Privacy Policy - (Draft)

The 153 Collective is a confederation of Christian ministries working together on digital evangelism and discipleship. As members, we agree on common standards for measuring our work — the VITAL metrics — and share those numbers with each other in aggregated, non-identifiable form so we can learn from one another. We may also publish combined totals for the whole Collective on our website, without showing what any individual member organisation contributed.

We will never share personal data about the people any member ministry reaches through its own evangelism and discipleship work. Each ministry retains full ownership and control of its own audience data; nothing about the individuals a ministry serves passes to the Collective or to other member organisations.

This policy, and the joint-controller arrangement it describes, covers one thing only: the personal data of individuals who apply for 153 Collective membership on behalf of their organisation, through our online application and contact forms. It has nothing to do with, and does not authorise any sharing of, the data of any ministry’s own end-users.

1. Who is responsible for your data

The personal data you submit through this membership application form is processed jointly by the seven founding member organisations of the 153 Collective, acting as joint data controllers under Article 26 of the GDPR:

1. Billy Graham Evangelistic Association (BGEA) — 1 Billy Graham Parkway, Charlotte, NC 28201, USA
2. Christian Vision (CV) — The Rock, International Drive, Solihull, B90 4WA, United Kingdom
3. DeoLink (Stowarzyszenie DeoLink) — Malinka 65D/2, 43-460 Wisła, Poland (KRS 0000160777)
4. Global Media Outreach, Inc. (GMO / ExploreGod) — 7160 Dallas Parkway, Suite 200, Plano, TX 75024, USA
5. Jesus.net (Stichting Jesus.net Foundation) — Dwerggras 30, 3068 PC, Rotterdam, Netherlands
6. OneHope, Inc. — 600 SW 3rd St, Suite 6200, Pompano Beach, FL 33060, USA
7. Palau (Luis Palau Association) — 1500 NW 167th Place, Beaverton, OR 97006, USA

These seven organisations form the Executive Committee of the 153 Collective and have agreed in writing how each of them meets its GDPR obligations for this processing. A summary of that agreement is set out below, as required by Article 26(2) GDPR.

How to contact us about this processing: For general enquiries about the 153 Collective (handled by BGEA) or questions about an application’s status or process (handled by OneHope), use the online contact form at [contact form URL]. For privacy and GDPR rights specifically, use the contact form and select “Data privacy”. The seven organizations act as joint controllers and your enquiry will reach the right point of contact — you do not need to contact all seven separately.

2. What data we collect

Through the membership application form, we collect:

About you, the applicant representative:

• Name
• Job title
• Email address

About your organization (this is organizational information, not personal data about you, except where it might identify you individually — for example, a very small organization where your title alone could identify you):

• Organization name and website
• Country/region of operation
• A description of your organization’s digital evangelism and discipleship work
• Why your organization is interested in joining the Collective
• Approximate annual Gospel reach (optional)

3. Why we process this data and on what legal basis

We process your data to:

• Review and process your organization’s application for membership in the 153 Collective
• Communicate with you about the status of that application
• Maintain a register of current and past members, for the Collective’s ongoing administration

Legal basis: Article 6(1)(b) GDPR where processing is a necessary step prior to entering a membership arrangement, alternatively Article 6(1)(f) GDPR (the legitimate interest of the Collective in operating a membership process for interested parties.), The “why is your organization interested in joining?” field asks about your organization, not you personally, so it does not generally involve special category data. If an answer happens to describe a named individual’s personal characteristics (for example, a founder’s own faith journey) rather than the organization’s, our basis for processing that specific content is Article 9(2)(a) GDPR (explicit consent, given on submission).

4. Who can access your data

• The Application Subcommittee — BGEA, Jesus.net, and OneHope — reviews full applications, including your name and email, to make membership recommendations.
• The Executive Committee (the seven organizations listed in Section 1) — receives the outcome of the application and, where necessary for governance of the Collective, the underlying register entry.
• DeoLink — operates the technical infrastructure that runs this form, acting on behalf of all joint controllers.
• Explore God Global (ExploreGod / GMO ) — holds the membership register in a spreadsheet on its Google Workspace account, acting as technical custodian on behalf of all joint controllers. Google LLC processes this data as a sub-processor under ExploreGod/GMO’s existing Google Workspace data processing terms, which include the EU Standard Contractual Clauses for any transfer of data outside the European Economic Area.

No other party has access to your data, and it is not sold, rented, or used for marketing purposes.

4a. The website contact form

The Collective’s website also has a contact form for general enquiries, application-status questions, and privacy/GDPR requests, which collects your full name, email address, and message. It’s handled under the same joint-controller arrangement as your application, routed to whichever contact point matches your enquiry category — BGEA, OneHope, or DeoLink (see Section 1). We keep contact-form messages for 12 months, then delete them.

5. How long we keep your data

• Unsuccessful applications: your name and email are removed 3 years after the decision.
• Successful applications / active members: retained for the duration of the organization’s membership in the Collective, plus 3 years afterward for administrative and historical record-keeping.

6. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (subject to our legitimate need to maintain historical membership records)
• Object to processing based on legitimate interest
• Lodge a complaint with a supervisory authority — in your country or in Poland, the Urząd Ochrony Danych Osobowych (UODO)

To exercise any of these rights, use the online contact form at https://153collective.org/contact and select “Data privacy”. DeoLink acts as the Collective’s Data Privacy Contact Point and can action your request on behalf of all seven joint controllers, as agreed under our Article 26 arrangement.

7. Security

Access to the membership register is limited to the roles described in Section 4. The register is stored on Global Media Outreach, Inc. (GMO / ExploreGod)’s Google Workspace account, protected by that organization’s account security controls (access permissions, authentication).

8. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated to active members.

9. Contact

For any question about this policy or how your membership application data is handled contact us using a form at https://153collective.org/contact.