Privacy
Privacy Policy
This policy explains how we collect, use, keep and protect personal data across our website, event registration and check-in, "My registrations", learning platform, ministry volunteering form, online giving and e-newsletter, and how you can exercise your rights.
Great Commission Church International (legally registered as 社團法人高雄市基督教大使命協會, Kaohsiung Christian Great Commission Association; “the Church”, “we”) respects your privacy. This policy explains how we collect, use, keep and protect personal data across our website, event registration and check-in, “My registrations”, learning platform, ministry volunteering form, online giving and e-newsletter, and how you can exercise your rights.
Last updated: 17 October 2026 Version: v1.1
1. Who collects your data
Great Commission Church International (legally registered as 社團法人高雄市基督教大使命協會, Kaohsiung Christian Great Commission Association) · No. 70, Bo-ai 2nd Rd., Zuoying Dist., Kaohsiung City 813, Taiwan · Tel (07) 556-1175 · info@gcc.org.tw · Privacy contact: Administrative staff (same contact details).
2. What we collect and why
| Service | Data | Purpose |
|---|---|---|
| Browsing the website | Connection logs (IP address, time, pages, browser/device type); with your consent only, page-view and interaction statistics (Google Analytics) | Run the site, keep it secure, prevent abuse, improve content |
| Event registration & check-in | Name, mobile, email; other fields listed on that event’s form (e.g., district/group, dietary needs); registration time and channel; IP address at registration; the time you agreed and the notice version; check-in time; ticket QR code | Handle registration, send tickets and notices, on-site check-in and attendance records, payment confirmation, pastoral care and contact |
| Event waitlist | Name, mobile (optional), email or LINE ID, ticket type and quantity, the time you joined, and the time you agreed and the notice version, when an event is full and you join its waitlist | Notify you in order when a spot opens and hold it for you; archived together with registration data after the event and deleted from the registration system |
| Bank-transfer reports (paid events) | When you press “I have transferred” for an event that requires advance payment: the transfer date, the last five digits of the account you transferred from, an optional note, the time of your report and the result of the check | Let finance staff match the transfer against the bank account and confirm payment; archived together with registration data after the event and deleted from the registration system |
| Registering with LINE | LINE user ID and display name (limited to the basic profile LINE provides) | Send your e-ticket and event notices; you must also enter and verify an email |
| ”My registrations” | The identity you verify with email or LINE login; email verification codes; what you do on that page (view, resend tickets, cancel, report a transfer, or submit a privacy request: inquire, correct, stop using, delete) | Let you view and manage your own registrations, and handle privacy requests |
| Events needing insurance or government reporting | ID / residence-permit number (requested only for such events, with the purpose stated on the form; not collected for general events such as Christmas) | Event insurance, government reporting |
| Courses (Moodle) | Name, email, account, course enrolment and learning records | Account activation, course administration, certificates |
| Ministry volunteering form | What you enter on the form, the time of submission, the time you agreed and the notice version | Contact you and arrange service placement |
| Online giving | Name, phone, giving ID (optional), item and amount, payment method, receipt option, note. Card details are handled on SinoPac’s payment page — we do not receive or store full card numbers | Process giving, confirm payments, reconcile, issue receipts, accounting, report donation data to the tax authority as the tax law requires |
| E-newsletter | No registration; the newsletter is hosted by Issuu and its policy applies once you click to load and read it | Provide the newsletter |
| Contacting us | What you choose to send | Reply to you |
We do not sell, rent or trade your personal data to any commercial third party.
3. Who uses your data
- Church staff, by role. Super-administrators and event administrators see full registration data; ID / residence-permit numbers can be seen and exported only by super-administrators and event administrators; check-in staff and finance staff see names only (phone, email and ID numbers are masked); finance staff can view payment records. Back-office access is limited to authorised staff and actions are logged.
- The Church’s pastoral-care system. So that we can stay in touch with you in future gatherings, events and pastoral care, we keep your registration and attendance records in the pastoral-care system the Church manages itself. They are used only by Church staff to care for and serve you, never for any other purpose, and you may ask us to stop using or delete them at any time. For events marked “shared with the pastoral-care system” we provide your name, mobile, email, LINE ID, registration status and channel, ticket count, ticket-holder name, valid/void status and check-in time, and — when the form asks them — whether it is your first time with us and the name of the person who invited you (the district/group you typed on the form is for reference only); this never includes ID numbers, notes, other custom answers or payment data. This use has no separate tick box; it is part of the single “I have read and agree” you give when registering. Records that staff have confirmed as Church-member records are also kept under the member rule in section 5.
- Service providers used to send email, send LINE messages and verify you are not a bot (see section 4).
- The tax authority. Where the tax law requires us to report donations, we provide the necessary donation data to the tax authority.
- When required by law, we disclose data as the law requires.
4. Third-party services and international transfer
| Service | Purpose | Data involved | Server location |
|---|---|---|---|
| Google (Workspace mail) | Send tickets, verification codes, notices | Email address, message content (incl. name and ticket) | May be outside Taiwan |
| LINE | LINE login and Official Account messages | LINE user ID, display name, message content | May be outside Taiwan |
| Google reCAPTCHA (only on pages with forms: event registration, waitlist, volunteering form, “My registrations”, online giving, etc.) | Anti-bot protection on forms | IP address, browser and device information, interaction signals (per Google’s service) | May be outside Taiwan |
| Google Analytics (only with your consent) | Website statistics | Anonymised browsing and device information | May be outside Taiwan |
| SinoPac payment services | Online giving payments | Data needed for payment (handled on their page) | Taiwan |
Embedded content (Google Maps, YouTube videos, Issuu e-newsletter): these companies are contacted only after you click “load”; nothing is sent to them before that. After loading, they may set cookies or record your visit under their own policies. Website fonts are served from the Church’s own server; your browser no longer contacts Google Fonts.
Our website and registration servers are managed by the Church and located in Taiwan; backups are encrypted and stored on the Church’s own storage.
5. How long we keep data
| Data | Retention |
|---|---|
| Event registration data (name, contact details, attendance) | After the event, a staff member archives the data and it is deleted from the registration system, which keeps only statistics that contain no personal data (head-counts etc.), permanently. So that we can stay in touch with you in future gatherings, events and pastoral care, the archived registration and attendance records are kept in the Church’s pastoral-care system, used only by Church staff to care for and serve you and never for any other purpose; there is no fixed deletion date, and you may ask us to stop using or delete them at any time (this is the rule for the event archive; records that staff have confirmed as Church-member records follow the next row) |
| Records confirmed by staff as those of a Church member | Kept for as long as the person remains a member; deleted within 2 years after the person leaves. When you ask us to stop using or delete your data, we handle that within the periods in section 7. Statistics that contain no personal data are kept permanently |
| ID / residence-permit numbers (only for events needing insurance or government reporting) | Deleted when the event is closed out and never put into the long-term archive; for events not yet closed out, deleted automatically at the latest 1 year after the event ends |
| Ministry volunteering form | Deleted automatically 1 year after submission |
| IP address recorded at registration | About 90 days (removed automatically) |
| Web access logs / system logs | About 14 days / about 90 days |
| Backups | Up to about 12 months (including manual backups); a backup is only a copy — the giving ledger itself stays in the live system and is not deleted by backup rotation, and is kept as stated below |
| Giving and receipt records | Kept for at least 10 years as required by tax and accounting law |
| Email verification codes | Removed within 2 days after use or expiry |
When data expires, or you ask us to stop using or delete it under section 7, we stop using it, delete it or make it unidentifiable, except data we must keep by law (e.g., giving accounting records).
6. How we protect your data
HTTPS everywhere; role-based back-office access with stronger login verification (two-step verification) being added; ID numbers and phone numbers are masked on tickets, emails and staff lists; the database is not exposed to the internet; encrypted nightly backups; system updates and logged back-office actions. No online service is perfectly secure; if a breach may affect you we will notify you as the law requires and explain what we are doing.
7. Your rights
Under Taiwan’s Personal Data Protection Act you may ask us to: inquire or review, provide a copy, supplement or correct, stop collecting, processing or using, or delete your personal data. Contact the privacy contact by email or phone with your name, mobile number or the event you registered for, or submit the request in “My registrations”. We verify your identity first and reply within the periods in Article 13 of the Act: inquiries, reviews and copies within 15 days of receiving your request; supplements, corrections, stopping use and deletion within 30 days; each may be extended by no more than 15 / 30 days when necessary, and we will tell you why. A reasonable fee may apply for inquiries and copies.
Data we must keep by law (e.g., giving and tax records) may be retained. If you do not provide required fields we may be unable to complete your registration, activate a course account or process a gift; optional fields do not affect this.
8. Cookies and browser storage
We use necessary cookies/browser storage (login, security checks, LINE-login flow, language preference). Analytics cookies are used only with your consent. See the Cookies page.
9. Children and minors
If you are under 18, please register, submit a form or give only with the company and consent of a parent or legal guardian. If you believe we have collected a minor’s data without consent, contact us and we will act promptly.
10. Changes to this policy
Updates are posted on this page with the new date and version; material changes affecting your rights are highlighted again when you register or give. When you register, the system records the time you agreed and the notice version shown to you.
11. Contact
Great Commission Church International — Privacy contact (Administrative staff) · info@gcc.org.tw · (07) 556-1175 · No. 70, Bo-ai 2nd Rd., Zuoying Dist., Kaohsiung City 813, Taiwan.