The team at Choyr believes the data and information related to your church and its members is important to keep safe. We'd like to outline what data we store, how we store it, and why we store it. We will also explain the steps we've taken to ensure we are compliant with the GDPR regulations recently introduced.
This document was updated on 14th March, 2019. Changes come into effect on 14th March, 2019.
Anyone who browses Choyr, whether on our main site or on a church's site, may have information collected via the industry-standard technologies we use, including cookies, access logs, and analytics services. These can include the visitor's browser type, language preference, referring site, additional websites requested, the date and time of each request, and the IP address used for these requests. You can find more information about cookies by reading our Cookie Policy document.
This information helps us improve the site by understanding how visitors use our products, and helps us monitor and protect the site.
When you create a user account, we ask for your email address, a password, and your first and last names. You will also be required to consent to our use of this and other information by ticking the checkbox that appears on the registration form. You may withdraw consent at any time by asking your church admin to delete your account, or by emailing support@choyr.com.
We need this information to identify you on Choyr. We use it to fill out your profile and share that profile with other users in your church network. We may use your email address to contact you for reasons such as notifications of new activity, although you have the option to turn this off at any time. We may still contact you if we are required to do so because we plan to update our Terms and Conditions or Privacy Policy, or other such important matters.
During your use of Choyr, you may input additional optional "User Personal Information" when editing your user profile. "User Personal Information" is any information about one of our users which could, alone or together with other information, personally identify him or her. Information such as a user name and password, an email address, a real name, and a photograph are examples of "User Personal Information". User Personal Information includes Personal Data as defined in the General Data Protection Regulation. This can include a photo of you, your date of birth, your gender, your address, your phone number, your relationship status, the number of children you have, your place of birth, your religious views and background, your education, your current employment, and your other social network usernames. You can view, modify, or delete this information at any time, as long as you're logged in.
This additional information is visible to admins of your church, and helps your church gain an overview of its membership.
We are able to deliver our services, personalise content and make suggestions for you by using this information to understand how you use and interact with our services and the people or things you're connected to and interested in on and off our services. Choyr may sometimes use this information to monitor and improve the product, and may sometimes use this information for investigating suspicious activity or violations of our terms or policies.
We limit our use of your User Personal Information to the purposes listed in this Privacy Policy. If we need to use your User Personal Information for other purposes, we will ask your permission first. You can always see what information we have relating to you by downloading a copy from your User Settings page.
If you use our services for purchases or financial transactions (for example, when you make a donation), we will collect information about the transaction, including your name, address, and Gift Aid status. Payment details may be shared with our payment processor (currently Stripe or PayPal).
During your use of Choyr, you may provide us with content which includes metadata. For example, when uploading a photo to a post, that photo may include additional information such as the time and the location that the photo was taken.
Information about you may be shared by other people during their use of Choyr. We will do our best to ensure that this is only accessible by appropriate members (for example, private messages will be restricted to those people listed in the conversation). If you ever feel uneasy because your information has been shared by others inappropriately, you can contact an admin of your church, or contact Choyr directly by email support@choyr.com.
We often introduce new features, which may require the collection of new information. If we collect materially different personal data or materially change how we use your data, we may modify Privacy Policy. If this happens, we will notify you 30 days before the new Privacy Policy is effective.
If you're under the age of 16, you may not have an account on Choyr. Choyr does not knowingly collect information from or direct any of our content specifically to children under 16. Other countries may have different minimum age limits, and if you are below the minimum age for providing consent for data collection in your country, you may not use Choyr without obtaining your parents' or legal guardians' consent.
Your name, profile photo, gender, and date of birth are displayed to all users within your church network. Other User Personal Information is visible to any admin of your church network. Other information may be shared with all or certain members and customers of our service, including information that (i) you share with people and communicate with, (ii) that other people share about you, and (iii) from your profile, posts, likes, comments, and messages.
We occasionally pass information we have collected to Data Processors (typically known as sub-processors) that provide a service to Choyr. We have ensured that all Data Processors we use are GDPR compliant.
Data Processors currently used by Choyr:
Additionally, Facebook, Google Ads, LinkedIn, and Twitter use remarketing to keep a list of people who've seen our ads in the past, in order for us to better target users in our advertising that is shown on their sites (or other sites around the internet). These services use cookies to store this information. Please visit http://optout.networkadvertising.org/ to find out more about this process, including how to opt-out of remarketing at any time.
Generally, Choyr will retain User Personal Information for as long as your account is active or as needed to provide you services. We may retain certain User Personal Information indefinitely, unless you delete it or request its deletion. For example, we don't automatically delete inactive user accounts, so unless you choose to delete your account, we will retain your account information indefinitely.
If you decide to delete your account, we will delete information within 30 days of account closure. However, we may retain your personal data even after you have deleted your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our User Agreement, or fulfil your request to "unsubscribe" from further messages from us. We may retain de-personalized information after your account has been deleted.
We do not control data that other members copied out of our service. Your information may continue to be displayed in the services of others (for example, in search engine results) until they refresh their cache.
Choyr uses industry-standard technologies to ensure your data and your church members' data is safe and secure. Our main infrastructure runs on Amazon Web Services (AWS), with access protected by two-factor authentication. All data transferred between users and Choyr servers use SSL connections (https).
A separate database is created for each church that joins Choyr, meaning data relating to your church is kept completely separate from other churches on Choyr.
If we discover a data breach, we will inform the relevant supervisory authority (ICO) within 72 hours. We will also inform any individuals who may be affected by the data breach without undue delay.
If you have concerns about the way Choyr is handling your User Personal Information, please let us know immediately. You can contact us by sending an email to support@choyr.com.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO).