Privacy Notice

This notice explains how personal information is handled through RoshHashanahProphecy.com and the personal prophetic word request service.

What information is processed?

When you browse the site, Cloudflare may process ordinary technical information needed to deliver and protect it, such as IP address, browser information, requested URLs, timestamps and security logs.

When you request a personal prophetic word, the system may process your name, preferred name, email address, optional country and sex information, who the word is for, delivery choice, optional message, contribution amount, consent records, request reference, payment status and communication history.

Card numbers are entered into Stripe's secure payment element and are not stored in the Rosh Hashanah Prophecy database.

Why is the information used?

The information is used only as reasonably needed to create and administer the request, prepare and deliver the prophetic word, communicate with the requester or direct recipient, process and verify payment, handle cancellations and refunds, provide support or a replacement copy later, keep required business records, and protect the service from fraud or misuse.

The legal basis, in plain English

Religious beliefs and other sensitive information

A Christian prophetic request can reveal information about religious belief. An optional message might also contain health information or other information that GDPR treats as especially sensitive.

For special-category information, including information that reveals religious belief or other sensitive matters you provide, the form asks for explicit consent. This is the Article 9(2)(a) condition used for that sensitive information.

You can withdraw that consent by contacting prophecy@requestword.com. Withdrawing consent does not make earlier lawful processing unlawful, and it does not require deletion of records that must still be kept for a legal obligation or legal claim.

If the word is for someone else

Please only request a word for another person where this is appropriate, and do not provide private or sensitive information about them without their permission.

If you choose to receive the completed word yourself, the recipient is not contacted by the system. The form no longer collects their email address unless you choose direct delivery.

If you choose direct delivery, you must confirm that the recipient has agreed that you may provide their email address for this request. The recipient then receives a short first email explaining who supplied their name and email address, why it is being used, where to read this Privacy Notice, and how to ask me not to continue using their details. Their contribution amount is never disclosed to them.

Stripe and cookies or similar technology

This site does not use its own advertising or analytics cookies. Stripe is loaded when you proceed to the secure payment step. Stripe may use cookies or similar technologies for payment functionality, fraud prevention, security, authentication and related operation of its services.

You can read Stripe's Privacy Policy and Stripe's Cookie Policy.

Cloudflare and other service providers

Cloudflare is used to host and protect the site, run the request backend, store request data in D1 and support transactional email. Stripe is used for payment processing. These providers may process information outside your country. Where GDPR transfer rules apply, their own data-processing terms and approved transfer safeguards apply.

How long is information kept?

• Personal-word request record and completed recording: normally up to 5 years after delivery. This allows me to help when someone later asks for their word to be resent.
• Optional message text: normally up to 12 months after delivery, then removed from active ministry records unless it is still needed for a complaint, cancellation, legal issue or another clear reason.
• Consent, payment, refund and accounting records: kept for the period required by Czech law or as reasonably necessary to establish or defend legal rights.
• Security and provider logs: kept according to the operational and security retention periods of the relevant service, including Cloudflare and Stripe.
• Cancelled requests: if a request is cancelled and refunded before delivery, ministry message/content is normally removed within 30 days after the refund and administrative closure. Payment, refund, consent and cancellation records may still be retained where required for legal, tax or dispute purposes.

You can ask for ministry data to be deleted earlier. Where a specific record must still be retained for legal or accounting reasons, it will be kept only for that purpose rather than used for ongoing ministry activity.

Your GDPR rights

You can ask for access to your personal information, correction, deletion, restriction, objection or portability where the relevant GDPR right applies. You can also withdraw consent where processing depends on consent.

To make a request, email prophecy@requestword.com. I may need enough information to verify that the request relates to you.

You also have the right to complain to the Czech data-protection authority, the Office for Personal Data Protection (ÚOOÚ).

No sale of personal information

Your personal information is not sold to advertisers. The request information is not used to build advertising profiles.

Data controller and contact details

Related information

Personal Word Service Information
Prophetic Ministry Disclaimer
Accessibility