Privacy Notice

1. Data controller

Teleios Praxis (a study platform by a D.Min. theologian) acts as the personal data controller for the purposes described below. Contact: via the consultation page.

2. Data we process

• Consultation data — name, email, WhatsApp number, triage category, and the message details you submit through the /consult form.
• Community waitlist data — preferred name and WhatsApp number submitted via the /modul form (Teleios Fellowship Surabaya), for study-circle information.
• Local preferences — dark/light theme and consent status, stored on your device (localStorage), never sent to our servers.
• Pseudonymous audit trail — security records in the form of HMACs (not actual identities), timestamps, and actions, per the accountability obligation of Article 46 of the PDP Law.

3. Legal basis & purpose

Processing is carried out on the basis of consent (Article 20) and the obligation to fulfil an agreement (Article 21), for two purposes: triage and follow-up of pastoral or academic consultations, and study-circle information for those who signed up. We never sell, rent, or expose personal data to third parties for marketing.

4. Security measures

• Encryption of personal data at rest: AES-256-GCM.
• TLS 1.3 in transit; strict security headers (nonce/hash-based CSP, HSTS, anti-clickjacking).
• Vault link access keys based on HMAC-SHA256 with expiry and download quotas.
• Cloudflare Turnstile bot protection at the consultation entrance.

5. Retention

Consultation data is kept for 24 months after last contact, then deleted (Article 7(1)(f) — purpose limitation). Community waitlist data is kept until you request deletion or the study circle you joined has run. Pseudonymous audit trails are kept for 12 months. You may request earlier deletion.

6. Your rights (Articles 5–13)

You have the right to access, rectification, erasure, withdrawal of consent, and objection to the processing of your personal data. Submit requests via the consultation form or directly through the WhatsApp channel provided after submission.

7. Vault links

Digital download links are capability links that expire automatically and are limited in the number of downloads. Do not reshare them; each download is recorded pseudonymously for distribution security.

8. Changes

This notice is versioned: 2026-10-v1. Material changes will change the consent version number on the consultation form.