Garden Grove United Methodist Church

Overview

Full Privacy Policy

We are committed to protecting your privacy in accordance with the highest level of privacy regulations.

The Types of Personal Information We Collect

Personal information is information that identifies or is capable of identifying you as an individual. We collect personal information from you when you voluntarily provide it to us, such as by creating a user account, signing up for email updates, registering for programs and events, subscribing to newsletters, or responding to charitable appeals, surveys, and other communications. We may also collect personal information about you from your participation in our ministries, from social media networks such as Facebook and LinkedIn, and from other publicly and commercially available sources. In addition, we collect personal information passively through our Online Sites, such as via cookies and similar technologies that are used to analyze the use of the sites.  We may disclose each of the categories of personal information described in Section I of the Privacy Policy to the third parties described in Section III for the purposes stated therein. We may also share each of these categories of personal information for targeted advertising purposes with third parties that provide us with advertising services.

Personal information we collect about you may include:

• Identity Information, such as first name and last name, company name, gender, date of birth, language preferences, demographic information, your church name and role with the church, military rank and involvement, and the country you are located in.
• Contact Information, such as address, email address, telephone, and other contact numbers.
• Job Information, such as your company name, business title, and professional associations.
• Log-in Information, such as your username, personal account number, and password, and log-in information for social media accounts if you log into our Online Sites through such accounts.
• Location Information, such as if you agree to allow us to access your location to provide you with information relevant to your area.
• Financial Information, such as credit card number, credit card expiration date, card security code, cardholder name, bank name, routing number, account number, and account holder.
• Transaction Information, such as donation history and details of programs and services you have participated in or received from us, including your relationship to The United Methodist Church.
• Technical Information, such as information collected automatically as you navigate through our Online Sites. Information collected automatically may include usage details, domain address, IP addresses, internet browser, operating system, your internet connection, the equipment you use to access our Online Sites, and information collected through cookies.
• Inferences drawn from any of the information listed above to create a profile about you reflecting your preferences, characteristics, behavior, and attitude.
• Sensitive Information, such as Social Security number, ethnicity, nationality, and health conditions.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How We Use Your Personal Information

We collect, use, process, and disclose the personal information we collect about you for the following purposes:

• To communicate with you regarding our Programs and Services, including providing you with updates, resource materials, and other information that we think may be of interest to you.
• To administer your registration or participation in any of our Programs and Services, including websites and applications, and to administer our Domestic Relief Supplies program, mission services, and other volunteer programs.
• To respond to your Programs and Services inquiries, feedback, or other correspondence we receive from you.
• To maintain archival records of your participation in our Programs and Services for historical and research purposes.
• For fundraising purposes and to process donations.
• To verify your identity.
• To improve the content of our Online Sites, such as, for example, using cookies to find out which parts of our Online Sites are visited most often.
• To customize the content and/or layout of our Online Sites for each individual visitor.
• To analyze and better understand your needs, preferences, and interests.
• To ask for feedback and reviews of our Programs and Services.
• To serve other purposes for which we provide specific notice at the time of collection.
• To comply with our legal obligations, and enforce our rights and policies.
• To administer, monitor, and secure our Online Sites, information technology systems, and databases, including detecting and preventing security incidents and fraudulent activity.
• To connect with you on third-party social media platforms, including to deliver targeted advertisements on such platforms.

We may also aggregate and/or anonymize personal information and analyze that data for statistical or any other purposes permitted by law. Anonymous information is data from which all individually identifying information has been removed. Aggregate information is anonymous data collected about a group of individuals.

When We May Disclose Personal Information

We may share the personal information we collect about you with:

• Our affiliated entities that help us fundraise, provide Programs and Services on behalf of or in connection to The United Methodist Church, or conduct processing on our behalf.
• Vendors who process personal information on our behalf, including vendors who provide data hosting, digital marketing, information technology, email and mailing services, and other functions and activities to support our Programs and Services. We impose contractual limitations on our vendors’ use of personal information they collect or receive in conjunction with providing services to us.
• Third parties that provide us with services related to personalized advertising.
• Third parties in connection with verifying or enforcing compliance with the policies governing our Programs and Services, and applicable laws, or to protect against misuse or unauthorized use of our Programs and Services.
• Government or judicial authorities to comply with a subpoena, court order, governmental inquiry, legal process, legal obligation, or to protect the rights, property, or safety of other users or the public.
• A successor entity in connection with a change in legal structure or other organizational change. Should such a reorganization occur, we will use reasonable efforts to ensure the successor entity uses your information in a manner that is consistent with our Privacy Policy.

We may also disclose aggregated and/or anonymized data to any other third parties to the extent permitted by law.

Information from Third Parties

We may receive personal data about you from various third parties, including:

• Account Information and Payment Information from another individual when they purchase a gift for you on our websites.
• Device and Usage Data from third parties, including analytics providers such as Google.
• Account Information and Payment Data from social media platforms when you log in to our website using social media platforms.
• Content from communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks.
• Account Information and Payment Data from third parties, including organizations (such as law enforcement agencies), associations, and groups that share data for the purposes of fraud prevention and detection and credit risk reduction.
• Account Information, Payment Data, and Financial Data from technical, payment, and delivery service providers.

Suppose you provide us, or our service providers, with any personal data relating to other individuals. In that case, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this policy. If you believe that your personal data has been provided to us improperly or to exercise otherwise your rights relating to your personal data, please contact us by using the information set out in the “Contact Us” section below.

Information to Third Parties

As a general practice, we do not share your personal information with third-party agents, contractors, service providers, and suppliers who assist in providing support and services to our entities. When we do, we require those third parties to protect your personal information in accordance with this policy and applicable laws. Data, including mobile phone numbers, will not be sold or shared with third parties for promotional or marketing purposes.

Retention and Deletion

We will retain your personal information only as long as necessary to provide our Programs and Services to you, enhance your user experience, and otherwise as necessary for our operations or as permitted or required by applicable laws.  We may archive your information (store it in inactive files) for a certain period prior to its final deletion as part of our ordinary business continuity procedures.

Children’s Privacy

Most of our Online Sites are not intended for children under age 13 and are not designed to attract the attention of anyone under age 13. For compliance with the Children’s Online Privacy Protection Act of 1998, we do not knowingly collect personal information of children under age 13 through most of our Online Sites. If you are a parent or guardian and believe we have collected personal information about your child in error, please contact us immediately at ggumc@ggumc.net so that we can make reasonable efforts to promptly remove all personal information relating to the child from our systems.

To the extent any of our Programs and Services intend to collect personal information from children, we will include additional information regarding the applicable policies and practices for that Program or Service regarding children’s privacy.

Links to Other Websites

Our Online Sites may contain links to websites owned by other entities. If you decide to use these links, you will leave our Online Sites. You have the choice of whether to access the links. We are not responsible for the privacy practices or the content of such third parties, and we make no representations or endorsements about them. This privacy policy does not apply to any third-party linked sites.

Security

We take seriously our obligation to safeguard the confidentiality, security, and integrity of personal information we collect from and about you, and we have established and will maintain procedures that are designed for that purpose. We implement reasonable security measures to promote the confidentiality, integrity, and availability of personal information in our possession or control. Such measures are designed to protect your personal information from loss, unauthorized access, disclosure, alteration, or destruction. However, you should be aware that such security measures cannot prevent all loss, misuse, or alteration of personal information.

Compliance with Child Safety Laws and Reporting

Our app complies with applicable child safety laws and regulations.

Our app ensures all content shared within the app is appropriate for a mixed audience, including children. However, we did not design or intend for the app to be used by children under 13. User-generated content is moderated to prevent inappropriate material from being accessible.

Any CSAM (Child Safety Abuse Material) content will be automatically removed when flagged or reported through our moderation features or if we are directly contacted for this purpose. We will systematically take action to report confirmed CSAM content to the National Center for Missing and Exploited Children. CSAM consists of any visual depiction, including but not limited to photos, videos and computer-generated imagery, involving the use of a minor engaging in sexually explicit conduct.

Child Safety Point of Contact  

You can reach out to ggumc@ggumc.net if CSAM content is detected.

Privacy and Data Protection

Our app is committed to protecting user data in compliance with applicable regulations. The privacy policy is displayed clearly and is accessible from the app settings and our website. All data is encrypted during transmission and stored securely.

Ads and Monetization

Our app does not include ads or monetized content.

Validation and Updates

Regular internal testing is conducted to ensure compliance with Google Play’s child safety standards, including functionality reviews and content audits.

Policies are reviewed quarterly or as required to align with updated child safety standards.

Contact Us

If you have any questions regarding this Privacy Policy please contact us:

• By email: ggumc@ggumc.net
• Write to: Garden Grove United Methodist Church
  Attn: Privacy
  12741 Main Street
  Garden Grove, CA 92840

Modifications to our Privacy Policy

To accommodate new Programs and Services and to ensure up-to-date compliance with privacy laws, we may modify this Privacy Policy from time to time. When we modify this Privacy Policy, we will notify you by posting it on our Online Sites. Any changes will become effective as of the date of posting with respect to information we collect in the future. We will treat all personal information we collect in accordance with the Privacy Policy in effect at the time the information is collected. We encourage you to review this Privacy Policy often so you are always fully informed.

U.S. State Supplemental Privacy Notice

This U.S. State Supplemental Notice (the “Supplemental Notice”) provides additional information for residents of certain U.S. states with comprehensive privacy legislation and that require provision of a privacy notice (collectively, the “U.S. Privacy Laws”).

A. Definitions

• • “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes “personal data” (or equivalent terms) as that term is defined by U.S. Privacy Laws.
  • “Service Provider” means a service provider, contractor, or processor as those terms are defined by U.S. Privacy Laws.

“Third Party” means any non-affiliated person or entity that is not a Service Provider.

You may be familiar with different terms that are used to describe materially similar concepts in this section by the U.S. Privacy Laws in your state of residence. You can treat them as the same for the purpose of our Supplemental Notice. For example, we intend the term “personal information” here to have the same definition as “personal data” used in some U.S. Privacy Laws.

B. Collection and Processing of Personal Information

We and our Service Providers collect and have collected in the past 12 months the categories of personal information listed in Section I of our Privacy Policy.

Children’s Personal Information. We generally do not knowingly collect or process personal information of children under 13 years of age. If and when we do so, we comply with the Children’s Online Privacy Protection Act of 1998. Please see Section V of our Privacy Policy for more information.

C. Purpose for Processing and Disclosing Personal Information

We and our Service Providers collect, process, and disclose the personal information described in this Supplemental Notice for the purposes listed in Section II of our Privacy Policy.

Retention of Personal Information. We retain your personal information only as long as reasonably necessary to provide our Programs and Services to you and otherwise as necessary for our operations or as permitted or required by applicable laws.  We may archive your information (store it in inactive files) for a certain period prior to its final deletion as part of our ordinary business continuity procedures.

D. Categories of Personal Information We Have Disclosed, Sold, or Processed for Targeted Advertising

We disclose, and in the past 12 months have disclosed, your personal information for the business purposes described in Section III of the Privacy Policy and in the table below.

In some states, the sharing of personal information with third parties to deliver personalized advertising is considered a “sale” of personal information. When you visit one of the UMC Online Sites, we may use cookies and other technologies to collect personal information for purposes of delivering personalized advertising. To the extent that we share personal information collected through our Online Sites with third parties to provide you with targeted advertising about our Programs and Services, such sharing may qualify as a “sale” of personal information under these laws. To this extent, we may have sold or shared personal information for targeted advertising purposes in the past 12 months.

You have the right to opt-out of the sale and sharing of your personal data for targeted advertising and can do so by clicking on the “Your Privacy Choices” link in the footer of applicable websites; going to my.umc.org; or contacting us at ggumc@ggumc.net.

Opt-Out Preference Signals. We recognize opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat such opt-out preference signals as a valid request to opt out of sale and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any individual profile we have associated with that browser or device. Further, if we know the identity of the individual from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and processing for purposes of targeted advertising for such individual. Individuals may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit.

E. Data Subject Rights                    

Residents of states with U.S. Privacy Laws have the following rights regarding our collection and use of the personal information, subject to certain exceptions. These rights vary by state:

• • • Right to Confirm and Access: You have the right to confirm whether we are processing your personal information and the right to access the personal information we hold about you.
    • Right to Deletion: You may request that we delete any personal information about you that we collected from you.
    • Right to Correction: You may request that we correct any inaccurate personal information we maintain about you.
    • Right to Obtain a List of the Specific Third Parties to Whom We Have Disclosed Personal Information: You may ask to obtain a list of the specific third parties to whom we have disclosed your personal information.
    • Right to Access Specific Pieces of Personal Information and Data Portability: You may ask to obtain the specific pieces of personal information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the personal information to another entity without hindrance. You may not exercise this right more than two times in a calendar year.
    • Right to Opt Out of Sale: You have the right to opt out of the sale of your personal information.
    • Right to Opt Out of the Use of Your Personal Information for Targeted Advertising: You have the right to opt out of our use of your personal information for targeted advertising purposes.
    • Right to Opt Out of Profiling: You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (which means a decision that results in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health care services, or access to essential goods or services). Please note, however, that we do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

We will not discriminate against you for exercising your data subject rights. For example, we will not deny services to you or provide a different level of quality of services to you as a result of you exercising your data subject rights.

As permitted or required by U.S. Privacy Laws, we may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. In particular, when an individual authorizes an agent to make a request on their behalf, we may require the agent to provide proof of signed permission from the individual to submit the request, or we may require the individual to verify their own identity with us or confirm with us that they provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable privacy laws. We will respond to your request consistent with U.S. Privacy Laws.

To appeal our decision on your data subject requests, you may contact us at ggumc@ggumc.net. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

F. Disclosure for California and Nevada Consumers

• Disclosure About Direct Marketing for California Residents.California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our site that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the information in Section G of this Supplemental Notice.
• Disclosure for Nevada Consumers. We sell “covered information” as defined under Nevada law, but we generally do not disclose or share “personal information” as defined under Nevada law for commercial purposes. Under Nevada law, you have the right to direct us to not sell your covered information to third parties, as defined under Nevada law. To exercise this right, if applicable, you or your authorized representative may contact us using the contact information in Section G of this Supplemental Notice.

Last Updated: August 28, 2025