What we collect, and what we do with it

Consent is not one switch

Each of the following is recorded separately, with the exact wording you were shown, the channel you agreed on, and the time you agreed. Agreeing to one is never treated as agreeing to another.

Operational service messages

Shift details, area changes, weather holds and all-clears. Needed to run the event you are part of.

Pastoral follow-up by RAW

A member of the RAW team contacting you about a decision you recorded.

Referral to a partner church

Passing your name and contact details to one named church so they can follow up. Without this, a decision is never allocated to anyone.

Email and SMS encouragement

A short series of encouragement messages. Separate from a person actually contacting you.

Marketing

News, appeals and event promotion. Never inferred from any of the others.

Public acknowledgement of giving

Showing your name on a giving wall. Off unless you turn it on.

Use of a supplied photo

Using a photo you provided. Separate from consenting to be contacted.

Withdrawing consent

You can withdraw any of them at any time, without affecting the others. Withdrawal is recorded against the same purpose rather than deleting the original record, so there is a truthful history of what you agreed to and when you changed it. Once withdrawn, a referral consent stops any further allocation immediately.

Reply STOP to any SMS, or use the contact details on the contact page.

Who can see what

• Access is by role, and the platform refuses rather than hides: a screen you are not authorised for returns nothing, it does not simply omit a button.
• Medical, safeguarding, pastoral notes and donor records need heightened authentication even for staff who can already see your name, and every such access is recorded.
• A partner church receives only the minimum needed to follow up, and only for the person who consented to that referral.
• Every access, change, allocation and disclosure is written to an append-only audit record. Corrections add a new linked record; nothing is quietly rewritten.

Payments

Card details are entered on Stripe's payment surface and never reach Decide.ly. The platform holds the amount, the Stripe reference and your receipt details only, and records a donation only once Stripe has confirmed it.

Location and photos

The field app uses event areas and map references rather than continuous tracking. Precise location is captured only where it is necessary — an incident or a request for help — and it is attached to that record, not to you.