Who controls your data
PCEA Enoomatasiani Church is the data controller for personal information submitted through this website. The church is located in Enoomatasiani, Kajiado County, Kenya.
To make a privacy request, use our contact page and include “Data protection request” in the subject line.
Information we collect
Contact messages
We collect your name, email address, optional phone number, subject, and message when you contact the church.
Prayer requests
We collect the prayer item, category, confidentiality choice, and optional contact details. Prayer requests may contain sensitive information about religious beliefs, health, family circumstances, or other private matters.
Security and technical information
When a form is submitted, we may record an IP address, browser user agent, submission time, security verification result, and rate limiting information to protect the site from abuse.
Browser preferences
Theme and privacy choices are stored locally in your browser. See our Cookie Policy for details.
Why we use your information
- To respond to messages and requests you send to the church.
- To provide pastoral care when you submit a prayer request.
- To maintain confidentiality within the pastoral care team.
- To secure forms, prevent spam, and investigate misuse.
- To meet legal, safeguarding, and accountability obligations.
We rely on your request, the church’s legitimate interests in communication and security, legal obligations where applicable, and explicit consent for sensitive information in prayer requests. You may withdraw consent for future use by contacting us, without affecting earlier lawful processing.
The website does not use submitted information for automated decisions, behavioural advertising, or sale to data brokers.
How long we keep information
We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, for safeguarding, or where law requires retention.
- Contact messages are reviewed after the enquiry is resolved and deleted or anonymised when no longer needed.
- Prayer requests are reviewed when pastoral care is complete and deleted or anonymised when continued retention is not needed.
- Security records are retained only for the period reasonably needed to prevent abuse and investigate incidents.
- Privacy choices remain in your browser for up to 180 days unless you clear them sooner.
Your rights
Depending on the law that applies to you, you may request access, correction, deletion, restriction, objection, or portability of your personal information. You may also withdraw consent at any time.
We may need to verify your identity before completing a request. Some rights can be limited where retention or disclosure is required by law, safeguarding, or the rights of another person.
Children’s information
Children should ask a parent or guardian for help before submitting personal information. Safeguarding concerns may require the church to take protective action even where confidentiality was requested.
Contact and complaints
Contact the church first so we can review your concern. You may also complain to Kenya’s Office of the Data Protection Commissioner through odpc.go.ke. If the GDPR applies to you, you may contact the data protection authority in your country.