Data Protection Policy

Last updated: 22 Tikimt 2019 (01/11/2026) · Kale Hewot Church – Eastern District – Gerzan Local Church

1. Principles

Personal data is collected for a clear church purpose, kept accurate, limited to what is needed, and protected against loss and misuse.

2. Technical measures

Passwords are hashed; login attempts are limited; sessions expire; all changes are written to an activity log; photos, letters and backups are stored outside public folders and served only to signed-in users with permission; forms are protected against forged requests; uploaded images are re-encoded.

3. Organisational measures

Only trusted staff receive accounts; each has the minimum role needed. Accounts of people who leave are disabled. Backups are kept by the Super Administrator.

4. Incidents

Any suspected data leak must be reported to the Super Administrator at once so that passwords can be changed and the activity log reviewed.