Privacy notice
St. Bernadette's Catholic Church, Kilima · Version 1, in effect since 2026-09-10
This notice explains what this parish holds about you, why, and what you can ask us to do about it.
What we hold, and why
- Member record and sacramental register — A legal obligation
- Health data — Your explicit consent · You can withdraw this at any time
- Photographs — Your explicit consent · You can withdraw this at any time
- Marketing and bulk messaging — Your consent · You can withdraw this at any time
- Giving records — A legal obligation
- Delegated access — Your consent · You can withdraw this at any time
- Advertiser contact person — A contract
Who else handles it
- Delivers email sent by the parish
Where this is handled is not yet recorded
- Runs the website and stores the parish database
Where this is handled is not yet recorded
- Stores photographs, documents and other uploaded files
Where this is handled is not yet recorded
- Processes M-Pesa payments made to the parish
Where this is handled is not yet recorded
- Delivers text messages sent by the parish
Where this is handled is not yet recorded
- Hosts recordings of Mass and other services, outside Kenya
Where this is handled is not yet recorded
How long we keep it
- A closed parish's records — The period is still being advised
Thirty days, excluding registers and audit logs
- Advertiser contact details — The period is still being advised
Contract; held for the commercial relationship, and the statutory period after it is not yet advised
- Beneficiary records — The period is still being advised
Programme life plus the donor's audit period, then reviewed — not the permanent-register basis
- Financial records — The period is still being advised
Legal obligation; the Kenyan statutory period is not yet advised
- Form answers — The period is still being advised
Per form, set when the form is defined
- Health information — The period is still being advised
Only while consent stands — deleted on withdrawal
- Messages sent to you — The period is still being advised
Message content is not needed forever; the period is not yet advised
- Photographs — The period is still being advised
While consent stands
- Sacramental registers — Kept permanently
Canonical and legal records; archiving purposes
- Server logs — The period is still being advised
Short, then discarded
- Unused accounts — The period is still being advised
An account that never became a member; the period is not yet advised
What you can ask us to do
- See what we hold about you
Ask the parish office. You will be given everything the parish holds about you.
- Correct what is wrong
Tell the parish office what is wrong and it will be put right on your record.
- Ask us to delete it
Ask the parish office. Some records — the sacramental registers above all — cannot be deleted, and you will be told which and why.
- Take a copy elsewhere
Ask the parish office for a copy in a form another organisation can read.
Who to write to about your data
This parish has not yet named a data protection contact. Write to the parish office.
Data protection registration
This parish has not yet recorded a registration number with the Office of the Data Protection Commissioner.