Privacy Policy
Last updated: 30 August 2026
CityLight Community Church ("we", "the Church") respects your privacy and handles personal data in accordance with the Singapore Personal Data Protection Act (PDPA).
1. What we collect
When you register for events, submit prayer requests, join groups, give, or serve, we collect the details you provide: name, email, phone number, and (for some ministries) additional information you choose to share. We also keep standard technical logs (IP address, device/browser type) to keep the site secure.
2. How we use it
Personal data is used to administer event registration and tickets, coordinate volunteer rosters, send bulletins and notifications you subscribed to, process and receipt giving records, and care for members (including confidential pastoral notes, which are encrypted and visible only to authorised pastoral staff).
3. Consent and withdrawal
We record your consent when you subscribe to communications. You may withdraw consent at any time from your profile page or by contacting us — we will stop the relevant use of your data. Withdrawing consent may affect which services we can provide (for example, we cannot email you a ticket without your email address).
4. Access, correction and deletion
You can view and export the data we hold about you from your profile, and correct anything inaccurate. You may also request deletion of your account and personal data; we will action it within a reasonable period, retaining only what law or legitimate church records require.
5. Sharing and transfers
We do not sell your data. We share it only with service providers that help us operate (Google for sign-in, Cloudflare for hosting and storage, Resend for email), under duties of confidentiality, and only as needed to provide the service.
6. Retention and security
Member profile data is retained while you remain active; older personal data is purged on a 90-day cycle where applicable. Data is encrypted in transit and sensitive fields are encrypted at rest. Access to personal data is role-restricted and audit-logged.
7. Contact
Questions or requests about your personal data: contact the church office at the address listed on the About page, or email us — details on the Connect section of this site.