Clear information before you share

Privacy Notice

Last updated: 27 October 2026

Who is responsible for the information

The controller of information collected through the site is Global Catalytic Ministries, Inc., a United States registered nonprofit organization recognized under section 501(c)(3).

Registered address: 7300 State Highway 121, Suite 300, McKinney, TX 75070, United States
Privacy email: deskrepintlbiz@gmail.com

The site presents and operates publicly under a team identity. No individual is named publicly as the data controller.

Who the site is for

Site forms and accounts are for adults aged 18 and over only. There is no parent or guardian permission route on the site. A minor accompanied by a parent is handled by a person, never through a site form.

Information we receive

  • A first name or nickname, telephone or WhatsApp number, and email address, according to what you choose to provide.
  • Content you choose to write in an enquiry, support request, or note shared with the team.
  • Operational context such as language, page, journey, story, or lesson number; communication-channel choice; and sharing consent.
  • For course accounts, a one-way password hash, account status, and latest day marked complete.
  • Operational security information such as references, timestamps, one-way session-token hashes, and rate-limit data.

You are not legally required to give us information; providing it is your choice. Without the contact details needed for your selected channel, we cannot reply or open that channel. Without account details, we cannot create an account or remember progress. Personal spiritual answers are not required to complete a course day.

What stays only on your device

A story note that you do not choose to share with the team remains only in your browser’s local storage. It is not sent to the server. You can remove it by clearing the site’s data in your browser.

Why we use information

We use information to respond to enquiries; support a new group or study journey; create and secure an account, remember progress, and enable password reset; notify the team operationally; prevent abuse and duplicate submissions; and handle privacy requests.

We process it to provide the service you request and according to the choices and consents you give, to meet legal obligations, and where necessary to protect the site, its users, and the controller’s legal rights. We do not use personal information for automated decision-making.

Who receives information

Information is stored in the site infrastructure and Cloudflare database. Operational enquiries and registrations are sent through a Desk Rep connection to the desk’s Gmail inbox, creating an email copy separate from the database. Resend is not active at present.

If you choose WhatsApp, after the enquiry is saved your device opens a short message to an international WhatsApp desk at +359 88 338 8047. Only if you choose to send it will WhatsApp/Meta receive the message and their ordinary usage data. Personal message text entered in the site form is not automatically included in that short message.

Processing across countries

The controller is registered in the United States and the site is available to visitors in all countries. Information sent through the site may therefore be transferred to and processed in the United States and in countries where Cloudflare, Google, WhatsApp/Meta, or the international desk operate. Privacy laws in those places may differ from those where you live. Contact us for more information about the providers and safeguards applicable to a particular transfer.

Measurement and campaigns

The site does not install Meta Pixel, Conversions API, Google Analytics 4, Google Tag Manager, or session replay. Campaign and UTM parameters are not stored with a phone number, account, or enquiry content and are not added to an identity record. Free-form and pastoral content is prohibited from measurement tools, URLs, event names, and labels.

How long information is kept

Enquiry records and message content are deleted from the active database one year after collection. A course account, its progress, and linked records are deleted after one year without relevant activity. An automatic deletion job runs daily. Each run leaves a date-and-count-only audit record, which is itself deleted after one year.

Shorter security periods apply to temporary items: a normal login session lasts seven days; a password-reset code one hour; the secret in a personal invitation link seven days; and a rate-limit window 15 minutes. Expired rows are removed by the next daily deletion run.

What the daily deletion does not delete

The automatic deletion covers the site’s active database and application audit records. It does not delete email copies already delivered to Gmail, a WhatsApp conversation that you send, or temporary copies in provider backup and recovery systems.

Gmail copies are retained independently of the database, according to mailbox handling and Google settings, and may remain after the database enquiry has been deleted. WhatsApp conversations and provider data follow the account and retention practices of WhatsApp/Meta. After deletion from the active database, Cloudflare recovery systems may retain the deleted state for the recovery period of the applicable plan. These copies are outside the reach of the application’s daily deletion job.

An unshared private note remains only in your browser until you clear or replace it. The site does not receive it and cannot delete it remotely.

Access, correction, deletion, and other rights

You can request access, correction, or deletion by emailing deskrepintlbiz@gmail.com or selecting “A privacy or deletion request” on the contact form. We will ask for enough information to verify the request. Depending on the law that applies, you may also have rights to restrict processing, object, receive portable data, withdraw consent, and complain to the competent supervisory authority in your country.

A deletion request includes a check of the database and operational copies under our control, including the desk mailbox. Deletion by an external provider may be subject to that provider’s capabilities, backup periods, and applicable law. After handling a request, we retain only a minimal audit record: internal reference, date received, systems checked, action, and completion date; and, if an item must be retained, what was retained, why, the legal basis, and expected deletion date. It does not contain the original message or pastoral content.

Security and access

At present, only the site’s sole top administrator is authorized to access administrative information. We use access controls, password and token hashing, rate limits, and structural separation between pastoral content and any future measurement. No online system can be completely immune from risk.

Contact

Privacy email: deskrepintlbiz@gmail.com
Controller: Global Catalytic Ministries, Inc.
Registered address: 7300 State Highway 121, Suite 300, McKinney, TX 75070, United States