Legal and policies.

We are C3 Nairobi, legally Christian City Church Kenya Ministries (Charity ID 43230), P. O. Box 6233-00200, KALRO, Waiyaki Way, Westlands, Nairobi. We decide how the information you give this site is used. Questions about your data: hello@c3churchnairobi.com.

People visit this site from all over the world. We follow Kenya's Data Protection Act 2019, and where the law where you live gives you more protection (such as the GDPR in the UK and EU), we honour that too.

What we collect, and why

What you type into a form. Only that, and only to answer you or do what you asked.

• Plan your visit: name, email, phone (optional), which Sunday, whether children are coming and their ages (optional), and whether you would like someone to meet you.
• Connect Group signup, Crew and Baptism: name, email, phone and your answers.
• Contact: name, email, phone and your message.
• Prayer: your request. Name, phone and email are optional, and you choose who sees it: the prayer team, the pastors only, or anonymous.
• C3 Kids registration: see "Children" below.

Photos, video and audio at our gatherings are covered by our separate media consent, at Photos, video and audio.

How you found us. When you send a form we also note how you reached the site (a campaign link or the site you came from) and the first page you visited, so we know which invitations work. It stays with your form and is never emailed.

Keeping the site safe. Each form keeps a scrambled version of your IP address that cannot be turned back into the address, to stop spam. Forms other than C3 Kids may use Cloudflare Turnstile to check a real person is sending them. Our host and security tools keep short-lived technical records of visits to protect the site. When a page is not found, we record the address that was asked for, never who asked.

Analytics, only with a yes. Google Analytics loads only after you tap yes on our banner. It tells us which pages are used and which actions are taken, such as a form sent, directions or a phone number tapped, a giving number copied, or a message played. With a no, it never loads. Your choice is remembered for 12 months, and you can change it at any time under Privacy choices in the footer. The C3 Kids page never shows the banner and never loads analytics.

WhatsApp. Tapping the WhatsApp button opens WhatsApp. Anything you send there is handled by WhatsApp (Meta) under its own policy, and by us like any other message.

Why we are allowed to use it

When you send a form, you have asked us to act on it. Analytics runs only on your consent. Children's health notes are used only because a parent gives them, and only to keep that child safe.

Children

A parent or guardian registers a child: the child's name and age, the room, the parent's name and contact details, and any allergy or medical notes. The notes are never emailed, and only the people who keep the C3 Kids register can open them. Check-in happens at the desk on the morning, never online. We do not knowingly collect anything from children directly.

Who else handles it

We never sell your information or share it outside the church. These services run the site for us and handle data only on our behalf:

• Hostinger: hosting and the site's own network.
• Google Workspace: our email.
• Google Analytics: only after a yes.
• Cloudflare Turnstile: spam protection on forms, when switched on.

Some of these store data outside Kenya, including in the US and EU, under their own safeguards. Pages may also show Spotify (message players), YouTube (films) and Google Maps (on Contact, only when you tap it). When they load, those companies' own privacy policies apply to what they collect.

How long we keep it

We review what we hold and delete it by hand on this schedule:

• Contact and prayer requests: 12 months after we last heard from you.
• Plan your visit: 12 months after the Sunday you planned.
• Connect Group, Crew and Baptism: while you are involved, then 24 months after.
• C3 Kids registrations, including health notes: while your child attends, then 12 months after.
• Security records: up to 90 days. Records of staff sign-ins and site changes are kept permanently, as a security record.
• Analytics: 14 months, then Google deletes them.
• Your banner choice: 12 months, on your own device.

You can ask us to delete anything sooner.

Your rights

Wherever you live, you can ask to see what we hold about you, correct it, delete it, receive a copy, or object to how we use it, and you can withdraw consent at any time. Email hello@c3churchnairobi.com and we will reply within 30 days. If you are unhappy with our answer, you can complain to Kenya's Office of the Data Protection Commissioner (odpc.go.ke) or to the data protection authority where you live.

On your device

We store your banner choice for 12 months, and a note of where your visit started, which clears when you close the tab. Google Analytics sets its own cookies only after a yes. Spotify, YouTube and Google Maps may set theirs when they load.

Changes

If this policy changes, we will update the date at the top of this page.

What membership at C3 Nairobi means, who it is for, how someone becomes a member and what it asks of them. The human version of this sits on the Statement of Beliefs page; the full policy belongs here.