
| Managing membership records and pastoral care | Legitimate interest / consent |
| Administering Camp Meeting registration and logistics | Contract performance / consent |
| Sending service updates, event reminders, announcements | Consent |
| Recording attendance and stewardship for church administration | Legitimate interest |
| Ensuring safety and duty of care for minors at Camp Meeting | Consent (parental/guardian) |
| Complying with legal or regulatory obligations | Legal obligation |
6. How We Use Your Data
- Maintain accurate membership and attendance records
- Coordinate ministry activities, small groups, and volunteer scheduling
- Register and organize attendees for Camp Meeting tracks and accommodation
- Communicate service updates, camp schedules, and church announcements
- Provide pastoral care and follow-up, including for voluntarily disclosed health or welfare needs
- Process stewardship (tithe/offering) records for church financial administration
- Ensure the safety and wellbeing of minors during Camp Meeting
- Improve our platform and event planning through aggregated, anonymized data
We do not sell, rent, or trade personal data to third parties for marketing purposes.
8. Photographs and Recordings
Camp Meeting sessions may be photographed, filmed, or live-streamed for ministry documentation, church archives, and promotional use. If you do not wish to be photographed or featured, please notify camp registration staff in advance, and we will make reasonable efforts to accommodate your request.
9. Data Retention
- Membership records: retained for the duration of active membership and a reasonable period thereafter
- Camp Meeting registration data: retained for the duration of the event and up to 12 months afterward, unless a longer period is required
- Payment records: retained as required for financial audit and reporting
- Photographs/recordings: may be retained indefinitely as archival records, subject to opt-out
10. Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- Be informed of the use of your personal data
- Access your personal data held by us
- Request correction of inaccurate or outdated data
- Request deletion of your personal data, subject to legal or legitimate retention requirements
- Object to or restrict processing of your data
- Withdraw consent at any time
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya
To exercise any of these rights, contact us at info@sdackc.org.
11. Data Security
- Encrypted authentication (JWT-based session management) on ChurchConnect
- Access controls limiting data visibility to authorized personnel
- Secure hosting infrastructure with regular security updates
- Cookie management practices designed to protect session integrity
No system is completely secure, and we cannot guarantee absolute security.
12. Children’s Data
Camp Meeting and certain ChurchConnect features may involve minors (under 18 years). We only collect data relating to minors with the consent of a parent or legal guardian, used solely for registration, safety, and pastoral care purposes.
14. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this Policy will indicate the most recent revision. Continued use after changes constitutes acceptance of the updated Policy.
15. Contact Us
Karen Community Seventh-day Adventist Church
Email: info@sdackc.org
Phone: + 254 748 826 726
Address: P.O Box 15973 - 00502 Karen, Nairobi Kenya
Mukoma Road, off Magadi Rd
You may also contact the Office of the Data Protection Commissioner, Kenya at www.odpc.go.ke for independent guidance.