We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and our information practices, meaning how and why we collect, use, disclose, sell, share, store, and retain your personal information. This policy also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint or request.

We collect, use, and are responsible for certain personal information about you. When we offer goods and services to individuals in the European Economic Area (EEA), we are subject to the EU General Data Protection Regulation (EU GDPR), which applies across the entire European Union. For California consumers, we are subject to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA). We are responsible as a “controller” of that personal information for the purposes of the GDPR. We are responsible for your personal information as a “business” under the CCPA/CPRA.

This privacy policy sets forth the privacy practices of The Episcopal Church and The Domestic and Foreign Missionary Society of the Protestant Episcopal Church in the United States of America (collectively, “The Episcopal Church,” or “we”). This policy only applies to information we collect from visitors to episcopalchurch.org and its family of websites (including, but not limited to, deputynews.org, episcopalarchives.org, episcopalcommonprayer.org, episcopalnewsservice.org, episcopalservicecorps.org, generalconvention.org, episcopalgbec.org, houseofdeputies.org, and latinosepiscopales.org,  login.episcopalchurch.org, titleiv.org, lectionary.episcopalchurch.org, vbinder.net, vocationhub.episcopalchurch.org, legislation.generalconvention.org, cvent.episcopalchurch.org) and explains how we treat your personal information.

1. It would be helpful to start by explaining some key terms used in this policy. The “Data Protection Officer” (as defined in regulation, including, but not limited to the General Data Protection Regulation) for The Episcopal Church and the Domestic and Foreign Missionary Society is Darvin Darling, director of information technology ddarling@episcopalchurch.org. For questions about this policy please contact the data protection officer or the chief legal officer, kanker@episcopalchurch.org. 
2. You may withdraw your consent or opt out from providing any information by contacting the director of information technology or the chief legal officer at (212) 716-6000 or (800) 334-7626 – or at info@episcopalchurch.org.

Personal information	Any information relating to an identified or identifiable individual
Special category personal information	Personal information revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs, and data concerning health or sexual orientation
Sensitive personal information	Personal information revealing a consumer’s social security number, driver’s license and passport numbers, account numbers and credentials, precise geolocation, racial or ethnic origin, religious beliefs, or sexual orientation, contents of a consumer’s mail, email and text messages where the business is not the intended recipient, genetic data, biometric information, or citizenship and immigration status

1. We may collect and use the following personal information, including sensitive personal information, that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:

Categories of Personal Information	Specific Types of Personal Information Collected
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, which could include, but is not limited to, their name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information	We collect the personal information that you make available via our website, including first and last name, email address, phone number, other contact details, and survey responses. We do not collect passport numbers, driver’s license or state identification card numbers, employment, employment history, or any other financial, medical, or health insurance information, except as required for specific purposes, such as applications for employment. We may collect personal and payment information in connection with a donation to The Episcopal Church. We also collect personal information to be added to particular email lists or other Episcopal Church resources managed through The Episcopal Church. We destroy any personally identifiable information once there is no appropriate use for it.
Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement)	We also collect some information automatically about your computer hardware and software, which can include IP address, browser type, domain name, access times, and referring website addresses. The information that we automatically collect does not by itself identify specific individuals and is statistical data typically aggregated with other data to help us improve our website.
Professional or employment-related information	We only collect this information in connection with an application for employment or if we provide a biography as part of an Episcopal Church function or position.
Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (FERPA)	We only collect this information in connection with an application for employment or if we provide a biography as part of an Episcopal Church function or position.

2. We only collect personal information about you from the following categories of sources:
   • You, directly in person, by telephone, text, or email, website, or applications.
   • Data analytics providers, such as Google Analytics, which receive only general and anonymous demographic information
   • Government entities
   • Operating systems and platforms
   • Cookies on our website
3. Under data protection laws, we can only use your personal information if we have a proper reason for doing so, for example:
   • To comply with our legal and regulatory obligations
   • For the performance of our contract with you or to take steps at your request before entering into a contract with you
   • For our legitimate interests or those of a third party to whom you have given consent

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

The table below explains what we use (process) your personal information for and our reasons for doing so:

What we use your personal information for	Our reasons
To provide services or information to you	For requested services
Screening for financial and other sanctions or embargoesOther processing necessary to comply with professional, legal, and regulatory obligations	To comply with our legal and regulatory obligations
Ensuring business policies are adhered to, e.g., policies covering security and internet use	For our legitimate interests or those of a third party, i.e., to make sure we are following our own internal procedures
Operational reasons, such as improving efficiency, training, and quality control	For our legitimate interests to determine general location of users for content provision, language, and cultural questions
Statistical analysis	For the Parochial Report and other research information
Preventing unauthorized access and modifications to systems	For our legitimate interests or those of a third party, i.e., to prevent and detect criminal activity that could be damaging for us and for you and to comply with our legal and regulatory obligations
Updating our records	To comply with our legal and regulatory obligations and our legitimate interests
Ensuring safe working practices, staff administration and assessments	To comply with our legal and regulatory obligationsFor our legitimate interests or those of a third party, e.g., to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you

For EEA Data Subjects: The above table does not apply to special category personal information, which we will only process with your explicit consent. 

EEA Data Subjects: Promotional Communications. We may use your personal information to send you updates at your consent (by email, text message, telephone, or post) about our services.

We will always treat your personal information with the utmost respect and never sell OR share it with other organizations for marketing purposes.

You have the right to opt out of receiving promotional communications at any time by:

• Contacting us at info@episcopalchurch.org
• Using the “unsubscribe” link in emails 

The Episcopal Church collects the personal information that you make available via our website, including first and last name, email address, phone number, or other contact details. 

Some functions on our website are managed by third parties, which have their own data privacy policies. The Episcopal Church encourages you to review the privacy statements of websites you choose to link to from episcopalchurch.org and related websites so that you can understand how those websites collect, use, and share your information. The Episcopal Church is not responsible for the privacy statements or other content on websites outside of The Episcopal Church websites or the websites to which we provide a link.

This policy went into effect June 2026.