Data handling

01Controller

The Plan de DIOS project, owner of iglesiaplandedios.com, domiciled in Colombia. Contact at contacto@iglesiaplandedios.com and WhatsApp +57 313 3740009.

This document serves as the information handling policy required by Decree 1377 of 2013.

02Purposes

We process your data for two purposes, and no others:

• To pray for what you ask, through the prayer team.
• To reply to you and walk alongside you through the contact you provided.

03Databases that exist

There are exactly two, and both live on the site’s server:

• Prayer requests: date, request text and — unless sent anonymously — name, contact, place and IP.
• Contact messages: date, name, contact, subject, message and IP.

04Where it is stored and who has access

In server files that are not reachable from the internet: they are blocked at the web-server level and no page displays them.

Access is limited to the team members responsible for replying and for praying. There is no public admin panel and no third-party access.

Alongside storing it, an email notice may be sent to the team so the request does not sit waiting. That email contains the same thing you wrote.

05Anonymous submission

If you tick anonymous submission on a prayer request, we store no name, no phone or email, and no IP address. Only the text and the date remain.

This is a design decision, not an empty promise: the fields are discarded before anything is written to the server. The trade-off is that we cannot reply to you.

06Security

The site is served encrypted. Submissions are rate-limited by IP address to stop automated sending, and the data files are kept out of public reach.

No system is infallible. If an incident affected your data, we would tell you and report it to the authority as required by law.

07Processors and third parties

Google Analytics, which measures how many people visit the site.

Microsoft Clarity, which anonymously records how the site is used — scrolling, clicks and navigation — to spot what is confusing. The prayer and contact forms are masked: their contents are never recorded.

Google Tag Manager, the container from which the measurement tools above are loaded.

The hosting provider that maintains the server where the site lives.

The email service that delivers the notice to the team.

If you write by WhatsApp, that conversation is also governed by the application’s own terms, which are outside our control.

08International transfers

Servers and email services may be located outside Colombia. We choose providers offering adequate data-protection guarantees, and by authorising the processing you accept that transfer.

09Withdrawing authorisation

Write to us and ask. No special format and no justification needed: a message saying you want us to stop processing your data is enough.

Withdrawing does not undo what came before, but it stops everything after. If you also want it deleted, say so and it is deleted.

10Queries and complaints procedure

Address them to contacto@iglesiaplandedios.com or WhatsApp +57 313 3740009, identifying yourself and stating what you are requesting.

Queries: up to ten business days, extendable by five more with notice of the reason.

Complaints: up to fifteen business days, extendable by eight more with notice of the reason. If a complaint arrives incomplete, we will tell you within the following five days.

If you are not satisfied, you may turn to the Superintendency of Industry and Commerce.

11Term

This policy applies from the date shown above. The databases are kept while the project operates and for as long as they are necessary for the purposes described.