Privacy Policy

Article 1 (Personal Information Collected and Methods of Collection)

The Church collects only the minimum personal information necessary to carry out its ministries and provide its services, as set out below.

In the course of using the website, information such as IP addresses, access logs, and cookies may be generated and collected automatically. As a matter of principle, the Church does not collect sensitive information (such as ideology, beliefs, or health information); where such collection is unavoidable, prior consent is obtained.

Article 2 (Purposes of Collection and Use of Personal Information)

Personal information collected is used solely for the following purposes.

1. Ministry and event operations: Providing guidance on, and administering participation in, worship services, small groups, education, retreats, and other ministries
2. New member and congregational care: Supporting new members as they settle in, connecting them with small groups, and providing visitation and pastoral care
3. Offering and donation administration: Receiving offerings, issuing receipts, and processing annual donation receipts
4. Announcements and news: Sharing church news such as the bulletin, notices, and prayer requests
5. Inquiry handling: Responding to inquiries submitted through the website or directly to the Church
6. Fulfillment of legal obligations: Record keeping and reporting as required by applicable laws

Article 3 (Retention and Use Period of Personal Information)

The Church destroys personal information without delay once the purpose of its collection and use has been fulfilled. However, where retention is required by applicable laws, the information is retained for the periods set out below.

Article 4 (Provision of Personal Information to Third Parties)

As a matter of principle, the Church does not provide collected personal information to any external party, except in the following cases.

1. Where the data subject has given prior consent
2. Where required under the provisions of applicable laws, or where requested by an investigative agency for investigative purposes in accordance with the procedures and methods prescribed by law
3. Where the minimum membership-related information is provided to denominational bodies such as the presbytery or the General Assembly (carried out only after prior consent)

Article 5 (Outsourcing of Personal Information Processing)

To ensure the smooth provision of its services, the Church may outsource personal information processing tasks as set out below.

If a service provider is changed or added, notice will be given through this Privacy Policy. Service providers are placed under contractual obligations not to use personal information for any purpose beyond the scope of the outsourced work.

Article 6 (Destruction of Personal Information)

When the retention period has elapsed or the purpose of processing has been fulfilled, the Church destroys personal information without delay by the following methods.

1. Electronic files: Permanently deleted using technical methods that render recovery or restoration impossible.
2. Paper documents: Shredded or incinerated.

Data subjects may request the deletion of their personal information at any time; except where retention is required by law, such requests are processed within 10 business days of the date of the request.

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects (members and visitors) may exercise the following rights with respect to the Church at any time.

1. Request access to their personal information
2. Request correction of any errors
3. Request deletion
4. Request suspension of processing

These rights may be exercised by visiting the church office, by telephone, or by email, and the Church will notify the requester of the outcome within 10 business days of receiving the request.

Data subjects are kindly requested to notify the church office promptly of any changes to the information they have provided.

Article 8 (Automatic Data Collection Devices — Cookies)

1. The Church's website may use cookies to provide better services. A cookie is a small piece of data that a website stores in the user's browser.
2. Users may refuse or delete cookies through their web browser settings. However, refusing cookies may restrict the use of some services.

Article 9 (Technical and Administrative Safeguards)

The Church takes the following measures to keep personal information secure.

1. Technical measures: SSL encryption is applied when personal information is transmitted.
2. Administrative measures: The number of persons handling personal information is kept to a minimum, and those responsible receive data protection training.
3. Access control: Access to personal information processing systems is restricted to personnel who require it for their duties.
4. Physical measures: Documents and storage media containing personal information are kept in secure, locked locations.

Article 10 (Personal Information of Children Under 14)

1. When collecting personal information from children under the age of 14, the Church always obtains the consent of a legal guardian (such as a parent).
2. Where participants under the age of 14 take part in the education department or other programs, the legal guardian's name and contact information must be provided on the application form, and consent is verified.
3. Legal guardians may request access to, correction of, or deletion of the child's personal information, or withdraw their consent.

Article 11 (Personal Information Protection Officer)

The Church has designated a Personal Information Protection Officer, as set out below, to oversee all matters relating to personal information processing and to handle complaints and provide remedies for data subjects.

Should you require further remedies concerning your personal information, you may seek assistance from the following organizations.

Article 12 (Changes to This Privacy Policy)

1. The contents of this Privacy Policy may be added to, deleted, or amended in accordance with changes in applicable laws or church policy.
2. When this Policy is amended, the changes will be announced through the notices section of the website at least 7 days before the effective date. Amendments that materially affect the rights of data subjects will be announced at least 30 days in advance.