Privacy policy
Effective date: 21 September 2026.
Kuriake Castle is responsible for the personal information it collects and uses through kuriakecastle.org for the ministry directory, annual registration, payments and support. Privacy requests can be sent to kuriakecastle@gmail.com.
Information we collect
Registration information includes your name, email address, telephone number, date of birth, gender, ministry role, organisation, denomination where applicable, city, country and official photograph. Bishops also submit information about pastors under their oversight, including names, dates of birth and contact details where supplied.
We maintain ministry records provided by participating churches and the office, annual lists, registration decisions, corrections, account activity and support correspondence.
Payment records include the payer's account identity, amount, currency, transaction reference, purpose, status and any uploaded receipt. Never send us a card PIN, MoMo PIN, password or one-time payment code.
Sign-in and security records include session identifiers, login times and technical request information used to protect accounts and investigate misuse. Our cookie policy explains browser storage.
Why we use information
We use information to administer accounts and annual registrations, match people to ministry records, verify bishop and pastor relationships, maintain the directory, confirm payments, respond to enquiries, prevent fraud and maintain administrative and financial records.
We rely on consent where requested, performance of registration services, applicable legal obligations and legitimate administrative or security purposes where permitted by law. Ministry information may reveal religious affiliation and requires the appropriate lawful permissions and safeguards. Authorised submitters must have authority to provide information about other people.
Required fields are identified on the registration form. Without information needed to verify identity or ministry affiliation, registration may not be completed.
Public and private information
The public directory displays ministry information: name, title, photograph, organisation, denomination, city, country and the relevant bishop relationship. Public information can be viewed or copied by visitors and may appear in search engines.
Personal email addresses, telephone numbers, dates of birth, receipts and private account records are not displayed publicly. Authorised office staff access information needed for administration. Supervising bishops access relevant pastor information for oversight and verification. Receipt access is restricted to the submitting member and authorised office staff.
Providers and disclosures
We use Hostinger for hosting and database services, Cloudflare R2 for image storage, and email providers including Resend where configured. Support reports may also be delivered to an office notification service. Providers receive information needed for their functions and have their own applicable privacy terms.
We may disclose information where required by law or necessary to investigate fraud, protect accounts or resolve a payment dispute. We do not sell personal information or use directory records for unsolicited advertising.
Providers may process information outside Ghana. International processing is subject to applicable data protection requirements; this policy does not represent that every record is stored in one country.
Retention and security
We retain account, ministry and annual registration records for as long as needed to operate the service, maintain the history of the roll, resolve disputes and meet applicable recordkeeping obligations. Financial records may need to be retained after account closure. Deletion requests are considered against these purposes, including any necessary retention of backups.
We use HTTPS, access controls, server-side session checks and restricted access to private uploads. Uploaded images are re-encoded and embedded metadata is removed. No online service can guarantee complete security.
Your rights
Subject to applicable law, you can request access, correction, withdrawal of consent where processing depends on it, removal from public display or deletion. You may object to certain processing and raise a complaint. Where records must be retained, we will explain why.
Email kuriakecastle@gmail.com to make a request. We may verify your identity before releasing or changing records. Withdrawal of consent does not undo earlier lawful processing. You may also complain to Ghana's Data Protection Commission at dpc.gov.gh.
Policy updates
Changes are published here. Material changes to the purposes or public use of personal information will be explained before taking effect, with renewed consent requested where required.