Privacy Policy

1. Introduction

Welcome to HOTR Calendar ("we," "our," or "us"), a calendar subscription service operated by House on the Rock Port Harcourt. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services at hotr-calendar.vercel.app (the "Service").

This Privacy Policy is prepared in compliance with the Nigeria Data Protection Regulation (NDPR) 2019, the Nigeria Data Protection Act 2023 (NDPA), and other applicable data protection laws. We are committed to protecting your privacy and ensuring transparency in how we handle your personal data.

By using our Service, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

3.1 Information You Provide Directly

When you subscribe to our calendar service, we collect the following personal information:

• Full Name: Your first and last name for personalization
• Email Address: For communication and account identification
• Phone Number: Optional, for additional contact purposes
• Date of Birth: To determine your age group for relevant events
• Gender: To personalize event recommendations
• Country: To understand our user demographics
• Relationship Status: To recommend relevant programs and events
• Interests: Your selected preferences (e.g., youth, worship, families) for personalized calendar feeds

3.2 Information from Google OAuth

If you choose to connect via Google, we may access:

• Basic Profile Information: Your name and email from your Google account
• Calendar Access: Permission to add events to your Google Calendar (only when you explicitly subscribe)

Important: We do not read, modify, or delete any existing events in your Google Calendar. We only add church events that you have subscribed to receive.

3.3 Automatically Collected Information

When you access our Service, we may automatically collect:

• Device Information: Browser type, operating system
• Usage Data: Pages visited, time spent, interaction patterns
• IP Address: For security and analytics purposes

4. Legal Basis for Processing

Under the Nigeria Data Protection Act 2023 and NDPR 2019, we process your personal data based on:

• Consent: You provide explicit consent when subscribing to our Service
• Legitimate Interest: To provide personalized calendar services and communicate relevant church events
• Performance of Service: To fulfill our commitment to deliver personalized event notifications

5. How We Use Your Information

We use your personal information for the following purposes:

• To create and manage your personalized calendar subscription
• To filter and deliver events relevant to your age group, gender, and interests
• To sync church events with your preferred calendar application
• To communicate important updates about church events and services
• To improve our Service and user experience
• To maintain security and prevent fraud
• To comply with legal obligations

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services (such as hosting providers and database services) that help us operate our Service, under strict confidentiality agreements
• Legal Requirements: When required by Nigerian law, court order, or government regulations
• Church Leadership: Aggregate, anonymized data may be shared with church leadership for planning purposes (no individual identification)
• With Your Consent: In any other situation where you have given explicit consent

7. Google OAuth and API Usage

Our Service uses Google OAuth for authentication and calendar integration. Here's what you need to know:

7.1 Permissions We Request

• Read your basic Google profile (name, email)
• Add events to your Google Calendar (write-only access for subscribed events)

7.2 How We Use Google Data

• We use your Google profile information solely for authentication and personalization
• We only add church events to your calendar that you have explicitly subscribed to
• We do not read, modify, or delete any of your existing calendar events
• We do not share your Google data with any third parties

7.3 Revoking Google Access

You can revoke our access to your Google account at any time through:

• Your Google Account settings at myaccount.google.com/permissions
• Contacting us directly to remove your subscription

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS protocols
• Secure database storage with access controls
• Regular security assessments and updates
• Limited access to personal data by authorized personnel only

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We encourage you to contact us immediately if you suspect any unauthorized access to your account.

9. Data Retention

We retain your personal data for as long as your subscription is active or as needed to provide you with our Service. Specifically:

• Active Subscriptions: Data is retained while your subscription is active
• Inactive Accounts: Data may be retained for up to 24 months after last activity
• Upon Request: We will delete your data within 30 days of receiving a valid deletion request
• Legal Requirements: Some data may be retained longer if required by Nigerian law

10. Your Rights Under Nigerian Law

Under the Nigeria Data Protection Act 2023 and NDPR 2019, you have the following rights:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw your consent at any time

To exercise any of these rights, please contact us at info@hotrportharcourt.com. We will respond to your request within 30 days.

11. Cookies and Tracking Technologies

We use essential cookies necessary for the operation of our Service. These cookies are required for authentication and session management. We do not use advertising or tracking cookies.

You can control cookies through your browser settings. However, disabling essential cookies may affect your ability to use our Service.

12. Children's Privacy

Our Service is intended for users of all ages within the church community. For users under 18 years of age, we recommend that parents or guardians supervise the subscription process and provide consent on behalf of minors.

We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child under 13 without appropriate consent, please contact us immediately.

13. International Data Transfers

Our Service is hosted on servers that may be located outside Nigeria. By using our Service, you consent to the transfer of your information to countries outside Nigeria, including for processing and storage purposes.

When transferring data internationally, we ensure appropriate safeguards are in place in accordance with the Nigeria Data Protection Act 2023 and use service providers that maintain adequate data protection standards.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification for significant changes (if we have your email)

We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Complaints

If you are not satisfied with how we handle your personal data or your complaint, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):