Legal document

Privacy Policy

Your privacy is a sacred trust.

Overview

Privacy overview

Our approach to privacy, clarity and responsible information handling

This Privacy Policy explains how New Covenant Hosanna International Church describes the collection, use, sharing and protection of personal information when people interact with our website, ministries, donations and online services. Use the contents below to find a topic and read the complete policy for details.

This overview is a guide to the document. The full Privacy Policy below provides the detailed terms and contact information.

Collection and use

The types of personal information covered by the policy and the purposes for which it may be used.

Sharing and protection

Information about disclosure, security, retention and the handling of personal information.

Your privacy choices

Where to find information about access, correction, complaints and other privacy enquiries.

About this page

This summary introduces the topics covered. Refer to the relevant section below for the complete wording and contact details.

NCHIC · Privacy overview

NCHIC Privacy Policy

Find information about personal information, ministry communications, donations, online services and privacy enquiries. Use the numbered contents to navigate the full policy.

New Covenant Hosanna

International Church

27 Main policy sections

Privacy & information

Key points

Read about information collected through church activities and online services.

Find the sections on sharing, media, cookies and international transfers.

Explore the information on access, correction and privacy complaints.

Review retention, security and contact details in the complete policy.

Last updated: March 2026. Contact the church if you have questions about this policy.

1. Introduction

New Covenant Hosanna International Church (“NCHIC”, “we”, “us”, or “our”) is committed to protecting the privacy and personal information of all individuals who interact with our church, including members, visitors, donors, volunteers, staff, and online users. This Privacy Policy explains in comprehensive detail how we collect, use, store, share, and safeguard your personal information.

We respect the trust you place in us and handle your personal information responsibly in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the General Data Protection Regulation (GDPR) where applicable, and all other relevant privacy legislation.

This policy applies to all personal information collected through our website, mobile applications, social media channels, in-person interactions at our church premises, events, conferences, ministry activities, and any other means by which you may provide personal information to us.

2. Key Definitions

For the purposes of this Privacy Policy, the following definitions apply:

“Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether recorded in a material form or not.
“Sensitive Information” means personal information about an individual’s racial or ethnic origin, political opinions, religious beliefs or affiliations, philosophical beliefs, membership of professional or trade associations, sexual orientation or practices, criminal record, health information, genetic information, or biometric data.
“Member” means any individual who has formally joined NCHIC as a member of our congregation.
“Visitor” means any person who attends our services, events, or visits our website without being a formal member.
“Processing” means any operation performed on personal information, including collection, recording, storage, retrieval, use, disclosure, or deletion.
“Data Controller” means NCHIC, as the entity that determines the purposes and means of processing personal information.
“Third Party” means any entity or person other than the individual whose personal information is being processed and the data controller.

3. Information We Collect

3.1 Personal Identification Information

We may collect the following personal identification information:

Full name, title, and preferred name
Date of birth, age, and gender
Residential and postal address
Email address(es) — personal and/or work
Telephone numbers — mobile, home, and/or work
Country of origin and nationality
Preferred language(s) of communication
Photographs and profile images
Family and household composition
Marital status and anniversary date

3.2 Religious & Spiritual Information

As a church, we may collect sensitive religious information including:

Baptism records, date, and method
Salvation and dedication records
Church membership status and history
Ministry involvement and spiritual gifts
Small group or fellowship participation
Prayer requests and pastoral care notes
Testimonies and faith journey details
Previous church affiliations and denominations
Discipleship and mentoring relationships

3.3 Emergency & Medical Information

For safety and duty-of-care purposes, we may collect:

Emergency contact details (name, relationship, phone number)
Known allergies and medical conditions relevant to events
Dietary requirements and restrictions
Mobility or accessibility needs
Medicare or health insurance details (for camps and retreats)

3.4 Technical & Automatically Collected Information

When you interact with our digital platforms, we may automatically collect:

IP address, browser type, and version
Operating system and device information
Screen resolution and viewport dimensions
Pages visited, time spent, and navigation path
Referring and exit URLs
Click patterns, scroll depth, and interaction data
Date and time of access
Geolocation data (approximate, based on IP)

4. Children’s & Youth Information

We take the protection of children’s personal information extremely seriously and comply with all applicable child protection legislation. Our children’s and youth ministry programs require specific information to ensure the safety and wellbeing of minors.

4.1 Parental Consent

We do not knowingly collect personal information from children under 16 years of age without verifiable parental or guardian consent. Parents and guardians are required to complete registration forms before their children participate in any ministry programs, camps, retreats, or events.

4.2 Information Collected

Child’s full name, date of birth, and age
Parent/guardian names and contact details
Emergency contact information (minimum two contacts)
Medical conditions, allergies, and medications
Dietary requirements and special needs
Authorised pickup persons and photo identification
Behavioural or learning considerations
Court orders or custody arrangements (where relevant)

4.3 Child Safety Commitment

All staff and volunteers working with children are subject to Working with Children Checks (Blue Card in Queensland) and undergo comprehensive safeguarding training. Information relating to minors is stored with the highest level of security and access is restricted to authorised personnel only.

5. How We Collect Information

We collect personal information through a variety of methods, including:

Direct interaction: When you fill out membership forms, connection cards, registration forms, or provide information at the welcome desk
Online forms: Through our website forms including contact forms, prayer request submissions, event registrations, and newsletter sign-ups
Telephone and email: When you call or email our church office
Pastoral conversations: During counselling sessions, pastoral visits, or ministry meetings
Events and conferences: Through registration and attendance at church events, camps, retreats, and conferences
Donations: When you make financial contributions via online platforms, direct deposit, or in-person giving
Social media: Through interactions on our social media platforms
CCTV: Through security camera systems on our church premises
Third parties: Occasionally from other churches or organisations with your consent during membership transfers
Automated technologies: Through cookies, analytics tools, and server logs when you visit our website

6. Legal Basis for Processing

We process your personal information on the following legal grounds:

Consent: Where you have given explicit consent for specific purposes, such as receiving newsletters, sharing prayer requests, or being included in church directories
Legitimate interests: For the operation of our church, conducting ministry activities, pastoral care, and maintaining our community of faith
Contractual necessity: Where processing is necessary for employment contracts, volunteer agreements, or venue hire arrangements
Legal obligations: Where we are required by law to process certain information, such as financial reporting, child safety requirements, or working with children checks
Vital interests: In emergency situations where processing is necessary to protect someone’s life or health
Religious exemption: Under the Privacy Act 1988, religious bodies may be exempt from certain provisions when processing data in connection with membership or former membership

7. How We Use Your Information

We use your personal information for the following purposes:

7.1 Church Administration & Operations

Maintaining accurate membership records and church rolls
Processing attendance records for services and events
Coordinating rosters for worship teams, volunteers, and ministry leaders
Managing facility bookings and event logistics
Conducting internal audits and governance activities

7.2 Pastoral Care & Spiritual Support

Providing pastoral counselling and spiritual guidance
Coordinating hospital and home visitations
Managing prayer chains and prayer team notifications
Supporting individuals through bereavement, illness, or crisis
Facilitating discipleship, mentoring, and spiritual growth programs

7.3 Financial Management

Processing tithes, offerings, and donations
Issuing donation receipts and tax-deductible statements
Managing building fund pledges and designated giving
Payroll processing for employed staff
Financial reporting and regulatory compliance

7.4 Communication & Community Building

Sending weekly bulletins, newsletters, and ministry updates
Event promotion and invitation management
Connecting members with small groups and fellowship opportunities
Publishing church directories (with explicit consent)
Coordinating missions and outreach initiatives

8. Ministry Communications

We communicate with our congregation and community through various channels. You have the right to manage your communication preferences at any time.

8.1 Types of Communications

Essential communications: Service cancellations, emergency notifications, and important church announcements
Ministry communications: Weekly sermon notes, Bible study materials, devotional content, and ministry-specific updates
Event invitations: Special services, conferences, camps, retreats, and community events
Fundraising communications: Building fund updates, missions appeals, and specific project campaigns
Administrative communications: Membership renewals, roster changes, and meeting notifications

8.2 Opt-Out Rights

You may opt out of non-essential communications at any time by clicking the “unsubscribe” link in any email, contacting our church office, or updating your communication preferences. Please note that essential safety and operational communications cannot be opted out of while you remain a member.

9. Information Sharing & Disclosure

9.1 Within Our Church Community

We may share your information within our church for legitimate ministry purposes:

Sharing prayer requests with authorised prayer teams (with your consent)
Providing pastoral care teams with relevant information for support
Coordinating ministry activities and volunteer rosters
Publishing member directories (strictly opt-in, with explicit consent)
Facilitating small group and fellowship connections

9.2 Affiliated Churches & Denominations

We may share limited information with affiliated churches or denominational bodies for the purposes of membership transfers, ministerial credentials, joint events, or denominational reporting. Such sharing is governed by data sharing agreements.

9.3 Third-Party Service Providers

We engage trusted third-party providers who process data on our behalf:

Church management software providers
Email marketing and communication platforms
Payment processors for online donations
Website hosting and content delivery networks
Cloud storage and backup services
Analytics and performance monitoring tools
Event management and registration platforms
Accounting and payroll software providers

All third-party providers are contractually obligated to protect your information, process it only as instructed, and comply with applicable privacy laws.

9.4 Legal & Regulatory Disclosure

We may disclose your information where required by law, court order, or government regulation; to report suspected abuse or neglect of a child or vulnerable person; to protect the rights, property, or safety of NCHIC, our members, or others; or to cooperate with law enforcement in criminal investigations.

10. Donation & Financial Data

We take the security of financial information with the utmost seriousness. The following practices govern how we handle donation and financial data:

We do not store credit card or bank account numbers on our servers — all payment processing is handled by PCI-DSS compliant third-party payment processors
Donation records (amounts, dates, and designation) are maintained for tax and accounting purposes
Financial information is accessible only to authorised finance team members and auditors
Annual giving statements are issued for tax purposes as required by Australian law
We maintain donor confidentiality — individual giving amounts are not disclosed to pastoral staff, elders, or other members unless legally required
Financial records are retained for a minimum of seven (7) years in accordance with Australian tax law

11. Online Services & Live Streaming

Our online ministry activities, including live streaming of services, podcasts, and digital content, involve the following privacy considerations:

Live stream recordings may capture the images and voices of attendees in the congregation
Chat messages, comments, and interactions during live streams may be publicly visible and may be recorded
Online service registrations and attendance records are maintained for ministry planning
Downloaded sermon content and podcast subscriptions may be tracked for analytics purposes
Virtual prayer rooms and online counselling sessions are treated with the same confidentiality as in-person pastoral care

By attending services that are being live-streamed, you acknowledge that your image may appear in the broadcast. If you prefer not to appear, please notify an usher who can direct you to seating outside the camera view.

12. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. We categorise our cookies as follows:

12.1 Essential Cookies

Required for the website to function properly, including session management, security tokens, and load balancing. These cannot be disabled.

12.2 Analytical Cookies

Help us understand how visitors use our website through anonymised data collection, including page views, session duration, bounce rates, and user flow. We use Google Analytics and similar tools with IP anonymisation enabled.

12.3 Functional Cookies

Enable enhanced functionality and personalisation, such as remembering your language preference, login status, and previously viewed content.

12.4 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling cookies may affect certain features of our website. For detailed instructions on managing cookies in your specific browser, please visit the browser’s help documentation.

13. Social Media & Third-Party Platforms

We maintain active presences on social media platforms including Facebook, Instagram, YouTube, and TikTok. When you interact with us on these platforms:

Your interactions (likes, comments, shares, messages) are governed by the respective platform’s privacy policy as well as this policy
We may use social media analytics to understand our audience and improve our content
Direct messages received through social media are treated with the same confidentiality as other pastoral communications
We may share user-generated content (photos, testimonies) with your consent
Social media advertising may use platform-provided targeting tools based on demographics and interests

We encourage you to review the privacy policies of these platforms as their data practices are beyond our control.

14. Photography, Video & Media

Photography and video recording are integral to our church’s ministry and communications:

14.1 General Photography

Photographs and videos may be taken during services, events, and activities for use on our website, social media, printed materials, and promotional content. General signage is displayed at events where photography occurs.

14.2 Children’s Photography

Photographs of children will only be taken and used with explicit written consent from a parent or guardian. Parents may withdraw consent at any time, and we will remove images within a reasonable timeframe.

14.3 Opting Out

If you do not wish to be photographed or recorded, please inform our media team or a church leader. We will make every reasonable effort to honour your request. You may also request the removal of any existing photographs featuring you from our platforms.

15. Data Security Measures

We implement comprehensive security measures to protect your personal information:

15.1 Technical Safeguards

SSL/TLS encryption for all data transmitted between your browser and our servers
AES-256 encryption for data stored at rest
Multi-factor authentication (MFA) for administrative access
Regular security vulnerability assessments and penetration testing
Firewall protection and intrusion detection systems
Automated backup systems with encrypted off-site storage
Regular software updates and security patch management

15.2 Organisational Safeguards

Role-based access controls limiting data access to authorised personnel
Mandatory privacy and data protection training for all staff and key volunteers
Confidentiality agreements signed by all staff, volunteers, and ministry leaders
Clean desk policies and secure document disposal procedures
Regular internal audits of data handling practices
Designated Privacy Officer responsible for overseeing data protection

15.3 Physical Security

Locked filing cabinets and restricted access areas for physical records
CCTV monitoring of church premises for safety and security
Visitor management systems for office and administrative areas
Secure disposal of physical documents through cross-cut shredding

16. Data Breach Response

In the event of a data breach that is likely to result in serious harm to any individual, we will:

Take immediate steps to contain and remediate the breach
Assess the nature and scope of the breach, including the types of information involved
Notify the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme
Notify affected individuals as soon as practicable with details of the breach, likely consequences, and recommended steps
Conduct a post-breach review to identify root causes and implement preventative measures
Maintain a breach register documenting all data breaches and responses

17. Data Retention & Disposal

We retain personal information only for as long as necessary. Our retention periods include:

Active membership records: For the duration of membership plus 7 years after cessation
Financial and donation records: Minimum 7 years as required by Australian tax legislation
Child safety records: Minimum 25 years, or as required by applicable child protection legislation
Employment records: 7 years after the end of employment
Volunteer records: 7 years after the end of volunteer service
Event registrations: 2 years after the event
Website analytics data: 26 months (anonymised)
CCTV footage: 30 days unless required for an investigation
Pastoral care notes: For the duration of the pastoral relationship plus 7 years

When personal information is no longer required, it is securely deleted from electronic systems and physical records are cross-cut shredded.

18. Your Privacy Rights

Under Australian privacy law and, where applicable, international privacy regulations, you have the following rights:

Right of Access: You may request a copy of the personal information we hold about you
Right to Correction: You may request correction of inaccurate, incomplete, or out-of-date information
Right to Deletion: You may request deletion of your personal information, subject to legal retention obligations
Right to Restrict Processing: You may request that we limit how we use your information in certain circumstances
Right to Data Portability: You may request your personal data in a commonly used, machine-readable format
Right to Object: You may object to the processing of your personal information for specific purposes
Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing
Right to Opt Out: You may opt out of marketing communications and non-essential contact at any time
Right to Complain: You may lodge a complaint with the OAIC or relevant authority if you believe your privacy has been breached

19. Access & Correction Requests

To exercise your privacy rights:

Submit a written request to our Privacy Officer via email or post
We will verify your identity before processing any request
We will respond to your request within 30 days of receipt
If we are unable to fulfil your request, we will provide a written explanation of the reasons
Access requests are generally provided free of charge; however, we may charge a reasonable fee for excessive or repetitive requests
If we refuse a request, you have the right to appeal or lodge a complaint with the OAIC

20. Mobile Applications & Devices

If we offer mobile applications or mobile-optimised services, the following applies:

Apps may request permissions such as camera, location, contacts, or push notifications
You can manage app permissions through your device settings at any time
Push notifications can be disabled in your device settings
App usage data may be collected for performance monitoring and improvement
Offline data stored on your device is subject to your device’s security settings

21. International Data Transfers

As an international church, your information may be transferred to or stored in countries outside Australia. We ensure appropriate safeguards are in place:

We only transfer data to countries with adequate data protection laws or where appropriate contractual safeguards are in place
Our cloud service providers maintain data centres that comply with international security standards (ISO 27001, SOC 2)
Cross-border transfers for mission partnerships are governed by data sharing agreements
We take reasonable steps to ensure that overseas recipients do not breach the APPs

22. Third-Party Websites & Links

Our website and communications may contain links to external websites, resources, and services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policy of every website you visit. Third-party links are provided for informational purposes and do not constitute endorsement by NCHIC.

23. Volunteer & Staff Data

Additional information is collected from volunteers and employed staff members:

Working with Children Check (Blue Card) details and verification
Background check results and police clearances
References and character assessments
Tax file numbers and superannuation details (employed staff)
Qualifications, certifications, and training records
Performance reviews and development plans
Workplace health and safety incident reports
Leave records and availability schedules

This information is handled in accordance with the Fair Work Act 2009, applicable state and territory employment laws, and this Privacy Policy.

24. Privacy Governance & Oversight

NCHIC maintains a robust privacy governance framework:

Privacy Officer: A designated Privacy Officer is responsible for overseeing compliance with this policy and all applicable privacy laws
Privacy Impact Assessments: Conducted before implementing new programs, technologies, or processes that involve personal information
Regular Reviews: This policy is reviewed annually and updated as needed to reflect changes in law, technology, or church operations
Staff Training: All staff and key volunteers undergo annual privacy awareness training
Accountability: The church leadership team (eldership/board) provides oversight of data protection practices

25. Complaints & Dispute Resolution

If you believe your privacy has been breached or are dissatisfied with how we have handled your personal information:

Step 1 — Internal complaint: Contact our Privacy Officer in writing. We will acknowledge receipt within 5 business days.
Step 2 — Investigation: We will investigate your complaint thoroughly and provide a written response within 30 days.
Step 3 — Resolution: If the complaint is substantiated, we will take corrective action and advise you of the outcome.
Step 4 — External complaint: If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner

Website: OAIC privacy rights

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

26. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

The updated policy will be published on our website with a revised “Last Updated” date
Material changes will be communicated through our weekly bulletin and/or email notification
Where required by law, we will seek your renewed consent for any significant changes to how we process your data
Previous versions of this policy will be archived and available upon request

We encourage you to review this policy periodically. Your continued use of our website and services after changes are posted constitutes acceptance of the revised policy.

27. Contact Information

For all privacy-related enquiries, requests, or concerns, please contact:

Privacy Officer

New Covenant Hosanna International Church

1821 Ipswich Rd, Rocklea QLD 4106

Email: admin@nchic.com.au

Phone: +61 412 275 620

Your privacy is a sacred trust. We are committed to honouring that trust and protecting your personal information with the highest standards of care.

“The Lord is faithful to all his promises and loving toward all he has made.” Psalm 145:13

Need more information?

If you have questions about this page or would like further assistance, please contact the church team.