Privacy Policy

Data controller: The Church of God (Seventh Day) in Jamaica and the Cayman Islands — Faithful Youth Challengers' Department, 65 Carawina Avenue, Kingston 20, Jamaica.

For any privacy question, or to exercise your rights, contact our data-protection team at fycbuzz.jm.con1@gmail.com or 1 (876) 765-8442 / 8464. As a non-profit religious organisation, we are not required to appoint a Data Protection Officer (Data Protection Act, 2020, s.20(6)).

This policy covers personal data collected through this website. The main place we collect personal data is the Summer Camp registration form. We also receive information when you contact us by email, and when you choose to complete forms we link to that are hosted by third parties (for example, an event survey hosted on Google Forms).

When you register for camp, we collect:

• Personal details — full name, phone number, sex, age, and address;
• Next-of-kin details — the name, relationship, phone number, and address of your emergency contact;
• Church background — whether you are or have been a Christian, your home church, and pastor details;
• Camp background — attendance type, prior attendance, and house assignment;
• Your signature — drawn, uploaded, or provided as a digital-certificate reference — to confirm the registration.

We also receive any information you put in an email to us, and basic technical information your browser sends to our server (such as your IP address) which is used only to operate and secure the site.

Under the Act, some of what we collect is sensitive personal data: your religious background and your signature (a biometric). We process this sensitive data only on the basis of your explicit written consent, which you give by ticking the consent box on the registration form. You can withdraw that consent at any time (see Your rights).

• To process your camp registration and run the camp — including contacting you and your next of kin and planning logistics. Lawful basis: your consent, and the necessity of processing to take the steps you have requested to register.
• To respond to you when you contact us. Lawful basis: our legitimate interest in answering enquiries.
• To keep the site secure and prevent abuse. Lawful basis: our legitimate interests.

We use your information only for these purposes and will not use it for an unrelated purpose without telling you first. We do not make automated decisions about you.

The camp is open to persons 16 years and over, and some registrants may be minors (under 18). Where the registrant is a minor, the registration and the consent on the form must be given by a parent or guardian. If you believe a minor has provided us data without guardian consent, contact us and we will address it.

We do not sell your personal data, and we do not share it with third parties for their own purposes. We share it only with:

• Authorized FYC camp administrators who need it to run the camp;
• Service providers who process data on our behalf under contract — principally our cloud hosting provider, whose servers are located in the United States. Where you use a linked third-party form (such as a survey on Google Forms), that information is provided to, and handled under the privacy policy of, that provider.

We choose providers that offer appropriate security guarantees and require them, by contract, to act only on our instructions and to protect your data.

Your personal data is stored and processed on servers located outside Jamaica — in the United States (Atlanta, Georgia). Because this is a transfer outside Jamaica, we rely on your consent to the transfer (a permitted basis under section 31 of the Act) and take steps to ensure your data continues to be protected.

We keep camp registration data for 6 months after the camp, after which it is deleted. Emails you send us are kept only as long as needed to deal with your enquiry. We do not keep personal data longer than necessary for the purposes described above.

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or damage — including access controls on the administrator area, limiting who can see submissions, and safeguards on the registration form. We continue to work to strengthen these measures, including encryption of stored data.

If a breach of security affects your personal data, we will notify the Office of the Information Commissioner within 72 hours of becoming aware of it, and we will inform you and tell you what we are doing about it, as required by the Act.

Under the Act you have the right to:

• Access the personal data we hold about you (we respond within 30 days);
• Correct inaccurate or incomplete data (we respond within 30 days);
• Object to or restrict our processing in certain circumstances (we respond within 21 days);
• Withdraw your consent at any time, and ask us to delete your data;
• Request a copy of your data in a portable format, where technically feasible.

To exercise any of these rights, contact our data-protection team using the details in section 1. You also have the right to complain to the Office of the Information Commissioner (Jamaica) if you are unhappy with how we have handled your data.

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date above. Material changes affecting how we use your data will be brought to your attention where appropriate.

Questions about this policy or your data? Email fycbuzz.jm.con1@gmail.com, call 1 (876) 765-8442 / 8464, or write to us at 65 Carawina Avenue, Kingston 20, Jamaica.