Privacy Policy

Effective Date: December 2, 2025

At The Faith Fund (thefaithfund.org), a ministry of HCJB Global (New Zealand) Trust, we are committed to handling every gift and every piece of personal information with the utmost integrity, as faithful stewards of what the Lord has entrusted to us (Luke 16:10).  
This Privacy Policy explains how we collect, use, protect, and (when necessary) share the limited personal information you provide when you visit our website or make a donation. We operate under New Zealand law, including the Privacy Act 2020.

 If you have any questions, please contact us at office@reachbeyond.nz.

 

### 1. Information We Collect
We collect only what is reasonably necessary to process your donation and meet legal obligations.

 

**When you donate, we collect**  
- Your name  
- Email address  
- Postal address (for tax receipts)  
- Phone number (optional)  
- Donation amount and any message you choose to include  

 

**Payment information**  
Full payment card details are collected and processed directly by our PCI-DSS-compliant payment processor (currently Stripe). We never receive or store your full card number.

 

**Automatically collected information**  
- IP address, browser type, device information, and pages visited (via server logs and essential cookies)  
- Anonymised analytics data via Google Analytics (IP anonymisation enabled)

 

We do not collect sensitive personal information unless you voluntarily provide it (e.g., a prayer request).

 

### 2. How We Use Your Information
We use your information only for the following purposes:

 

- To process and receipt your donation  
- To issue official tax receipts (required by Inland Revenue and the IRS where applicable)  
- To send a thank-you note and occasional ministry updates (you may opt out at any time)  
- To meet legal and auditing requirements  
- To prevent fraud and keep the site secure  
- To improve the website’s functionality (using anonymised data only)

 

We will never use your information for marketing or share it with other organisations for their own purposes.

 

### 3. Sharing and International Transfers
We do not sell, rent, or trade your personal information. We share it only in these limited circumstances:

 

| Recipient                  | Purpose                              | Location      | Safeguards in place                                 |
|----------------------------|--------------------------------------|---------------|-----------------------------------------------------|
| Stripe, Inc.               | Process card payments                | United States | 2021 Standard Contractual Clauses + Transfer Impact Assessment |
| Xero Limited               | Accounting & receipting              | New Zealand / Australia | Within adequacy zone or Binding Corporate Rules |
| Google LLC (Analytics)     | Anonymised website analytics         | United States | 2021 Standard Contractual Clauses + IP anonymisation |
| Inland Revenue / IRS       | Tax reporting (where required)       | NZ / USA      | Legal obligation                                    |
| Professional advisors / auditors | Legal or audit requirements    | New Zealand   | Confidentiality agreements                          |
| Law enforcement            | Only if required by New Zealand law  | New Zealand   | Legal obligation                                    |

 

You may request a copy of the safeguards we rely on by emailing us.

 

### 4. Data Security and Retention
- All donation pages use TLS 1.3 encryption.  
- Access to personal information is restricted to a small number of authorised staff and volunteers on a need-to-know basis.  
- Donor records are retained for **10 years** to meet Inland Revenue and audit requirements, after which they are securely destroyed.  
- If a privacy breach occurs that is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner without undue delay, as required by Part 6 of the Privacy Act 2020.

 

### 5. Cookies and Tracking
We use only essential cookies to make donations work and a single analytics cookie (Google Analytics with IP anonymisation).  
A cookie banner appears on your first visit giving you the choice to accept or reject analytics cookies.

 

### 6. Children
Our website is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we discover we have done so, we will delete it immediately.

 

### 7. Your Privacy Rights (under the Privacy Act 2020)
You have the following rights, free of charge (unless the request is manifestly unfounded or excessive):

 

- To access the personal information we hold about you  
- To request correction of inaccurate information  
- To request deletion of your information (subject to our 10-year tax-retention obligation)  
- To opt out of ministry updates at any time (via the unsubscribe link or by reply email)  
- To lodge a complaint with the Office of the Privacy Commissioner (www.privacy.org.nz)

 

To exercise any right, email office@reachbeyond.nz. We will respond within **30 calendar days**.

 

### 8. Changes to This Policy
We may update this policy from time to time. If we make **material changes** that reduce your privacy rights, we will notify you by email (where we have your address) or by a prominent notice on the website before the change takes effect, and (where required) seek your consent.

 

Minor clarifications or improvements will be posted here with a new effective date.

 

### 9. Contact Us
The Faith Fund  
c/o HCJB Global (New Zealand) Trust  
PO Box 97610, Manukau, Auckland 2241, New Zealand  
Email: office@reachbeyond.nz  
Privacy enquiries will be answered within 5 working days.

 

Thank you for your trust and partnership in the Gospel. May the Lord richly bless and multiply every gift given in faith.