Privacy Policy

1 Introduction

Welcome to the official web portal of the Episcopal Church Diocese of India Council (ECDIC) ("we," "us," or "our"), accessible at www.ecdic.org. We are committed to safeguarding the privacy and security of the personal, spiritual, and financial information of our members, clergy, affiliates, and visitors. This comprehensive Privacy Policy outlines how we collect, use, process, store, and protect your data in compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection (DPDP) Act of India.

2 Information We Collect

To provide enterprise-grade church administration services, we may collect the following categories of data:

• Personally Identifiable Information (PII): Full name, Date of Birth, Gender, Marital Status, and physical addresses.
• Spiritual & Ministerial Data: Dates of Salvation and Baptism, Church affiliation, Ordination roles, and ministerial history.
• Sensitive Identity Documents: Uploaded copies of Aadhar Cards, Passports, Birth/Death Certificates, and Proof of Religion (securely transmitted).
• Financial Information: Payment gateway transaction IDs, payment history for tithes, offerings, and affiliation fees. (Note: We do not store full credit/debit card numbers; all payments are processed securely via our banking partners like HDFC Bank).
• Technical & Usage Data: IP addresses, browser types, device information, and interaction logs within the portal.

3 How We Use Your Information

Your data is strictly used for ecclesiastical, administrative, and legal purposes, including:

• Processing applications for Ordinations, Affiliations, Marriage Licenses, Baptisms, and Child Dedications.
• Generating official, verified PDF Certificates and Smart Identity Cards.
• Maintaining the official digital registry of the Episcopal Church Diocese of India Council.
• Facilitating role-based access control (RBAC) for Branch Admins and Pastors.
• Communicating important council updates, event details, and renewal notices.
• Complying with central and state government registration requirements.

4 Data Storage & Cloud Security

ECDIC employs enterprise-level security architecture.

• Cloud Storage Integration: All sensitive documents (Aadhar, photos, certificates) are not stored on local web servers. They are encrypted and instantly pushed to secure, private Microsoft OneDrive / SharePoint enterprise vaults.
• Database Security: Relational databases are protected by industry-standard encryption, strong password hashing (Bcrypt), and strict Role-Based Access Control (RBAC).

5 Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may disclose your data only under the following circumstances:

• Authorized Personnel: To designated Bishops, Pastors, and Branch Admins solely for administrative verification.
• Service Providers: To verified third-party partners (e.g., Microsoft Azure, HDFC SmartHub Payment Gateway) who are bound by strict data protection agreements.
• Legal & Regulatory Compliance: To government authorities or law enforcement agencies if required by law, subpoena, or court order.

6 Data Retention

As a religious and administrative governing body, certain records (such as Baptism, Marriage, Ordination, and Burial registries) are maintained perpetually as historical church records. User accounts and temporary applications may be deleted upon formal request, subject to ecclesiastical laws and legal obligations.

7 Your Privacy Rights

Depending on applicable laws, you possess the right to:

• Request access to the personal data we hold about you.
• Request corrections to inaccurate or incomplete data.
• Request deletion of non-permanent administrative data.
• Withdraw consent for optional communications.