BPAMS Privacy Policy

1. Introduction

Welcome to the BCS Priesthood Administration & Management System (BPAMS).

The BPAMS Mobile Application ("BPAMS", "Application", "Platform", "System") is operated, administered, and managed by the Universal Assembly of BCS Priesthood (UABCSP). BPAMS is the official digital platform of the UABCSP, operating under the authority, ownership, supervision, and governance of the Brotherhood of the Cross and Star (BCS).

This Privacy Policy explains how BPAMS collects, uses, processes, stores, protects, transfers, shares, and manages personal information through the BPAMS Mobile Application, Web Application, BCS Priesthood Registry (BCS-PR), BCS Priesthood Database, and all related services.

The Universal Assembly of BCS Priesthood (UABCSP) is committed to protecting the privacy, confidentiality, integrity, and security of all information entrusted to the platform.

BPAMS is designed to safeguard your privacy and ensure compliance with applicable international privacy and data protection standards, including but not limited to:

• Nigeria Data Protection Act (NDPA)
• European Union General Data Protection Regulation (EU GDPR)
• United States Privacy Laws and Regulations
• United Kingdom General Data Protection Regulation (UK GDPR)
• India Digital Personal Data Protection Act (DPDP Act)
• China Personal Information Protection Law (PIPL)
• Other applicable international privacy, cybersecurity, and information security standards

By accessing, registering on, or using BPAMS, the BCS Priesthood Registry or Database, and its related services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Information We Collect

To effectively administer priesthood affairs, maintain accurate records, facilitate communication, and support organizational governance, BPAMS may collect and process the following information:

2.1 Personal Identification Information

This may include Full Name, Date of Birth, Email Address, Phone Number, Residential Address, Country, State/Province, Local Government Area (LGA), Profile Photograph, Passport Number (where applicable), Academic Qualifications, Priest Identification Number (Priest ID issued by UABCSP), and National Identification Number (where applicable).

2.2 Priesthood and Organizational Information

This may include Bethel, Pew, Posting/Station, Service Information, Appointment History, Office or Position Held in BCS, Transfer Records, Committee Memberships, and Committee Reports.

2.3 Emergency and Next-of-Kin Information

We may collect Next-of-Kin Name, Next-of-Kin Phone Number, and Emergency Contact Information.

This information may be used where reasonably necessary for administrative, organizational, welfare, or emergency purposes.

2.4 Financial Information

Where applicable, BPAMS may process Levy Records, Levy Payment History, Financial Contributions, Payment Records, Payment Dates, Payment Statuses, Transaction References, and Payment Verification Information.

BPAMS does not collect, process, or store debit card details, credit card information, PINs, CVVs, internet banking credentials, or other financial account passwords.

Electronic payments are processed through approved third-party payment applications, banking systems, and payment gateways operating under their own security and privacy standards.

2.5 Communications and User Submissions

We may collect and process Complaints, Responses to Complaints, Appeals, Administrative Requests, Support Requests, Reports Submitted Through BPAMS, Feedback and Suggestions, Event Registrations, and Agenda Participation Records.

2.6 Device and Technical Information

When accessing BPAMS, certain technical information may be automatically collected, including Device Information, Device Identifiers, IP Address, Login Activities, Security Logs, Authentication Records, and Session Information.

2.7 Usage Information

We may collect information regarding how BPAMS is used, including Login Time, Logout Time, Application Activity, Downloads, e-Library Usage Statistics, and Performance Metrics.

2.8 Sensitive Personal Information

Where strictly necessary for priesthood administration, governance, compliance, security, or organizational management, BPAMS may process limited categories of sensitive information. Such information receives enhanced security controls, access restrictions, monitoring, and protection measures.

3. Purpose of Data Collection

Your information may be collected and used for the following purposes:

• Verifying user identity
• Managing priesthood membership records
• Maintaining priest profiles
• Processing postings and transfers
• Managing bethel assignments
• Managing pew assignments
• Facilitating priesthood administration
• Recording levy payments
• Verifying financial contributions
• Publishing agendas and events
• Managing conferences, meetings, and registrations
• Providing access to the BPAMS e-Library
• Sharing official documents and circulars
• Managing complaints and reports
• Facilitating communication between priests and administrative units
• Sending account verification notifications
• Sending password reset notifications
• Providing administrative updates
• Generating reports, analytics, and statistics
• Improving platform functionality and user experience
• Preventing fraud, abuse, misuse, and unauthorized access
• Maintaining organizational governance and operational continuity

4. Legal Basis for Processing

BPAMS processes personal information on one or more of the following lawful grounds:

4.1 Consent

Where you voluntarily provide information or consent to specific processing activities.

4.2 Legitimate Organizational Interest

Where processing is necessary for effective administration, governance, operation, and management by the UABCSP and the Brotherhood of the Cross and Star.

4.3 Contractual and Administrative Necessity

Where processing is required to provide services, administer priesthood affairs, maintain records, process assignments, and fulfill organizational responsibilities.

4.4 Legal and Regulatory Compliance

Where processing is necessary to comply with applicable laws, regulations, lawful requests, or official obligations.

5. Data Storage and Security

BPAMS implements comprehensive administrative, technical, organizational, and physical safeguards to protect personal information from unauthorized access, misuse, alteration, disclosure, destruction, or loss.

Security measures include:

• End-to-End Encryption where applicable
• SSL/TLS Encryption
• Secure Authentication Systems
• Biometric Authentication Support
• Role-Based Access Control (RBAC)
• Multi-Level Administrative Permissions
• Database Encryption
• Audit Logs
• Security Monitoring
• Firewall Protection
• Secure Cloud Infrastructure
• Continuous Monitoring
• Routine Security Reviews
• Vulnerability Assessments
• Security Incident Response Procedures
• Data Backup and Recovery Mechanisms

While BPAMS employs industry-standard security controls, no electronic storage or transmission system can guarantee absolute security.

6. Data Sharing and Disclosure

BPAMS does not sell, rent, trade, lease, or commercially distribute personal information.

Information may only be shared with:

6.1 Authorized BCS Leadership

Authorized officers and leadership personnel responsible for priesthood administration.

6.2 Approved BCS and UABCSP Administrative Units

Departments, committees, councils, and administrative offices authorized to access information for legitimate organizational purposes.

6.3 Payment Service Providers

Approved providers solely for payment verification and reconciliation.

6.4 Cloud and Infrastructure Providers

Trusted service providers responsible for hosting, storage, security, email delivery, and platform operations.

6.5 Regulatory Authorities

Where identity verification, legal compliance, or lawful obligations require disclosure.

6.6 Legal Requirements

When required by law, court order, governmental authority, or lawful legal process.

6.7 Public Priest Profile

Where enabled by BPAMS settings, limited priest profile information may be visible through official public priest profile links.

All third-party processors are required to maintain appropriate confidentiality, privacy, and security safeguards.

7. International Data Transfers

Where personal information is transferred outside a user's country of residence, BPAMS will implement appropriate safeguards to ensure continued protection of personal information.

Such safeguards may include:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• Adequacy Decisions
• Approved International Transfer Frameworks
• Other legally recognized transfer mechanisms

8. Data Retention

BPAMS retains information only for as long as necessary to:

• Fulfill organizational purposes
• Maintain priesthood records
• Preserve historical institutional records
• Meet administrative obligations
• Resolve complaints and disputes
• Support posting and service records
• Ensure continuity of organizational governance
• Comply with legal and regulatory requirements

Records may be archived for institutional continuity and historical reference and may be securely deleted when no longer required, relevant, useful, or legally necessary.

9. Your Privacy Rights

Subject to applicable laws, users may have the following rights:

9.1 Right of Access

Request access to personal information held by BPAMS.

9.2 Right to Correction

Request correction of inaccurate, incomplete, or outdated information.

9.3 Right to Deletion

Request deletion of your account and associated data through the BPAMS Mobile Application or official support channels.

9.4 Right to Restrict Processing

Request restrictions on certain processing activities.

9.5 Right to Object

Object to specific processing activities where legally permissible.

9.6 Right to Data Portability

Request your information in a structured and commonly used format.

9.7 Right to Withdraw Consent

Withdraw consent where processing relies on consent.

Requests may be submitted through BPAMS Help & Support channels.

10. Cookies and Similar Technologies

The BPAMS Web Platform and Database may use essential cookies and similar technologies for secure session management, authentication, security protection, fraud prevention, CSRF protection, performance optimization, and User experience enhancement. These technologies are necessary for the proper operation of the platform.

The BPAMS Mobile Application does not use browser cookies. However, it may use secure authentication tokens, encrypted local storage, device identifiers, and similar technologies required for functionality, security, and user experience.

Users may manage cookie preferences through their browser or device settings.

BPAMS does not use advertising cookies and does not sell behavioral advertising data.

11. Children's Privacy

BPAMS is intended exclusively for authorized adult priesthood members and approved organizational personnel.

The platform is not directed toward children and does not knowingly collect information from individuals below the applicable legal age requirements.

12. Automated Decision-Making

BPAMS does not make decisions that produce legal or similarly significant effects solely through automated processing.

All critical administrative, posting, disciplinary, governance, and organizational decisions remain subject to human review and oversight.

13. Data Breach Notification

In the event of a security incident or personal data breach that may affect the rights, privacy, or interests of users, BPAMS will:

• Investigate the incident promptly
• Contain and mitigate the impact
• Notify affected parties where required
• Notify applicable regulatory authorities where required by law
• Implement corrective measures to prevent recurrence

14. Changes to This Privacy Policy

BPAMS reserves the right to modify, revise, or update this Privacy Policy at any time, and users are encouraged to review this Privacy Policy periodically.

Material changes will be communicated through:

• BPAMS Mobile Application notifications
• BPAMS Web Application Notices
• Official UABCSP communication channels
• Email notifications where appropriate