Privacy Policy

St Mark Newcastle Mar Thoma Church collects and holds personal information to manage church membership, events, and communications. This policy explains how we handle that information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

• Name, contact details (email, phone, address)
• Event registration information
• Financial giving records (for PAYG summaries and receipts)
• Pastoral and membership notes (staff access only)

How we use it

• Managing membership and pastoral care
• Processing event registrations
• Sending giving receipts and church communications (with your consent)
• Financial record-keeping as required by the ATO

Disclosure

We do not sell or share your personal information with third parties except as required by law.

Data security

Sensitive personal information is encrypted at rest using AES-256-GCM. Access to member records is restricted to authorised church staff on a role-based basis, and all access is logged.

Cookies

We use a single session cookie to keep authorised staff logged in. We do not use tracking, advertising, or third-party analytics cookies.

Retention

We keep personal information only as long as it is needed. Event registration details (name, contact details and any answers you provide) are automatically anonymised six months after the event has finished — only the aggregate numbers needed for financial record-keeping are retained beyond that. Financial giving records are held for the minimum seven years required by the ATO.

Access and correction

You may request access to or correction of your personal information by contacting the church office. You may also request deletion of your records subject to our legal record-keeping obligations (minimum 7 years for financial records under ATO requirements).

Contact

For privacy enquiries, contact the church office at newcastlemarthomachurch@stmarknmtc.com. This policy may be updated from time to time.