Amazing GraceBible Church One family · many nations · one amazing grace
How Amazing Grace Bible Church collects, uses and protects your personal information, on this website and in the AGBC Global app.
Last updated October 4, 2026
We are a church, not an advertising business. We ask for as little as we can, we never sell your information, and this site runs no analytics or advertising trackers at all. The AGBC Global app measures how it is used only if you say yes.
The contact form asks for your name, your email address, your message, and which branch it should reach. We use it to read and answer you, and for nothing else. Your message is delivered to that branch inbox by email; this website does not save it to a database. Lawful basis: our legitimate interest in answering people who contact us (Article 6(1)(f) GDPR).
Grace Academy registration asks for your name, email address, city, country, the course and format you chose, and, where a course has one, confirmation that you have completed the prerequisite. We store that along with the fee, the currency and whether payment succeeded, so that we can enrol you and run the course. Lawful basis: performance of our contract with you (Article 6(1)(b)), and our legal obligation to keep accounting records (Article 6(1)(c)).
The giving form asks for your name, email address, the amount, whether the gift is one-off or monthly, the branch it is for, what it is for (tithe, offering, missions, building fund or general) and an optional reference note. We keep that as the record of your gift and to confirm it to you. Lawful basis: performance of a contract (Article 6(1)(b)), and our legal obligation to keep financial records (Article 6(1)(c)).
Payments are taken by Stripe on Stripe’s own checkout pages. Your card number never touches our servers and we never store it. We keep Stripe’s reference for the payment and whether it succeeded. Books are sold through Payhip, who handle that checkout and sell the book to you directly.
Our host keeps ordinary server logs (IP address, time, page requested, browser) to keep the site running and secure. When you submit a form, your IP address is held in memory for about a minute so we can limit how often the form can be sent, and it is passed to Cloudflare to check that a person rather than a bot submitted it. Your light or dark theme choice is stored in your own browser and is never sent to us.
Registering for a Bible course, giving to a church, or taking part in the life of the church through our app (sharing a testimony, asking for prayer, praying for someone, checking in at a service) can reveal something about your religious beliefs, and a healing testimony can reveal something about your health. The law treats both as special categories of personal data (Article 9 GDPR).
We process it as a not-for-profit body with a religious aim, in the course of our legitimate activities, about people who are members of the church or in regular contact with it, and we do not disclose it outside the church without your consent (Article 9(2)(d)). Where you tick the consent box on a form, or confirm the consent step before you post in the app, we also rely on your explicit consent (Article 9(2)(a)), which you can withdraw at any time.
Our app for Android and iPhone lets anyone watch, listen and read without an account. You only need an account to take part: to post, pray, check in, save, or receive notifications. This section covers what the app keeps and why.
Your email address (we send a sign-in code to it; it is never shown to anyone else), the name you choose, an optional profile photo, your home branch and your language. You confirm you are 16 or over when you create the account. Lawful basis: performance of our agreement to provide the app to you (Article 6(1)(b)).
What you write, and a photo if you add one to a testimony. Before anything is posted you see a consent step that says who will see it, and we record when you agreed and to which wording. A leader of your branch reads every post before anyone else can; once approved, it is visible to everyone using the app, in every branch, including people browsing without an account. You can ask for prayer anonymously: your name is then hidden from everyone except the leaders who review it. You can edit or delete your own posts at any time. Lawful basis: your explicit consent (Article 9(2)(a)), withdrawn by deleting the post or your account.
When you say Glory to God on a testimony, or say you will pray for a request and later that you have prayed, we record it. The person who posted it can see your name, and so can a leader reviewing that post if it has been reported. Everyone else sees only a number. The notification the author receives can include your name, for example “Ade Okafor and 3 others said Glory”. If you have committed to pray, the app may remind you until you mark it done.
When you tap “I’m here” at a service, we record that you gathered that day and at which branch, and work out your streak and milestones from it. Only you can see your rhythm (and the church’s administrators, who look after the system). Lawful basis: your explicit consent (Article 9(2)(a)), given by using the feature; you can delete it with your account.
Messages you save to My List, your sermon notes, and where you stopped in a message, so you can carry on. Your notes and your list are private to you. If you reply to an event (going or not), the leaders of that branch can see your reply. Videos play through YouTube’s player inside the app, so, as on this website, Google receives your IP address once you press play.
If you allow notifications, we store an identifier for your device so we can reach it, and the choices you make about which notifications you want. Notifications are delivered through Expo, and then Google (Android) or Apple (iPhone). We keep a list of the notifications we sent you, shown in the app, for 12 months. When you sign out, the device stops receiving your notifications.
If you report a post, we keep the report and your reason so leaders can act on it. If you block someone, only you can see that. Leaders’ decisions about posts, and who has been given a role in the church’s app, are recorded so they can be checked later. Lawful basis: our legitimate interest in a safe community (Article 6(1)(f)), and Article 9(2)(d).
When the app crashes or hits an error, it sends a report to Sentry so we can fix it. These reports are stripped of your name, email address, IP address and anything you typed, and they are stored in the EU. Lawful basis: our legitimate interest in keeping the app working (Article 6(1)(f)).
The app asks you once whether we may measure how it is used, through PostHog (EU). Nothing is measured unless you say yes. If you do, the app sends events such as “opened a message” with your branch and language, never your name, email or account. It uses a random identifier for your device, which is deleted if you later turn measurement off in Settings › Privacy & data. Lawful basis: your consent (Article 6(1)(a)).
You can delete your account in the app (Settings), or on our account deletion page if you no longer have the app. You choose whether your testimonies and prayer requests are removed or stay, credited only to “A member”. Your account, profile, rhythm, notes, list, reactions, devices and notifications are deleted. Three things are kept, without your name where we can remove it: the record of when you consented to a post (proof we had your consent), the record of roles given in the church’s app (so it can always be checked who was given authority over other people’s information), and payment records, which we must keep by law. Our encrypted backups age out within 30 days.
We do not sell your personal data and we never use it for advertising. We share it only with the providers we need in order to run the site and the app, only for that purpose, and each is bound by a contract that lets them act on our instructions alone.
We may also disclose information where the law requires it, or to establish or defend a legal claim.
Some of these providers are based outside the UK and the EEA, mainly in the United States. Where that happens the transfer is covered either by an adequacy decision (the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or by standard contractual clauses together with the UK International Data Transfer Addendum.
This site sets no analytics, advertising or tracking cookies. There is no tracking pixel and no social media pixel. What can be stored on your device is:
You can clear or block this storage in your browser settings. Blocking the Cloudflare check will stop our forms from working.
Under the UK GDPR and the EU GDPR you can ask us to:
We make no decisions about you by automated means. To exercise any of these rights, email hello@agbcglobal.com. We answer within one month. We may first ask you to confirm who you are, so that we never hand your information to someone else. If you have an account in the AGBC app, you can delete it yourself, without asking us, on our account deletion page.
If you are unhappy with how we have handled your information, you can complain to our supervisory authority, the UK Information Commissioner’s Office.
No system is ever perfectly secure. If a breach happens that puts you at risk, we will report it to the supervisory authority within 72 hours and tell you directly where the law requires it.
This site is intended for adults. If you are under 16, please ask a parent or guardian to register or give on your behalf. Accounts in the AGBC Global app are for people aged 16 and over; anyone can watch, listen and read without one. If you believe we hold information about a child, contact us and we will delete it.
If we change this policy we will update the date shown at the top of this page, and we will say so on the site when the change is significant.
Amazing Grace Bible Church Global Ltd is the data controller for this website and for all our branches. Our registered details are in the legal notice.
Write to us at hello@agbcglobal.com, or by post at 156 Highcoats, Coatbridge, Scotland, ML5 3PF.