Transparency about how we handle your data and the rules that govern use of this website.
RGC ("we", "us", "our") is committed to protecting your personal information and upholding your privacy rights. This Privacy Policy explains what data we collect when you visit https://prayerhouse.co.ke, why we collect it, how we use it, and the choices you have. It applies to all visitors, users, students, donors, and volunteers.
The data controller responsible for your personal information is:
We are registered under the laws of the Republic of Kenya. While we do not currently have a formally designated Data Protection Officer (DPO), privacy enquiries are handled by our administration team at the email above.
We collect personal data in the following situations:
When you create an account on this website you provide:
Donations to RGC are processed externally via M-Pesa, bank transfer, or other payment providers. We do not store payment card numbers or M-Pesa PINs. We may retain:
Payment processing is governed by the respective provider's privacy policy (e.g., Safaricom M-Pesa).
When you browse this website, our web server automatically records:
This data is not linked to your identity unless required for security investigation.
We use essential cookies and session data to operate the website. See our Cookie Policy for full details.
Under the Kenya Data Protection Act 2019 (DPA 2019) and, where applicable, the EU/UK General Data Protection Regulation (GDPR/UK GDPR), we process your personal data on one or more of the following lawful bases:
| Basis | When We Rely on It |
|---|---|
| Consent | Marketing emails and ministry newsletters (opt-in only); non-essential cookies (if applicable). |
| Contract Performance | Managing your user account; delivering online courses you have enrolled in. |
| Legitimate Interests | Website security and fraud prevention; server log retention; improving the website; responding to enquiries you initiated. |
| Legal Obligation | Retaining donation and financial records as required by Kenyan tax and charity law; responding to lawful government or court requests. |
We will never use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.
We do not sell, rent, trade, or lease your personal information to any third party under any circumstances.
We share data with trusted processors who act solely on our documented instructions:
We may disclose your personal data where required to do so by law, court order, or regulation — including to the Office of the Data Protection Commissioner (Kenya), law enforcement agencies, or other competent authorities.
Our primary servers and operations are based in Kenya. If personal data is transferred to a country outside Kenya that does not have an adequate level of data protection, we ensure appropriate safeguards are in place — such as standard contractual clauses — before any transfer occurs. Where EU/UK GDPR applies, we comply with Chapter V transfer requirements.
| Data Category | Retention Period | Reason |
|---|---|---|
| User account data | Duration of account + 2 years after deletion request | Security, dispute resolution |
| Course enrolment & progress | 5 years after last activity | Certification and compliance records |
| Contact / volunteer form submissions | 3 years | Reference and follow-up |
| Donation records | 7 years | Kenya tax law (Income Tax Act, Cap. 470) and charity reporting obligations |
| Server log files (IP, access logs) | 90 days | Security investigation; shorter period for routine logs |
| Email marketing (opt-in list) | Until you unsubscribe + 1 year | Proof of consent |
After the applicable retention period, data is securely deleted or anonymised so it can no longer identify you.
Under the Kenya Data Protection Act 2019 (and, where applicable, the GDPR/UK GDPR), you have the following rights regarding your personal data:
To exercise any of these rights, email us at info@prayerhouse.co.ke with the subject line "Privacy Request". We will respond within 30 days (extended to 60 days for complex requests, with notification). We may need to verify your identity before processing the request.
This website and its online courses are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. Individuals aged 13–17 may use this website, but we recommend they do so with parental awareness. Youth who participate in our physical programmes (Youth Leadership Programme, etc.) are subject to separate pastoral consent processes managed offline by our ministry team.
If you believe we have inadvertently collected data from a child under 13, please contact us immediately at info@prayerhouse.co.ke and we will promptly delete it.
We implement appropriate technical and organisational security measures, including:
No transmission of data over the internet is completely secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a data breach that poses a high risk to your rights, we will notify affected individuals and the ODPC as required by law.
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered users by email. Continued use of the website after changes constitutes your acknowledgement of the updated policy.
Please read these Terms of Use ("Terms") carefully before using https://prayerhouse.co.ke (the "Website") operated by RGC ("we", "us", "our"). By accessing or using the Website, you agree to be legally bound by these Terms. If you do not agree, you must not use the Website.
These Terms constitute a legally binding agreement between you and RGC. They apply to all visitors, registered users, course students, donors, and any other person who accesses or uses any part of the Website or its content.
We reserve the right to modify these Terms at any time. We will indicate changes by updating the effective date above. Your continued use of the Website after any modification constitutes acceptance of the revised Terms. If you disagree with updated Terms, you should stop using the Website and delete your account.
By using this Website, you represent and warrant that:
Certain features — including online courses, personalised content, and donation history — require you to create an account. You agree to provide truthful and accurate information during registration and to keep it updated.
We reserve the right to suspend or permanently terminate accounts that: breach these Terms; submit false or fraudulent information; engage in abusive, offensive, or disruptive behaviour toward our community or staff; attempt to gain unauthorised access to the Website's systems; or for any other reason at our sole discretion, with or without notice.
You may delete your own account at any time by contacting us at info@prayerhouse.co.ke. Deletion requests will be processed in accordance with our Privacy Policy.
Online courses available on this Website are provided for spiritual formation, biblical education, and leadership development purposes. Enrolment is subject to availability and any stated prerequisites. We reserve the right to modify, suspend, or discontinue any course at any time.
Upon enrolment, we grant you a limited, personal, non-exclusive, non-transferable, revocable licence to access and use course materials (lessons, videos, notes, assessments) solely for your personal, non-commercial spiritual development. You may not:
You agree to complete all assessments, quizzes, and coursework honestly and without assistance from others unless explicitly permitted. Misrepresentation of your work may result in account suspension and revocation of any certificates issued.
Where completion certificates are issued, they are for personal and ministry recognition purposes only. They do not constitute an accredited academic qualification unless explicitly stated. RGC makes no warranty regarding the recognition of certificates by third parties.
All content on this Website — including but not limited to sermons, teachings, course materials, articles, images, graphics, logos, audio and video recordings, and source code — is owned by or licensed to RGC and is protected under Kenyan and international copyright law (Copyright Act, Cap. 130; Berne Convention).
You may:
Without our prior written permission, you may not:
Permission requests should be directed to info@prayerhouse.co.ke. We are generally supportive of non-commercial ministry use with attribution.
If you submit any content to us (e.g., via forms or course responses), you grant us a non-exclusive, royalty-free licence to use that content for the purposes for which it was submitted. You represent that you own or have the right to submit such content.
All financial gifts to RGC are entirely voluntary. No donation is required to access freely available website content, attend services, or participate in community programmes.
Donations made via M-Pesa, bank transfer, or any other payment method are processed by the respective payment provider, whose own terms and privacy policy apply. RGC is not responsible for errors, delays, or failures in the payment provider's systems. If you believe a payment has been misdirected or made in error, contact us promptly at info@prayerhouse.co.ke with your transaction reference.
As a ministry operating under Kenya's charitable frameworks, we do not routinely provide refunds on donations. Where a genuine error has occurred (e.g., a duplicate transaction or incorrect amount entered), we will make reasonable efforts to correct it within 30 days of notification, subject to the payment provider's capabilities. Refund decisions are at the sole discretion of our leadership.
Designated gifts (e.g., "Building Fund", "Community Programme") will be used for the stated purpose to the best of our ability. Where the designated project is completed or circumstances change, funds may be redirected to the nearest equivalent ministry need, and we will endeavour to notify significant donors.
Gift acknowledgment letters or receipts are available on request for recordkeeping purposes. The tax-deductibility of your donation depends on your country's tax law; we do not provide tax advice. Please consult a qualified tax professional regarding deductibility in your jurisdiction.
You agree not to use this Website to:
Violation of this policy may result in immediate account suspension, reporting to law enforcement, and/or legal action.
This Website and all its content are provided on an "as is" and "as available" basis, without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, non-infringement, or uninterrupted availability.
Sermon teachings, course content, and devotional materials are provided for spiritual enrichment and do not constitute professional legal, medical, financial, or counselling advice. For personal matters of significant consequence, please seek qualified professional guidance.
We do not warrant that the Website will be free of errors, viruses, or other harmful components, or that defects will be corrected. We make no guarantees regarding the accuracy, completeness, or timeliness of any information on the Website.
To the fullest extent permitted by the laws of Kenya, RGC and its leadership, staff, and volunteers shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from:
Our total liability to you for any claims arising from these Terms shall not exceed the greater of KES 5,000 or the total amount you donated to RGC in the three months preceding the claim.
You agree to indemnify, defend, and hold harmless RGC, its leadership, staff, agents, and volunteers from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of your violation of these Terms or your misuse of the Website.
This Website may contain links to external websites for your convenience. We do not endorse, control, or take responsibility for the content, privacy practices, or accuracy of any third-party website. Visiting external links is at your own risk.
These Terms of Use are governed by and construed in accordance with the laws of the Republic of Kenya, without regard to its conflict of law principles.
We encourage you to contact us first at info@prayerhouse.co.ke to resolve any dispute informally. If we cannot reach a resolution within 30 days, disputes shall be submitted to mediation administered in Machakos, Kenya, before proceeding to litigation.
You agree that any legal action arising from these Terms shall be brought exclusively in the courts of competent jurisdiction in Machakos or Nairobi, Kenya, and you irrevocably submit to the personal jurisdiction of those courts.
If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.
These Terms, together with our Privacy Policy and Cookie Policy, constitute the entire agreement between you and RGC with respect to your use of this Website.
Cookies are small text files that a website places on your device (computer, tablet, or phone) when you visit. They allow the website to remember your preferences, keep you logged in, and function correctly across page loads. Cookies cannot execute code, carry viruses, or access other files on your device.
This Website uses a small number of strictly necessary cookies required for secure operation. We do not use advertising, behavioural tracking, or social media tracking cookies.
These cookies are essential for the Website to function. They cannot be disabled without breaking core functionality such as login, form submission, and security. No consent is required for strictly necessary cookies under applicable law.
| Cookie Name | Set By | Purpose | Duration | Type |
|---|---|---|---|---|
bht_sess |
RGC | PHP session identifier. Keeps you logged in, maintains form data across page loads, and links your browser to your server-side session. Contains no personal data itself — the data is stored server-side and this token is just a lookup key. | Session (deleted when browser closes) | First-party, HTTP-only, SameSite=Lax |
_bht_csrf |
RGC | CSRF (Cross-Site Request Forgery) security token. Validates that form submissions originate from this website and not a malicious third-party site. Required for all POST forms (contact, login, donation, courses). | Up to 1 hour (regenerated on each form action) | First-party, HTTP-only, SameSite=Strict |
Functional cookies remember your preferences (e.g., language, display settings). We do not currently set any functional cookies beyond the session cookie above.
We do not currently use Google Analytics, Matomo, or any third-party analytics platform that drops cookies. If we introduce analytics in the future, we will update this policy and seek your consent where required.
We do not use advertising networks, retargeting pixels, or social media tracking cookies of any kind.
While we do not set third-party cookies, loading this Website causes your browser to make direct HTTP requests to the following external servers for font and icon files. These requests may expose your IP address and browser information to those services:
| Service | Provider | Data Shared | Sets Cookies? | Privacy Policy |
|---|---|---|---|---|
| Google Fonts | Google LLC (USA) | IP address, browser user-agent, referring page | No persistent cookies set by Google Fonts | policies.google.com |
| Font Awesome CDN | Cloudflare Inc. (USA), via cdnjs.cloudflare.com | IP address, browser user-agent | No persistent cookies | cloudflare.com/privacypolicy |
You can control cookies through your browser settings. Instructions for common browsers:
bht_sess)
will log you out and prevent you from logging in, submitting forms, or accessing course content.
The CSRF cookie is required for any form submission to work. Disabling these will significantly
limit your use of the Website.
To opt out of Google Fonts collecting data, you can use a browser extension such as uBlock Origin or disable external font loading in your browser. Alternatively, you can request that we serve fonts locally — contact us at info@prayerhouse.co.ke.
Some browsers send a "Do Not Track" (DNT) signal. As we do not use tracking or advertising cookies, our Website does not alter its behaviour in response to DNT signals — but this also means you are already not being tracked beyond the strictly necessary cookies described above.
We are happy to help with any privacy request, data subject access request, or policy question.
Email us at info@prayerhouse.co.ke
or call +254 714 136 454.
We aim to respond within 5 business days.