Voice of the Last Days Ministry ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This policy is issued in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection laws of European Union member states. It applies to all personal data we process as a data controller.

Data Controller:
Voice of the Last Days Ministry — WCCRM
Email: privacy@voldmeurope.com

We may collect and process the following categories of personal data:

• Identity Data: Full name, first name, surname.
• Contact Data: Email address, phone number, country of residence, postal address.
• Church Affiliation Data: Church branch or location you attend.
• Retreat Registration Data: Names and ages of family members attending the retreat with you, payment information, and any special requirements you disclose.
• Donation Data: Donation amounts, purpose, and payment transaction identifiers.
• Prayer Request Data: Personal prayer requests you voluntarily share, including your name, location, and contact details.
• Technical Data: IP address, browser type, device information, and usage patterns collected automatically when you visit our website.

We collect personal data through:

• Direct interactions: When you register for our retreat, submit a prayer request, make a donation, become a member, or fill in any form on our website.
• Automated technologies: Cookies and similar tracking technologies that collect technical data as you browse our site.
• Account creation: When you sign up or sign in to access member-only features.

Under GDPR, we rely on the following lawful bases to process your personal data:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., receiving ministry updates, processing prayer requests).
• Contractual necessity: Where processing is necessary for the performance of a service you have requested (e.g., retreat registration, donation processing).
• Legitimate interests: Where processing is necessary for our legitimate interests in operating and improving our ministry services, provided your rights do not override those interests.
• Legal obligation: Where we need to comply with a legal or regulatory obligation (e.g., financial record-keeping for donations).

We use your personal data only for the following purposes:

• To manage retreat registrations, payments, and confirmations.
• To process donations and maintain financial records.
• To receive and pray over submitted prayer requests.
• To maintain church membership records and track visitor follow-ups.
• To communicate with you about ministry events, services, and announcements.
• To improve our website and services through analytics.
• To comply with legal obligations and enforce our terms of service.

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not engage in automated decision-making or profiling that produces legal effects concerning you.

Our website uses essential cookies required for authentication and session management. These cookies are necessary for the website to function and cannot be disabled. We may also use analytics cookies to understand how visitors interact with our site — these are only placed with your consent.

You can control cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.

We share your personal data only with the following categories of recipients:

• Payment processors (PayPal): To process retreat payments and donations securely. PayPal acts as an independent data controller for payment transactions. View PayPal's privacy policy at paypal.com/privacy.
• Email service provider: Our SMTP email infrastructure (SiteGround) is used to send automated confirmation and notification emails.
• Hosting and infrastructure: Our website is hosted on the Base44 platform, which provides the technical infrastructure for data storage and processing.
• Legal authorities: Where required by law, court order, or governmental regulation.

We ensure that all third-party service providers are contractually bound to process your data only on our instructions and in compliance with GDPR.

Your personal data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, to our hosting or payment processing providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or that the recipient country has an adequacy decision from the European Commission.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Retreat registrations and payments: Retained for the duration of the retreat event plus 12 months for administrative purposes.
• Donation records: Retained for the period required by applicable tax and accounting laws (typically 10 years).
• Prayer requests: Processed and then deleted after the prayer request has been addressed by our prayer team.
• Membership data: Retained for the duration of your membership and for a reasonable period thereafter.
• Account data: Retained until you delete your account or request erasure.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit (TLS/SSL).
• Secure authentication and access controls.
• Regular security assessments of our infrastructure.
• Limited access to personal data on a need-to-know basis.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

As a data subject within the EU/EEA, you have the following rights:

• Right of access (Article 15): You can request a copy of the personal data we hold about you.
• Right to rectification (Article 16): You can ask us to correct inaccurate or incomplete personal data.
• Right to erasure (Article 17): You can request deletion of your personal data where there is no compelling reason for continued processing ("right to be forgotten").
• Right to restriction of processing (Article 18): You can ask us to restrict processing of your personal data in certain circumstances.
• Right to data portability (Article 20): You can request your data in a structured, commonly used, machine-readable format and have it transferred to another controller.
• Right to object (Article 21): You can object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent (Article 7): Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint (Article 77): You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data protection rights have been infringed.

To exercise any of your data protection rights, please contact us:

We will respond to your request within one month of receipt. Where the request is complex or numerous, this period may be extended by a further two months; we will inform you of any such extension within one month of receipt.

We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless the request is manifestly unfounded or excessive.

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. Retreat registration data for minors (children attending with family) is collected through the adult registrant, who is responsible for providing consent on behalf of the minor.

If you believe we have inadvertently collected data from a child under 16 without appropriate consent, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.