Privacy Policy

We collect as little personal data as we can. This page explains what we collect, why, who handles it and what rights you have.

Last updated: 17 October 2026

Who we are

churchleaderconferences.com is operated by Code Withakay Ltd, a company registered in England and Wales, trading as "Church Leader Conferences". Company number: 14035872. Registered office: Crown House, 27 Old Gloucester Street, London WC1N 3AX.

Code Withakay Ltd is the controller of the personal data described here (except where Stripe acts as an independent controller, see below). Contact us at [email protected]. If you are in the UK and are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.

What we collect and why

• Newsletter signup ("Deadlines This Month"): your email address, sent directly to Kit (kit.com), which stores it and sends the weekly email. Every email has an unsubscribe link.
• Submit-an-event and feature-request forms: event name, organiser, website URL, dates, city, state, format, audience roles, price information, early-bird deadline and contact email (feature requests: event name, plan and contact email). These are posted to our server function and stored in Cloudflare D1. We also store your country (derived by Cloudflare from your IP address) and a truncated browser user-agent string, to prevent spam and abuse. Public event details may be published in the directory; your contact email is never published.
• Featured listing payments: paid through Stripe Payment Links. Stripe is the seller of record (merchant of record) via Stripe Managed Payments and processes your card and billing details under its own privacy policy. We never see card details. We receive limited order information (name, email, what was bought) so we can deliver your listing.
• Email you send us: whatever you include, so we can reply.
• Hosting data: Cloudflare processes IP addresses and request logs to deliver and secure the site.

Lawful basis (UK GDPR)

• Consent: newsletter signups. You can withdraw consent at any time by unsubscribing.
• Contract: delivering paid featured listings.
• Legitimate interests: running the directory, publishing public event information you submit, preventing spam and abuse, and keeping the site secure.
• Legal obligation: keeping accounting and tax records.

Who we share it with

We don't sell your data. We use these service providers (processors) to run the site:

• Kit (ConvertKit LLC, US): stores newsletter subscribers and sends the newsletter.
• Cloudflare: hosting and CDN (Cloudflare Pages), database storage (D1), and security.
• Stripe: payments. For payments, Stripe acts as an independent controller and merchant of record under its own privacy policy.

We may also disclose data where the law requires it.

Cookies and analytics

This site sets no cookies and runs no analytics, advertising or tracking scripts, so no cookie banner is needed. Site search (Pagefind) runs entirely in your browser. Cloudflare's email-obfuscation script runs on pages but sets no cookies. If we ever add non-essential cookies or analytics, we will update this policy and ask for your consent first.

Note that Stripe's checkout pages (on stripe.com) and Kit's pages may set their own cookies on their own domains; those are governed by their policies.

How long we keep it

• Newsletter: until you unsubscribe (Kit may then keep a suppression record so we don't email you again).
• Event submissions: as long as the listing is relevant, and up to 24 months after the event, then deleted.
• Feature-request and contact emails: up to 24 months.
• Payment and order records: as required for tax and accounting (generally 6 years under UK law). Stripe keeps its own records.
• Cloudflare logs: per Cloudflare's standard retention.

Your rights

UK GDPR: you have the right to access your data, have it corrected, erased or restricted, object to our processing, receive it in a portable format, and withdraw consent at any time.

US residents, including California (CCPA/CPRA) and other states: you have the right to know what personal information we collect and use, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information. We won't discriminate against you for exercising your rights. You may use an authorised agent to make a request on your behalf.

How to exercise them: email [email protected]. We respond within one month (45 days for US requests). We may need to verify your identity first.

International transfers

We are a UK company, but Kit, Stripe and Cloudflare process data in the US and elsewhere. Where personal data leaves the UK, it is protected by safeguards such as the UK International Data Transfer Addendum / Standard Contractual Clauses and/or the UK-US Data Bridge, where applicable.

Children

This site is for adult church leaders. It is not directed at children under 13 (or under 16 in the UK), and we don't knowingly collect their data. If you think a child has given us data, email us and we'll delete it.

Changes

We may update this policy. The date above shows the latest version, and we'll flag material changes on this page.

Contact

[email protected]. See also our Terms and Disclaimer.