Paul Presbyterian Church

Privacy policy

Paul Presbyterian Church (“the church”) values the personal information of its website members and handles it as follows under Korea's Personal Information Protection Act. We do not collect personal information from visitors who browse without signing up.

1. What we collect and why

  • Items: name, email address, sign-in records (sign-up and sign-in times)
  • Purpose: verifying members and managing access to the members-only photo album

Passwords are stored encrypted by the authentication service (Google Firebase); the church cannot see them.

2. Retention and deletion

  • Member information is kept until you delete your account.
  • If a membership request is declined, the name and email on the request are deleted immediately and the sign-in account within a month.
  • Requests still pending after 90 days, and accounts whose email is not verified within 90 days, are deleted.
  • Backups kept for incident recovery are encrypted and deleted after three months.

Electronic records are deleted in a way that cannot be restored.

3. Children under 14

Children under 14 cannot sign up. We ask you to confirm that you are 14 or older when signing up.

4. Service providers and storage abroad

  • Google LLC (Firebase): authentication, storage of member data and photos
  • Cloudflare, Inc.: website delivery and caching of public news and bulletins

Storage locations (checked October 2026):

  • Membership requests (name, email, approval status): Google Cloud Seoul region (Korea)
  • Sign-in accounts (email, hashed password, sign-in records): Google's authentication service (United States and other countries)
  • Event photos and bulletin files: Google Cloud US region (South Carolina, us-east1)

The sign-in accounts and the photo and bulletin files are transferred outside Korea to Google LLC for member authentication and for the photo gallery and bulletins. They are sent over encrypted connections when you sign up or when files are uploaded, and kept as described in section 2.

5. Your rights

You may ask to see, correct, delete, or stop the processing of your personal information at any time.

  • Name changes and account deletion: sign in and use the Account page.
  • Other requests: contact the privacy officer below by phone or email, and we will act without delay.

6. Event photos

Event photos are posted only in the members-only album, never on public pages.

  • We ask for consent before posting close-up photos, and parental consent for photos of children.
  • If you ask us to remove a photo, we will do so without delay.

7. Cookies and analytics

We do not use analytics tools. Browser storage keeps signed-in members signed in, and it is cleared when you sign out or close the browser (unless you choose to stay signed in).

8. Security measures

  • Administrator accounts require two-step verification.
  • All traffic is encrypted (HTTPS).
  • Administrator actions are logged and data is backed up regularly.

9. Privacy officer

You can also report privacy concerns to the Personal Information Infringement Report Center (118, privacy.kisa.or.kr).

10. Changes

This policy takes effect on the day the new website opens. Changes will be posted on this page.