Privacy Policy

Who We Are

Christ Church Sierra Madre is the business responsible for the personal information collected through this website.

Data Controller: Christ Church Sierra Madre
Email: info@christchurchsm.org
Address: 170 W Sierra Madre Blvd, Sierra Madre, CA 91024

What Data We Collect

We collect the following types of personal information when you use our website:

Contact form information: name, email address, and the content of your message when you contact us through the website.
Cookie consent preferences: your choices about cookies and similar technologies (recorded through our consent management system).
Device and connection information: IP address, browser type, and similar technical information needed for the website to function and to help protect the site.
Website usage information (analytics): information about how visitors use our website, collected through analytics technologies when you allow analytics cookies.

Sources of personal information:

Directly from you when you submit a message through our contact form.
Automatically from your device and browser when you access the website (for example, IP address and browser type).
From cookies and similar technologies when you make cookie choices, and for non-essential cookies only when you provide consent.

Providing contact form information is optional, but if you choose not to provide it, we will not be able to respond to your inquiry through the contact form. Device and connection information is collected as part of providing access to the website. Analytics information is collected only when you allow analytics cookies.

How We Use Your Data

We use your personal information for the following purposes:

To respond to your messages and inquiries submitted through the contact form (legal basis: contract).
To provide and maintain access to the website and its core informational content about worship services, sermons and teaching, ministries, small groups, events, and volunteer serving opportunities (legal basis: contract).
To measure and understand how visitors use our website using analytics technologies (legal basis: consent).
To protect the website and our visitors by detecting, preventing, and responding to security threats and abuse, including through security monitoring and technical logs (legal basis: legitimate interest).

Who We Share Your Data With

We share personal information only as needed to operate the website and provide the services described in this policy.

Google Analytics (Google): We use Google Analytics to help us understand how visitors use our website. When you allow analytics cookies, certain usage and device information is processed by Google to provide analytics reports and insights. Google processes this information under its own privacy policy.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of our service providers are located outside the primary processing jurisdiction, specifically in the United States.

Google Analytics: Google LLC (United States). Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Contact form submissions and church records are retained only as long as necessary to respond to inquiries, coordinate ministry activities, and provide services, consistent with applicable recordkeeping requirements.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.
Analytics data: until consent is withdrawn or according to the analytics tool retention settings.

Your Rights

If you are a California consumer, you have the rights described in the California Privacy Rights (CCPA/CPRA) section below, including the right to know, delete, correct, and opt out of the sale or sharing of personal information, and the right to limit certain uses of sensitive personal information.

To exercise your rights, contact us at info@christchurchsm.org. We may need to verify your identity before completing your request. We will respond within the time required by applicable law, including within 45 days for CCPA/CPRA requests (with the ability to extend by an additional 45 days when permitted and with notice).

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions to reduce risk.

Data Breach Notification

We maintain procedures to detect, report, and investigate security incidents. If we become aware of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach, the likely consequences, and the measures taken or proposed to address it. If you suspect a security issue, please contact us at info@christchurchsm.org.

How to Lodge a Complaint

We encourage you to contact us first so we can try to resolve your concern.

California consumers may also submit a complaint to the California Privacy Protection Agency (CPPA) or the California Attorney General. CPPA information is available at https://cppa.ca.gov/.

If you are located outside California, you may have the right to lodge a complaint with the competent authority in your jurisdiction.

Updates to This Policy

We review and update this policy periodically. The “Last updated” date at the top of this policy indicates when changes were last made. If we make significant changes, we will provide notice by posting an update on the website and, where appropriate, by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: info@christchurchsm.org
Address: 170 W Sierra Madre Blvd, Sierra Madre, CA 91024
Data Controller: Christ Church Sierra Madre

California Privacy Rights (CCPA/CPRA)

This section applies to California consumers and describes our practices and your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

Notice at Collection (categories collected in the last 12 months):

Identifiers: such as name and email address (when you submit the contact form), and online identifiers such as IP address.
Internet or other electronic network activity information: such as information about how you interact with our website when you allow analytics cookies.
Inferences: we do not use personal information to create profiles about you for decisions that produce legal or similarly significant effects, but analytics may generate aggregated statistics about website usage.

Business or commercial purposes for collecting personal information:

To provide and maintain the website and its informational content about worship services, sermons and teaching, ministries, small groups, events, and volunteer serving opportunities.
To respond to messages and inquiries submitted through the contact form.
To help keep the website secure and prevent misuse.
To understand website usage and improve the website through analytics, when you allow analytics cookies.

Sale or sharing of personal information:

We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

Your CCPA/CPRA rights:

Right to know: You can request information about the personal information we collected about you, including the categories of personal information, the categories of sources, the purposes for collecting it, and the categories of third parties we disclose it to.
Right to delete: You can request that we delete personal information we collected from you, subject to exceptions allowed by law.
Right to correct: You can request that we correct inaccurate personal information we maintain about you.
Right to opt out of sale or sharing: You can opt out of the sale or sharing of your personal information by using a “Do Not Sell or Share My Personal Information” request. Because we do not sell or share personal information for cross-context behavioral advertising, this right is provided for completeness and future changes in our practices.
Right to limit the use and disclosure of sensitive personal information: You can request limits on certain uses and disclosures of sensitive personal information. We do not collect special categories of data through this website as described in this policy.
Right to non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

How to submit a request:

Email us at info@christchurchsm.org and describe your request. If you submit a request on behalf of another person, we may require proof of authorization and verification of identity.

Verification process:

To protect your information, we will take reasonable steps to verify your identity before responding to certain requests. The information we ask for will depend on the nature of the request and the sensitivity of the information involved.

Response timing:

We will respond to verifiable consumer requests within 45 days. If we need more time, we may extend the response period by an additional 45 days and will notify you of the reason for the extension.

Global Privacy Control (GPC):

We honor Global Privacy Control (GPC) signals as valid opt-out requests for sale or sharing of personal information.