Privacy Policy

Introduction
Crossroads Church (“Crossroads”) recognises the importance of protecting individuals’ privacy and is committed to handling all personal information with care, integrity, and in accordance with the Privacy Act 2020. This policy explains how we collect, store, use, and share your personal information. By interacting with us, you agree to the terms of this Privacy Policy.

Your Rights
You have the right to access, correct, and request the deletion of the personal information we hold about you. To exercise these rights, please contact us using the details provided in the “Contact and Unsubscribing” section. We will respond to such requests within a reasonable timeframe, usually within 20 working days, where it is lawful and does not infringe on the privacy or safety of others.

What We Collect and Why
We collect personal information from you directly, and in some cases generate it through your interactions with us. We may collect:

  • Your name, age, contact details
  • Event or programme registration information
  • Pastoral care and church involvement details
  • Financial giving records (if applicable)
  • Communication preferences
  • Interactions with our website, apps, and social media platforms

We collect and use this information to:

  • Fulfil our role as a church community
  • Provide pastoral care and support
  • Register you for events, programmes, and ministries
  • Inform you about gatherings, services, and activities
  • Provide tax receipts for donations
  • Comply with legal obligations (e.g. charitable reporting)
  • Ensure the safety of our congregation, especially children and vulnerable individuals
  • Improve the quality and relevance of our services and communications

Sensitive Information
If we collect sensitive personal information (e.g., health-related information for pastoral care purposes), we will treat it with additional care and seek your explicit consent where appropriate.

Consent
Where practical, we will seek your consent to collect and use your personal information. This may be via digital forms, verbal agreement, paper registration, or by implied consent through participation. You may withdraw your consent at any time, subject to legal or contractual restrictions.

Financial Giving and Donations
When you give financially to Crossroads Church, we may collect:

  • Your name and contact information
  • Donation amounts and dates
  • Payment method and relevant transaction references

We use this information to:

  • Issue donation receipts in compliance with New Zealand tax laws
  • Maintain financial transparency and accountability
  • Communicate with you about giving, if consent is given

Giving data is stored securely and only accessible to authorised finance personnel. We use reputable third-party platforms with comparable privacy and security standards.

Children and Young People
We take extra care when collecting information from or about children and young people. Parental or caregiver consent is obtained where necessary for participation in children’s or youth ministries. No identifying images of children will be publicly used without explicit consent.

Use of Photos and Video
We may capture photos or video footage during services and events. These may be used for internal purposes, social media, and promotion. If you do not want your image used, please notify us. We will not publish any content that is knowingly embarrassing, harmful, or objectionable and will remove it on request.
In accordance with our Child Protection Policy, no images or video of identifiable children will be publicly released without caregiver permission.

Security and Data Storage
Your information is securely stored within Microsoft 365 SharePoint Online, with data centres located in Sydney and Melbourne, Australia. We apply appropriate technical and administrative controls to protect it from unauthorised access, loss, or misuse.
We retain your information only for as long as necessary for the purposes for which it was collected, after which it will be securely destroyed or anonymised.

Third-Party Services
We use trusted service providers for event registration, email communications, livestreaming, giving platforms, and digital tools. These third parties have their own privacy protections that meet or exceed New Zealand standards.
If any third-party service providers are based outside of New Zealand (e.g., Microsoft 365 in Australia), we will take appropriate measures to ensure your information is protected in line with New Zealand privacy laws.

Disclosure of Information
We do not sell or share your personal information except:

  • With trusted providers working on our behalf (e.g., email, event tools)
  • If required by law (e.g., New Zealand Police, IRD)
  • To prevent or investigate serious misconduct or harm

Data Breaches
At Crossroads Church, we are committed to keeping your personal information secure. In the unlikely event of a data breach that poses a risk to your privacy or the security of your personal data, we will take immediate steps to mitigate the effects and prevent further breaches.
If a data breach occurs that is likely to result in serious harm to individuals, we will notify the affected individuals within 72 hours, providing:

  • A description of the data breach
  • The type of information involved
  • The steps we are taking to address the breach
  • Any recommendations for actions the affected individuals may take
    We will also notify the relevant authorities, including the Privacy Commissioner, as required by law.
    If you have any concerns or questions regarding a potential data breach, please contact us immediately at [email protected].

Website, Apps, and Cookies
When you visit our website or use church-related apps, we may collect:

  • IP address, device type, browser, and operating system
  • Pages viewed, links clicked, and referring site
  • Usage statistics through tools such as Google Analytics

We may use cookies to personalise your experience. While this data is typically anonymous, it may be linked to your identity if you log in or submit personal details.
You may disable cookies through your browser settings. You can also manage ad preferences using the settings offered by Google or Meta (Facebook/Instagram).

Social Media
Crossroads Church uses platforms such as Facebook, Instagram, and YouTube. When you interact with our content, your activity is governed by the privacy policies of those platforms. Please be mindful of what you post—our social media channels are public.

Changes to This Policy
We may update this Privacy Policy periodically. The most current version will be posted on our website and updates take effect upon posting.

Contact and Unsubscribing
To access or correct your personal information, or to unsubscribe from communications, please contact us:
E [email protected]
Subject Line: “Privacy Officer” or “Unsubscribe”
P +64 027 366 1517
Address: 55 Pukete Road, Saint Andrews, Hamilton, New Zealand 3200