Privacy Policy

Last Updated: June 29, 2026

1. Introduction

The Malphurs Group ("we," "us," or "our") operates the Healthy Churches Toolkit ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information You Provide to Us

  • Account information (name, email address, church name, organization details)
  • Profile information and preferences
  • Church data, assessment responses, and strategic planning materials you input into the Service
  • Payment and billing information (processed securely through third-party payment processors)
  • Communications you send to us

Information Automatically Collected

  • Log data (IP address, browser type, operating system, pages visited)
  • Device information
  • Cookies and similar tracking technologies
  • Usage data and analytics
  • Session recordings or replay data, which may include clicks, navigation paths, scrolling, page views, and interactions with forms or features

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your transactions and manage your subscription
  • Send you technical notices, product update emails, and support messages (you can opt out of non-essential product update emails anytime in Account > Notifications)
  • Respond to your comments and questions
  • Analyze usage patterns to enhance user experience
  • Detect and prevent fraud or security issues
  • Comply with legal obligations

4. Session Recording for Quality Assurance

We may use session recording or replay technologies to help us understand how users interact with the Service, identify errors, improve usability, provide support, protect the Service, and train our team. These recordings may capture information displayed on your screen or entered into the Service during your session. Access to these recordings is limited to authorized personnel and trusted service providers who support our quality assurance and improvement efforts.

Session recordings are not intended to collect payment card details directly; payment and billing information is processed by third-party payment processors as described in this Privacy Policy.

5. Information Sharing and Disclosure

We do not sell your personal information or church data to third parties.

We may share your information only in the following circumstances:

With Your Consent

When you authorize integrations with third-party services (such as Facebook, social media platforms, or other ministry tools), we will share only the information necessary for those integrations to function as requested by you

Service Providers

We may share information with trusted third-party service providers who assist us in operating the Service, processing payments, or analyzing usage (these providers are bound by confidentiality obligations)

Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (such as a court order or subpoena)

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

Protection of Rights

We may disclose information to protect and defend our rights, property, or safety, or that of our users or the public

6. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. If you cancel your account, we will retain certain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

8. Your Rights and Choices

You have the right to:

  • Access and review the information we hold about you
  • Correct or update your account information at any time
  • Request deletion of your account and associated data
  • Opt out of non-essential product update emails at any time in Account > Notifications (account and security emails will still be sent)
  • Disable cookies through your browser settings (though this may affect Service functionality)
  • Export your church data from the Service

To exercise these rights, please contact us using the information provided below.

9. Third-Party Integrations

When you choose to connect third-party services or integrations to your account (such as social media platforms, calendar services, or other ministry tools), those third parties may collect information in accordance with their own privacy policies. We are not responsible for the privacy practices of these third-party services.

Facebook Integration and Data Deletion

If you connect your account with Facebook, we will access and store only the information you authorize through Facebook's permissions.

Data Deletion Requests: You can request deletion of data associated with your Facebook connection at any time by:

  1. Visiting your account settings and disconnecting the Facebook integration
  2. Contacting us directly at leadership@malphursgroup.com with the subject line "Facebook Data Deletion Request"
  3. Using Facebook's data deletion callback URL

When you request deletion of Facebook-related data, we will delete all data received from Facebook within 30 days, except for data we are required to retain for legal or regulatory purposes. You will receive confirmation once the deletion is complete.

To delete your entire account and all associated data (including Facebook integration data), please follow the account deletion process in Section 8.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

11. International Users and Data Transfers

The Malphurs Group is based in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using the Service, you consent to this transfer.

For European Union Users

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data based on:

  • Your consent (which you may withdraw at any time)
  • Performance of our contract with you to provide the Service
  • Our legitimate interests in operating and improving the Service
  • Compliance with legal obligations

Your GDPR Rights

You have the right to:

  • Access your personal data and receive a copy
  • Rectify inaccurate or incomplete data
  • Request erasure of your data ("right to be forgotten")
  • Restrict or object to processing of your data
  • Data portability (receive your data in a structured, commonly used format)
  • Withdraw consent at any time (without affecting prior processing)
  • Lodge a complaint with your local data protection authority

Data Transfers

When we transfer your data from the EEA to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Data Protection Officer

For GDPR-related inquiries, you may contact us at: leadership@malphursgroup.com

Retention Periods

We retain personal data only as long as necessary for the purposes outlined in this policy, typically for the duration of your account plus any legally required retention period.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion of your information, and the right to opt out of the sale of your information. We do not sell personal information.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

The Malphurs Group

PO Box 852

Burleson, TX 76097

leadership@malphursgroup.com