What we collect
Depending on how you use the services, we may process account and profile information, contact details, ministry enquiries, prayer or testimony submissions, community posts and messages, moderation reports and decisions, social sign-in identifiers, administrator audit records, and basic technical information needed for security and operation.
Why we use it
We use information to provide ministry and community features, authenticate accounts, protect users, respond to requests, moderate content, operate broadcasts and connected services, maintain security, prevent abuse, and comply with lawful obligations.
Sensitive information
Prayer, counselling, testimony and religious information can be sensitive. Share only what is necessary. Confidential ministry inboxes and restricted administrative records are limited by role-based access, but no internet service can promise absolute security.
Cookies and sessions
Authenticated areas use secure session cookies. They are used to keep you signed in and protect account access, not to create a public advertising profile.
Service providers and connected platforms
Cloudflare infrastructure is used for hosting, databases, storage and network protection. Optional social sign-in or publishing features may connect to providers such as Google, Meta, TikTok, X or LinkedIn when an authorized administrator or user chooses to connect them. Those providers apply their own privacy terms.
Media and retention
Temporary ministry media may be subject to automated expiry where that feature is configured and verified. Retention periods depend on the actual service, storage, backups and applicable legal requirements; no universal 48-hour deletion guarantee is made. Other records may be retained for operational, safety, audit, dispute-resolution or lawful reasons appropriate to their purpose.
Your choices and requests
Global Community members can use Safety & privacy to request access, correction, deletion or review. Other privacy questions can be sent through the ministry contact page. We may need to verify a request before acting on it and may retain information where a legitimate safety, security, legal or record-keeping reason requires it.
Children and the Global Community
The public ministry website may be viewed generally, but new Global Christian Social Network accounts are currently intended for adults aged 18 or older and use an age self-attestation during registration.
Lawful requests
Government or law-enforcement requests do not bypass authentication or grant direct account access. Requests are reviewed for lawful authority, scope and authenticity. Questions about lawful requests can be directed through the contact page.
Online Assistant and automated processing
Messages sent to our Online Assistant may be processed by ministry technology services and configured AI providers to generate responses and maintain safety. Please do not submit passwords, payment card information or confidential identity documents. AI responses may be incomplete or inaccurate and are not a substitute for professional advice.
International processing and privacy rights
Hosting and connected services may process information outside Nigeria. We seek to handle such processing in accordance with applicable data protection requirements. Subject to applicable law, individuals may request access, correction, deletion or review of their personal information through the ministry contact channels.
How information is collected
Information may be provided directly when you register, submit forms, contact the ministry, request prayer or participate in community features. Limited technical and usage information may also be generated automatically when you access the website or connected services.
Access, confidentiality and security
Access to personal records should be limited to authorized personnel who need the information for their assigned responsibilities. We use technical and organizational safeguards appropriate to the service, including account access controls and operational security measures. No online system can guarantee that unauthorized access will never occur.
Processing grounds and consent
Depending on the activity and applicable law, information may be processed to provide requested services, administer accounts, fulfil legal obligations, protect users and the platform, or on the basis of consent where required. Where processing relies on consent, you may request to withdraw it, subject to lawful exceptions.
Data retention and deletion
We seek to retain information only as long as reasonably necessary for its purpose, subject to security, legal, operational and record-keeping requirements. You may request deletion or correction using the ministry's contact channels. Some information may need to be retained where applicable law or a legitimate dispute or security requirement permits it.
Personal data breach response
We assess suspected personal-data breaches promptly, document findings and take proportionate containment and remediation measures. Where a breach is likely to create a risk to individuals' rights and freedoms, the Nigeria Data Protection Act 2023 requires notification to the Nigeria Data Protection Commission within 72 hours of awareness; where a breach is likely to create high risk, affected individuals must be informed promptly as required by law. Other applicable jurisdictions may impose additional duties. We do not claim a breach notification has been sent unless it has actually been submitted.
Security incidents and urgent safety concerns
If you suspect account compromise, an exposed password, misuse of private ministry information, an impersonation scam or a threat to a member, contact contact@heavenlykey.org promptly with relevant non-sensitive details. Do not email passwords or intimate images. The ministry should investigate reports, preserve only necessary evidence, restrict access where appropriate and assess whether notifications to affected people or regulators are legally required.
Complaints and privacy questions
For access, correction, deletion, objection or other privacy requests, contact contact@heavenlykey.org. You may also have the right to complain to the relevant data protection authority under applicable law.
Contact
Email contact@heavenlykey.org or use the contact page. Do not send passwords, unnecessary identity documents, or copies of illegal material.
Who is responsible and what this notice covers
Heavenly Key Evangelistic Movement, Nigeria, is responsible for determining the purposes of personal-data processing for the ministry services it operates. This notice covers the public website, ministry enquiries, Global Christian Social Network features and connected ministry applications where this notice is displayed. For privacy questions contact contact@heavenlykey.org. Separate third-party services may act as independent controllers under their own notices.
Our data protection principles
We seek to process personal information lawfully, fairly and transparently; collect it for specified and legitimate purposes; limit collection to what is necessary; keep relevant information accurate; retain it no longer than justified; and protect it using proportionate security safeguards. We review access and processing practices as the services evolve, in line with applicable requirements including the Nigeria Data Protection Act 2023.
Categories of information and purposes
Information you provide may include your name, contact details, profile details, submitted prayer requests, testimony, messages, media, reports and correspondence. Technical information may include IP address, device and browser details, login and security events, session identifiers and service diagnostics. We use relevant information to create and secure accounts, deliver requested services, communicate, respond to ministry enquiries, moderate community activity, investigate misuse, protect the platform and meet lawful obligations. We do not require users to disclose sensitive religious or counselling information to browse the public site.
Lawful grounds for processing
Depending on the activity, processing may be necessary to deliver a service you request, comply with legal duties, protect vital interests, pursue legitimate interests subject to your rights, or rely on consent where required. We assess the appropriate legal ground for each activity. Where consent is the ground, you may withdraw it through the relevant feature or by contacting us; withdrawal does not retrospectively invalidate processing already lawfully carried out.
Cookies and optional tracking
Essential cookies or comparable technologies may support login sessions, security and user preferences. Optional analytics, embedded media or third-party features may use additional technologies subject to applicable requirements and available choices. Browser settings may allow you to restrict cookies, although disabling essential cookies can prevent some features from working. This notice does not claim that an optional cookie-consent manager is active unless it has been implemented.
Sharing, service providers and international transfers
We may share information with authorized personnel, hosting and infrastructure providers, communication and authentication services, or other processors only as reasonably necessary for the disclosed purposes and subject to appropriate safeguards. User-directed integrations may send data to third-party platforms under their own policies. Where information is transferred internationally, we seek an applicable legal transfer basis and appropriate safeguards. We do not treat access requests from authorities as automatically valid; requests are assessed for lawful authority and scope.
Security, confidentiality and incidents
We aim to apply proportionate administrative and technical safeguards, including access restrictions, account security measures and review of suspected misuse. Access to sensitive ministry submissions should be limited to personnel with a legitimate need. If a personal-data breach occurs, we will assess its impact and make notifications to affected individuals or regulators where required by applicable law. No internet-based service can guarantee absolute security.
Retention and account closure
Retention depends on the category of information and the purpose for which it is needed. Account information may remain while an account is active; security, moderation and transaction records may be kept longer where justified by safety, disputes or law. Temporary-media deletion settings, including any 48-hour expiry described elsewhere in this notice, must be confirmed against actual system configuration; not all copies, backups or externally shared media necessarily follow the same schedule. Requests for deletion will be assessed against applicable rights and lawful exceptions.
Your rights and how to exercise them
Subject to applicable law, you may have rights to information about processing, access to your data, correction, deletion, restriction, objection, data portability, withdrawal of consent, and safeguards concerning solely automated decisions. Email contact@heavenlykey.org or use the ministry contact page with your request. We may verify identity before disclosing or changing records and will respond in accordance with applicable legal requirements. You may also complain to the Nigeria Data Protection Commission or another competent authority where applicable.
Children and sensitive ministry information
Global Christian Social Network registration is intended for adults aged 18 and above under its current registration policy. Please do not submit information about a child or another person without appropriate authority. Prayer requests, counselling details and religious beliefs may reveal sensitive information; submit only what is necessary and consider whether a private ministry contact channel is more appropriate than a public community post.
Changes to this notice
We may update this notice when services, providers, legal obligations or processing practices change. Material changes should be communicated through appropriate website or account notices. The revision date below indicates when the written notice was updated, not independent verification of every technical control described.
Global Christian Social Network social features
When members use social-network features, we may process profile information, posts, comments, reactions, follows, groups, messages, uploaded photographs, audio, videos, livestream interactions, reports, blocks, account preferences and moderation history. Public profiles and public posts can be visible to other users and may be copied or reshared beyond our control. Private or restricted content is handled according to the feature's actual access settings; a private message should not be assumed to be end-to-end encrypted.
Community safety and moderation data
To protect members and the service, authorized moderators may review reports, relevant content, account activity, security signals and records needed to assess suspected abuse, scams, impersonation, exploitation or threats. Automated tools may assist with prioritizing reports or detecting potential violations, but a flagged item alone is not conclusive proof of wrongdoing. Access to sensitive reports should be limited and significant enforcement decisions should have a meaningful human review process where appropriate.
Prayer requests, testimonies and pastoral confidentiality
Prayer requests, testimonies and counselling communications may disclose religious beliefs, health circumstances, family problems or other sensitive personal information. We encourage members to avoid including unnecessary personal details and to obtain consent before naming another person. A public prayer request or testimony is not confidential. Private ministry submissions should be accessible only to personnel with a legitimate role, subject to safety and legal exceptions. The ministry should not publish identifying prayer or counselling details for promotion without an appropriate lawful basis and permission.
Photos, video, audio and broadcasts
Photographs, recordings, live events, radio and television submissions may contain personal information about participants or bystanders. We seek appropriate notices, permissions or other lawful grounds before collecting or publishing identifiable media where required. Members should avoid uploading material depicting another person without authority. Third-party livestream, video and social providers may collect usage information under their own privacy policies.
AI assistant and automated features
Questions and messages submitted to the AI assistant may be sent to configured technology providers to generate answers and support abuse prevention. Avoid sharing passwords, confidential counselling records, financial credentials or identity documents. AI-generated advice can be wrong and should not be treated as a substitute for professional or pastoral judgment. The ministry should review provider settings, access controls and retention practices before representing any AI interaction as confidential or automatically deleted.
Social connections, notifications and third-party sharing
If you choose social login, sharing, cross-posting, notifications or linked external services, information needed to complete the action may be transferred to the chosen provider. Public social shares may expose your activity to that provider and its audience. You may manage supported notification, connection and privacy choices through the relevant service settings; disconnecting an integration may not erase information already held by the third party.
Member safety, visibility and account controls
Where supported, members may use privacy, block, report and account-management tools to limit interactions. We encourage strong passwords and caution about suspicious fundraising, romance scams, impersonators and unsolicited links. Deleting a post or account may not remove screenshots, independently reshared content, lawful moderation records or copies held by external services. Requests for access, correction or deletion remain subject to applicable rights and exceptions.
Last updated: 16 October 2026. This notice describes the platform as currently built and should be reviewed when jurisdictions, providers or processing activities materially change.