Privacy
Website privacy notice.
This notice explains how Kept by Christ Church handles personal information collected through this website under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA). Effective 12 July 2026.
Responsible party and scope
Kept by Christ Church is the responsible party for the personal information described in this notice. The Information Officer is Armant Goldswain. The temporary privacy email address is armantgold@gmail.com, and the electronic contact address is https://keptbychrist.co.za/contact.
This notice covers the public website, its contact and newsletter forms, and sermon videos opened from the website. It does not replace a separate notice where a ministry, event, membership, pastoral-care, safeguarding, employment, giving, or child-related process collects different or sensitive information.
Information we collect
The general contact form collects your name, email address, optional phone number, preferred response method, message, consent choice, and submission time. The newsletter form collects your first name, surname, email address, consent choice, and submission time.
The website and its hosting provider may process basic technical information such as your IP address, browser and device information, requested pages, timestamps, and security or error logs. For form abuse prevention, the app temporarily stores a one-way hash of the submitting IP address for up to 15 minutes; it does not store the plain IP address in the app rate-limit record.
Purposes and lawful grounds
We use contact-form information to answer your request and keep an appropriate record of the conversation. We use newsletter information only to manage your requested subscription and send church news or teaching. We also process limited technical information to deliver, secure, diagnose, and improve the website and to comply with legal obligations.
Newsletter processing and electronic direct marketing rely on your express consent. Contact handling and website security rely on your request, our legitimate operational interests, and, where applicable, legal obligations. We do not sell personal information or use it for unrelated marketing.
What is required and your choices
Using the website without submitting a form is voluntary. Fields marked required are needed to send the relevant form; a phone number is optional. If you do not provide required contact information, we cannot receive or answer the request. If you do not provide the required newsletter details and consent, we cannot add you to the mailing list.
You may withdraw newsletter consent at any time by using the unsubscribe link in an email. Withdrawal does not affect processing that was lawful before withdrawal.
Providers and transfers outside South Africa
Vercel hosts and delivers the website. Resend provides SMTP delivery for general enquiries. The enquiry is delivered to the church’s designated recipient inbox. EmailOctopus stores and manages newsletter subscriber details. These providers act as operators or independent service providers for the limited purposes described here.
Some providers or their subprocessors may process information outside South Africa. We use provider terms and safeguards intended to support an adequate level of protection and limit processing to the contracted service, in line with POPIA section 72. Information may also be disclosed where law requires it, or where reasonably necessary to protect rights, safety, or the security of the service.
Cookies, YouTube, and external services
This website does not currently use advertising or analytics cookies. Sermon pages use a privacy-enhanced YouTube facade: no YouTube player is loaded until you choose Play. At that point, content loads from youtube-nocookie.com and Google may receive technical identifiers or set storage according to its own terms.
Links to YouTube, X, and other external websites take you to services with their own privacy practices. The server-side YouTube API request used to find sermon videos does not send visitor form details to YouTube.
Photography and public images
Temporary editorial photography on this website does not depict Kept by Christ Church, its gatherings, or its people.
If the church later publishes identifiable photographs, video, testimonies, prayer needs, or personal stories, it will use an appropriate lawful basis and obtain specific permission where required. A person may contact the Information Officer about an image or request that future consent-based use stop.
Retention
Contact submissions are kept only while needed to respond, manage reasonable follow-up, meet a legal or accountability requirement, or resolve a complaint, and are then securely deleted or de-identified. Newsletter details remain active until you unsubscribe or the list is closed. A minimal suppression or consent record may be retained where reasonably necessary to honour an opt-out or demonstrate compliance.
The in-app rate-limit hash expires after 15 minutes. Hosting, email, and security logs are retained only for the provider’s operational period or as required for security, legal claims, or law. A legal hold, safeguarding issue, dispute, or statutory obligation may require longer retention.
Security and incidents
We use proportionate technical and organisational safeguards, including encrypted connections, server-only credentials, input validation, restricted access, provider access controls, and form abuse limits. No internet service can promise absolute security.
If a security compromise creates a POPIA notification duty, we will notify the Information Regulator and affected people as soon as reasonably possible, subject to lawful delay and the information available.
Your rights
Subject to POPIA and other applicable law, you may ask whether we hold your personal information; request access; ask us to correct, delete, destroy, or restrict information where appropriate; object to qualifying processing; withdraw consent; and object to direct marketing. We may need to verify your identity before acting, and lawful record-preservation duties or another person’s rights may limit a request.
Use the contact page to make a privacy request and describe the information or action concerned. We will respond within a reasonable period and explain any lawful limitation.
Children and sensitive information
The public forms are not designed to collect information from children or to receive detailed religious, health, pastoral, safeguarding, or other special personal information. A parent, guardian, or competent person should assist where a child needs to contact the church.
Do not use the ordinary website forms for an emergency, a safeguarding disclosure, or highly sensitive pastoral details. If someone is in immediate danger or a crime may have occurred, contact the appropriate emergency service or civil authority.
Privacy contact and complaints
For questions, objections, access or correction requests, deletion requests, or a privacy complaint, contact the Information Officer, Armant Goldswain, at armantgold@gmail.com or through https://keptbychrist.co.za/contact. Identify the message as a privacy request.
You may also complain to the Information Regulator (South Africa) through its eServices portal or at POPIAComplaints@inforegulator.org.za. The Regulator lists general enquiries at 010 023 5200 and its office at Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.
Changes to this notice
We will update this notice when the website’s data practices, providers, contact details, or legal obligations materially change. The effective date at the top shows the current published version.