Church CRM
Sign in Create your church account

Policies

Data protection information

The controls Church CRM provides to help churches handle personal information responsibly.

Churches in Uganda handling personal information should consider their obligations under the Data Protection and Privacy Act, 2019 and its regulations. Church CRM provides technical controls to support that work. Having these features does not by itself make a church compliant, and Church CRM makes no claim of certification.

Controls in the platform

  • Separation between churches: every record belongs to one church and is checked on the server on every request.
  • Role-based access: staff see only what their role allows; pastoral notes, children's details and individual giving need specific permissions.
  • Minimal collection: most member fields are optional. Record only what the church needs.
  • Consent for messages: SMS goes only to people recorded as consenting, never to opted-out numbers.
  • Audit log: sign-ins, permission changes, exports, financial reversals and views of pastoral cases are recorded.
  • Correction and archiving: records can be corrected, archived and restored; history is kept.
  • Retention settings: churches can set how long message contents and follow-up notes are kept.
  • Export: authorised staff can export the church's records to CSV through private, short-lived download links.

Exporting your records

Staff with export permission open Reports or the relevant list and choose Export. Large exports are prepared in the background and appear under Reports › Exports for a limited time.

Closing a church account

  1. Export the records you want to keep.
  2. The church owner sends a closure request from Help & support, choosing "Account closure".
  3. We confirm the request with the church owner and close the account. Staff can no longer sign in.
  4. Records are then erased after the retention period stated in our reply, except where we must keep payment records for accounting.

Requests about an individual

A person asking to see, correct or delete their information should contact their church, which can correct or archive the record. Members who wish to have their record erased entirely can be anonymised by the church administrator where no legal or financial reason requires the record to be kept.

Security incidents

If we become aware of a security incident affecting a church's records we will investigate, contain it, record it, and notify the affected church without undue delay so it can meet any obligations it has to inform people or the regulator. Report a suspected incident through contact and support.