Effective Date: November 4, 2025

Last Updated: November 4, 2025

1. Purpose

This Privacy Policy explains how Steeples (“we,” “our,” “us”) collects, uses, and protects your personal data in compliance with Canadian privacy law, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. Information We Collect

• User Data: Email, approximate location, and usage analytics
• Parish Data: Names, contact info, schedules, and donation settings
• Automatic Data: IP address, browser type, cookies, and device data

3. How We Use Information

• To provide parish and schedule information
• To process donations via Stripe
• To improve the Service and personalize results

4. Legal Bases for Processing (GDPR)

• Consent
• Contract
• Legitimate interests
• Legal obligations

5. Sharing Information

We share limited data with service providers like Stripe and Supabase. We never sell your data.

6. Data Retention

Parish data may be retained indefinitely. User data is retained only as long as necessary to provide the Service or meet legal requirements.

7. Your Rights

• Access, correct, or delete your data
• Withdraw consent or object to processing
• Request data portability

Contact privacy@steeples.ca to exercise your rights.

8. International Data Transfers

Data may be processed in Canada or abroad under standard contractual clauses (SCCs).

9. Security

We use encryption and secure hosting, but no system is completely secure.

10. Cookies

Steeples uses cookies for session management and analytics. EU users will be prompted with a cookie consent banner.

11. Children’s Privacy

We do not knowingly collect data from children under 13.

12. Changes

We may update this policy periodically. Updates will appear on this page.

13. Contact

privacy@steeples.ca
Charlottetown, Prince Edward Island, Canada