Privacy Policy

1. Nature of This Policy

The Private Aboriginal American National PMA Church Ministry ("PAAN," "the Ministry," "we," "us") is a Private Membership Association operating as a Free Church under 26 U.S.C. § 508(c)(1)(A). PAAN is not a 501(c)(3) organization, is not a public accommodation, and is not subject to the regulatory frameworks applicable to public entities.

This Privacy Policy governs how PAAN collects, stores, protects, and uses information provided by its members and applicants within the private domain of the Ministry.

2. Information We Collect

PAAN collects only the information necessary to administer membership, facilitate fellowship, and fulfill the Ministry's ecclesiastical mission. This may include:

• Full legal name, contact information, and mailing address
• Information provided during the membership application process
• MC1R-functional biological verification data submitted as part of the membership process
• Contribution and payment records (processed through Stripe)
• Communications between members and the Ministry
• Session data necessary for authenticated access to the Ministry's systems

3. Four-Tier Data Classification

All data held by PAAN is classified under a four-tier system that determines handling, access, and protection requirements:

4. No Third-Party Analytics or Advertising

PAAN does not use any third-party analytics services that transmit member data to external servers. We do not use Google Analytics, Facebook Pixel, or any similar tracking technology. PAAN does not engage in advertising of any kind. No member data is ever used for marketing purposes, sold to third parties, or shared with data brokers.

5. Cookies and Session Management

PAAN uses only the cookies strictly necessary for session management and authenticated access. These cookies contain no personally identifiable information beyond what is required to maintain your authenticated session. No tracking cookies, advertising cookies, or third-party cookies are used.

6. No Data Sharing with External Parties

PAAN does not share, sell, rent, license, or otherwise disclose member data to any external party. This includes but is not limited to: government agencies, commercial entities, affiliated organizations, research institutions, or any other third party. The sole exception is payment processing through Stripe, which receives only the minimum data necessary to process membership contributions. Stripe's handling of payment data is governed by their own privacy policy and PCI-DSS compliance obligations.

7. Encryption and Security

All data held by PAAN is encrypted at rest and in transit. The Ministry employs industry-standard encryption protocols (TLS 1.2+) for all data transmitted between members and the Ministry's systems. Database records are encrypted at the storage level. Access controls enforce the four-tier classification system described above.

8. Breach Notification

In the unlikely event of a data breach affecting member information, PAAN will notify all affected members within 72 hours of confirming the breach. Notification will include the nature of the breach, the categories of data affected, the measures taken in response, and recommended steps for affected members.

9. Data Retention

Member data is maintained as a permanent ecclesiastical record of the Ministry in accordance with the Ministry's Charter and Bylaws. As a religious organization, these records form part of the Ministry's permanent ecclesiastical archive. Members who withdraw from the Ministry may request that their contact information be updated or anonymized, but the ecclesiastical record of their membership will be retained in perpetuity.

10. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact:

11. Amendments

PAAN reserves the right to amend this Privacy Policy at any time. Members will be notified of material changes through the Ministry's internal communication channels. Continued membership and use of the Ministry's systems following notification of changes constitutes acceptance of the amended policy.