Effective Date: 10th June 2025 Website: www.heisreal.today Operated by: He is Real Today (the “Organisation”) Contact: info@heisreal.today This Privacy Policy explains how the Organisation collects, uses, stores, and protects your personal data when you interact with our website or submit content through it. We are committed to respecting your privacy and complying with applicable data protection laws in the United Kingdom, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Data We Collect

When you interact with www.heisreal.today, we may collect and process the following categories of personal data:

● Full name (if provided)

● Email address

● Geographic location (e.g. country)

● Age (if provided)

● IP address

● Religious or faith-based information contained in your submitted testimony (special category data)

2. How We Collect Your Data

We collect your personal data through:

● Submission forms on our website

● IP address logs through website analytics

● Optional fields in our testimony upload forms

● Cookies and embedded third-party tools (see Section 6)

We do not collect data through user accounts, as the website does not require registration

3. How We Use Your Data

We use your personal data for the following purposes:

● To publish submitted testimonies and God Stories on our website

● To share testimonies and God Stories on our official social media platforms

● To potentially feature content in future physical publications (e.g. a book)

● To send newsletters or updates, if you opt in

● To contact you if we require clarification about your submission

● For internal data analysis to improve our outreach and mission effectiveness

We process any faith-based content you submit as special category data, under Article 9(2) (d) UK GDPR (processing by not-for-profit bodies with appropriate safeguards)

4. Legal Bases for Processing

We rely on the following legal bases for processing your personal data:

● Consent – for the publication of testimonies and optional marketing communications.

● Legitimate interest – for operating the website, moderation, and outreach aligned with our charitable mission.

● Legal obligation – where necessary to comply with legal or regulatory requirements.

5. Data Sharing and Third Parties

We may share your data with third-party service providers who assist in operating our website and related services, including:

● Squarespace – website hosting and form collection

● Amazon Web Services (AWS) – data storage and hosting (may be located outside the UK/EEA)

● Google Cloud Platform (GCP) – We may use GCP for data storage and hosting services. This may involve the transfer and processing of personal data on servers located outside the United Kingdom and the European Economic Area (EEA), subject to appropriate safeguards in accordance with applicable data protection laws.

● Analytics providers – e.g., Google Analytics, for anonymised site usage tracking

● Social media platforms – when sharing your published testimony

These third parties are required to process your data securely and in compliance with applicable data protection laws.

6. Cookies and Tracking

Our website may use cookies and embedded services (e.g., social media videos or analytics). These may collect:

● IP addresses

● Device/browser type

● Pages visited and duration

You may adjust your browser settings to block cookies, although this may impact your experience on the site.

7. International Data Transfers

Some of the third-party services we use (such as AWS or embedded tools) may store or process your data outside the United Kingdom, including in the United States. We ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner’s Office.

8. Data Retention

We retain your personal data indefinitely for archiving, publication, and mission-related purposes, unless you request its removal. We will review our retention practices periodically to ensure data is not held longer than necessary.

9. Your Rights

Under the UK GDPR, you have the following rights:

● To access the personal data we hold about you

● To correct inaccuracies in your personal data

● To request the deletion of your data (“right to be forgotten”)

● To object to processing or request restriction

● To withdraw your consent (where processing is based on consent)

● To lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact: info@heisreal.today

10. Security Measures

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration. These include secure servers, encryption where appropriate, and restricted access to data.

11. Children and Eligibility to Provide Personal Data

This Website is not intended for use by individuals under the age of 18 without the express consent of a parent or legal guardian.

If you are under 18 years of age, you must obtain permission from your parent or legal guardian before submitting any personal data to us through this Website, including via forms, comment sections, or any interactive features.

We do not knowingly collect or process personal data from individuals under 18 without appropriate parental consent. If we become aware that we have inadvertently collected personal data from a child without such consent, we will take reasonable steps to delete it as soon as practicable.

In accordance with the UK General Data Protection Regulation (UK GDPR) and the Age Appropriate Design Code issued by the Information Commissioner’s Office (ICO), we take particular care to ensure that the data protection rights and best interests of children are respected

If you are a parent or legal guardian and believe that your child has provided us with personal data without your consent, please contact us at info@heisreal.today so that we may take appropriate action.

This Privacy Policy and any disputes arising out of or in connection with it shall be governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction to settle any such disputes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated “Effective Date.” Continued use of the site after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have any questions, concerns, or requests regarding your personal data, please

contact:

info@heisreal.today