Effective date: 2/1/2016
Website: https://www.mountgraceconvent.org
Organization: Mount Grace Convent (“we,” “us,” “our”)

Mount Grace Convent is committed to respecting your privacy and safeguarding the personal information you share with us. This Policy explains what we collect, how we use it, and the choices and rights you may have.

1) Information we collect

We collect information in three ways:

a) Information you provide directly

• Contact forms / prayer requests / inquiries: name, email address, message content, and any information you choose to share.
• Donations and event registrations (if applicable): name, email, billing address, donation amount, and limited payment details processed by our payment processor (we do not store full card numbers on our servers).
• Newsletter sign‑ups: name, email address, communication preferences.

b) Information collected automatically

• Log and device data: IP address, browser type/version, pages visited, referring/exit pages, and timestamps (to keep the site secure and improve performance).
• Cookies and similar technologies: used for basic site functionality, preferences, and analytics. See “Cookies” below.

c) Information from third parties

• If you donate or register through a third‑party processor, we receive limited information from them to confirm your transaction (e.g., status and amount).

2) How we use your information

We use personal information to:

• Respond to your messages, prayer requests, or inquiries.
• Process donations, send tax/acknowledgment receipts, and manage donor or volunteer records.
• Send newsletters or updates when you subscribe (you can unsubscribe anytime).
• Maintain site security, prevent fraud/abuse, and analyze site usage to improve content and usability.
• Comply with applicable laws and regulations.

Legal bases (GDPR, where applicable): consent, performance of a contract (e.g., processing a donation you initiate), compliance with legal obligations (e.g., tax/records), and our legitimate interests in operating and improving our ministry and website, balanced against your rights and expectations. [gdprregulation.eu]

3) Cookies & analytics

• Essential cookies keep the site working (e.g., session management, security).
• Preference/performance cookies remember choices (e.g., language).
• Analytics: We may use privacy‑respecting analytics to understand site usage in aggregate (e.g., page views) to improve content; IPs may be truncated or anonymized when supported. You can control cookies through your browser settings; blocking some cookies may impact functionality. 

4) Donations and payments

If you donate online, your payment is processed by a third‑party payment provider. We receive confirmation details (e.g., amount/date), but not full payment card numbers.

5) Email communications

If you subscribe to our newsletter, we use your email address to send updates. You may unsubscribe at any time via the link in our emails. We only send emails with your consent or, where allowed, based on our legitimate interests and your relationship with us. [gdprregulation.eu]

6) Data sharing and disclosures

We do not sell your personal information. We share data only with:

• Service providers who help us operate the site, send emails, process donations, or provide analytics, bound by confidentiality and data‑protection obligations.
• Legal and safety: when required by law or to protect our rights, our community, or the public.
• Organizational transitions: if we restructure aspects of our ministry or its support entities, information may transfer consistent with this Policy and applicable law.

7) Data retention

We keep personal information only as long as needed for the purposes described above, e.g., donor records per applicable tax/charity laws, and routine logs for a limited period for security and analytics, then delete or anonymize it. [commission.europa.eu]

8) Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data we handle (e.g., TLS encryption in transit, access controls, and least‑privilege). No method of transmission or storage is 100% secure; we work to continually improve our safeguards. [commission.europa.eu]

9) Your privacy rights

Your rights depend on your location and applicable laws.

If you are in the European Union/EEA/UK (GDPR): You may have the right to request access, correction, deletion, restriction, portability, and to object to certain processing, as well as the right to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority. [gdpr-info.eu]

If you are a California resident (CCPA/CPRA): You may have the right to know the categories and specific pieces of personal information we collect, delete certain information, correct inaccuracies, opt out of sale or sharing of personal information, limit use/disclosure of sensitive personal information, and be free from discrimination for exercising your rights. We do not sell personal information. To exercise rights, use the contact methods below. [oag.ca.gov]

10) International data transfers

If you visit our site from outside the United States, your information may be processed on servers located in the U.S. We take steps consistent with applicable law to ensure appropriate protection for international transfers. [commission.europa.eu]

11) Children’s privacy

Our site is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13 without appropriate parental consent. If you believe a child provided us information, please contact us to request deletion.

12) Third‑party links

Our website may link to external sites (e.g., donation processors, video platforms). We are not responsible for the privacy practices of those sites. Please review their privacy policies.

13) Changes to this Policy

We may update this Policy from time to time. The “Effective date” above reflects the latest version. Material changes will be noted on this page or a site notice.

14) Contact us

• Email: privacy@mountgraceconvent.org
• Mailing address:
  
  1438 E. Warne Ave.
  Saint Louis, MO 63107
• Phone: 1-314-381-2654