Privacy Policy

Last updated: April 1, 2025

This Privacy Policy describes our policies on the collection, use, and disclosure of information about you in connection with your use of our sites and services, including those offered through our websites, communications (e.g., emails, phone calls, texts, etc.), and mobile applications (collectively, the “Service”). The terms “we,” “us,” and “our” refer to Willow Creek Community Church, Inc., an Illinois corporation, including at www.willowcreek.org (the “Site”).

Before you use or submit any information through or in connection with our Service, please carefully review our Privacy Policy. By using any part of the Service, you acknowledge the collection, use, and disclosure of your information as described in this policy and agree to the policy provisions. To the extent permitted by law, the English version of this notice and the Privacy Policy is binding and any translations into other languages are for convenience only. In the event of a discrepancy between the English version and any translation, the English version shall control.

Contents

Who we are

Willow Creek Community Church is the controller and responsible for your personal data. We have appointed a policy officer who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the policy officer using the details set out below.

Personal information we collect

When you visit or use our Service, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on and/or permitted by your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

It is important that the Personal Information we collect about you is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us. You may update your personal information at any time by clicking on the Update My Personal Information link: https://portal.willowcreek.org/myaccount

Cookies and related technologies

“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. You can choose which cookies we can set by clicking the “Change Cookie Preferences” button below, however, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.Except for essential cookies, all cookies will expire in conjunction with the retention of the third party provider in 12 months.

“Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

“Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information.” Where we need to collect Personal Information by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

We also collect data when you otherwise interact with us directly, including where you subscribe to our service or publications, request marketing to be sent to you or give us feedback or contact us (“Contact Information”).

When we talk about “Personal Information” in this Privacy Policy, we are talking about Device Information, Order Information and Contact Information. It does not include data where the identity has been removed (anonymous data). Unless otherwise prohibited by applicable law, we may collect, use, and share anonymous data without your knowledge or consent.

We do not routinely collect any “special categories” of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offenses. All of the foregoing is known as “Special Information.” However, there may be instances in which we request such Special Information from you in order to formulate, market, promote or sell products and services targeting all or part of the Special Information. In those circumstances, we will inform you of our actions with respect to the collection, use, and retention of Special Information, as well as your rights with respect thereto.

How we use your personal information

We will only use your Personal Information when such use is consistent with our Privacy Policy, and applicable law otherwise allows our use.

We and/or our applicable third-party provider(s) use the Order Information that we collect generally to fulfill any orders placed through the Site (including setting you up as a customer, processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations. Additionally, we use this Order Information to:

Communicate with you;
Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

“Order Information” as used herein means information gathered, accessed, and/or necessary for the purchase of products and services, event registrations, entry fees, and/or other circumstances in which a user pays, donates, or otherwise provides purchase information (i.e., credit card, PayPal, Venmo, etc.) to us and/or our third-party service affiliates.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We may also use your Personal Information where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests, or where we need to comply with a legal obligation.

Change of purpose

We will only use your Personal Information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please see Contact Us below.

If we need to use your Personal Information for an unrelated purpose, we will notify you and (i) ask for your consent; and/or (ii) explain the legal basis which allows us to do so without your consent. Our goal is to always secure your consent first. Please note that we may process your Personal Information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Sharing your Personal Information

We share your Personal Information with third parties such as service providers and our professional advisors to help us render and/or improve on applicable services or otherwise as described herein. For example, we may share your personal information with a third-party data management SAAS provider to improve our services to you and/or to migrate data. We also use Google Analytics to help us understand how our customers use the Site — you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We may also share your Personal Information with third parties to whom we may choose to sell, transfer or merge all or parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your Personal Information in the same way as set out in this privacy policy.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We require all third parties to agree to respect the security of your Personal Information and to treat it in accordance with applicable law and this privacy policy. We do not consent to our third-party service providers using your Personal Information for their own purposes or in a manner which is inconsistent with this privacy policy. As you know, we are unable to control third-party behavior, but whenever feasible, we use commercially reasonable efforts to ensure that third-parties who have been given access to Personal Information by us respect your privacy in the same or similar way as us.

Behavioral advertising

As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Opt-out of targeted advertising

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Do not track

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser (i.e., an “Incognito Google Browser”). We do not have a Do Not Track tool for visiting our site, but you may opt out of certain cookies by clicking the blue consent preferences icon in the lower left-hand corner of the website.

Third-party links

This Site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Site, we encourage you to read the privacy policy of every website you visit.

International transfers

Where you are a customer or user outside of the US, please note that our use of your Personal Information will involve transferring your data internationally. Whenever we transfer your Personal Information internationally, we use reasonable commercial safeguards to ensure a similar degree of protection is afforded to it, for example where the country we are transferring to has been deemed to provide an adequate level of protection for personal data. Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Information internationally.

Data security

We have put in place reasonable security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Personal Information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We will only retain your Personal Information for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Your rights

If you are a resident of a state or country that grants one or more of the following rights, we are giving you notice that you have some or all of the right to:

Access your Personal Information in a reasonable manner and time frame; provided, we shall have no obligation to deliver such Personal Information to you in any specific format or manner, unless required by law or contract;
Request any incomplete or inaccurate Personal Information to be corrected, though we may need to verify the accuracy of the new data you provide to us and your identity and/or right to request such changes;
Ask us to delete or remove Personal Information; provided, however, there may be circumstances in which we are permitted by applicable law or other rights (including your consent) to retain such Personal Information;
Object to processing of your Personal Information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms;
Ask us to suspend the processing of your Personal Information if our use of the data is unlawful but you do not want us to delete it, where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims, or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it;
Request the transfer of your Personal Information to you or to a third party (this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you); and
Withdraw consent at any time where we are relying on consent to process your Personal Information.

If you would like to exercise any of these rights, please contact us through the contact information below.

You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights described above). However, we may charge a reasonable administration fee if your request is clearly unfounded, repetitive or excessive, and/or if you request any specific format or manner of delivery. Alternatively, we may refuse to comply with your request in these circumstances.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. To the extent we retain your Personal Information beyond the point when we make substantive changes to this policy, we will notify you using certain elements of your Personal Information (e.g., email address). For the avoidance of doubt, a change in our policy does not automatically terminate our right to collect, use, or retain your Personal Information, beyond the time of change, unless such change specifically accomplishes such limitation.

Minors

The Site is not intended for individuals under the age of 13 and we do not knowingly collect data relating to children.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at policyofficer@willowcreek.org or by mail using the details provided below: Willow Creek Community Church, Re: Policy Officer, 67 Algonquin Road, South Barrington, IL 60010

Privacy Policy State Specific Language

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the following rights regarding their personal information:

Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell.
Right to Delete: You can request the deletion of personal information we have collected from you, subject to certain exceptions.
Right to Opt Out of Sale/Sharing: California residents may opt out of the sale or sharing of their personal information.
Right to Correct: You can request that we correct any inaccurate personal information.
Right to Limit Use of Sensitive Information: California residents have the right to limit the use of sensitive personal information.
Non-Discrimination: We will not discriminate against you for exercising your rights under the CCPA/CPRA.

To exercise your California privacy rights, please contact us.

Virginia Residents (CDPA)

Under the Virginia Consumer Data Protection Act (CDPA), Virginia residents have the following rights:

Right to Access: You may request access to the personal data we have collected about you.
Right to Correct: You may request that we correct any inaccuracies in your personal data.
Right to Delete: You can request that we delete personal data we have collected from you.
Right to Opt Out: Virginia residents may opt out of the processing of their data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
Data Portability: You can request a copy of your personal data in a portable and, where feasible, readily usable format.

To exercise these rights, please contact us.

Colorado Residents (CPA)

Under the Colorado Privacy Act (CPA), Colorado residents have the following rights:

Right to Access: You can request access to the personal data we hold about you.
Right to Correct: You may request that we correct any inaccuracies in your personal data.
Right to Delete: You can request the deletion of your personal data.
Right to Opt Out: Colorado residents may opt out of the processing of their personal data for purposes of targeted advertising, sale, or profiling.
Data Portability: You can request a copy of your personal data in a portable and usable format.

To exercise these rights, please contact us.

Connecticut Residents (CTDPA)

Under the Connecticut Data Privacy Act (CTDPA), Connecticut residents are entitled to the following rights:

Right to Access: You can request access to personal data we hold about you.
Right to Correct: You can request corrections to any inaccuracies in your personal data.
Right to Delete: You have the right to request the deletion of your personal data.
Right to Opt Out: You may opt out of the sale of your personal data, targeted advertising, and profiling decisions that produce significant effects.
Data Portability: You have the right to request your data in a portable, easily usable format.

To exercise these rights, please contact us.

Utah Residents (UCPA)

Under the Utah Consumer Privacy Act (UCPA), Utah residents have the following rights:

Right to Access: You can request access to the personal data we collect about you.
Right to Delete: You may request that we delete personal data we collect from you.
Right to Opt Out: Utah residents may opt out of the sale of personal data or targeted advertising.
Right to Data Portability: You can request a portable copy of your personal data.

To exercise these rights, please contact us.

Iowa Residents

Under the Iowa Consumer Data Privacy Law, Iowa residents have the following rights:

Right to Access: Request information about the personal data we collect.
Right to Delete: Request the deletion of your personal data.
Right to Opt-Out: Opt-out of the sale of personal data and targeted advertising.
Right to Correct: Request the correction of inaccurate data.

To exercise these rights, please contact us.

Illinois Privacy Policy Addendum

Data Collection and Use

We collect personal data as provided in our general privacy policy.

Data Access and Deletion Rights

You have the right to access and request the deletion of your personal data. To do so, please contact us. We will address your request promptly.

Data Sharing

We do not sell your data. We may share it with third parties only as described in our general privacy policy, or otherwise according to applicable law.

Data Security

We use reasonable measures to protect your data from unauthorized access. This includes using protected servers and transmission protocols.

Children’s Data

We do not collect data from children under 13. If we discover such data, we will delete it.

Policy Updates

We may update this policy periodically. Changes will be communicated to you via website update.

Indiana, Montana, Tennessee, Texas, Oregon, Delaware, New Jersey, New Hampshire, Minnesota, Maryland, Kentucky, Nebraska, Rhode Island, and other states

Residents of these states may have the following rights under their respective state privacy laws:

Right to Access: You may request access to the personal data we have collected about you, including the categories of data, the purposes for processing, and the third parties with whom we share your data.
Right to Correct: You may request the correction of any inaccurate personal information.
Right to Delete: You may request the deletion of your personal data, subject to certain exceptions such as compliance with legal obligations or completing transactions.
Right to Opt-Out: You may opt out of the sale of your personal data or its use for targeted advertising or profiling.
Sensitive Data Processing: We will not process sensitive data (such as racial or ethnic information, biometric data, or health-related data) without obtaining your consent.
Universal Opt-Out Mechanism: Some of these states may allow consumers to use a universal opt-out mechanism to signal their privacy preferences automatically across websites.

To exercise these rights, please contact us.

While we comply with various state-specific data protection laws, residents of states without specific privacy regulations may still request information on the collection, use, and sharing of their personal data by contacting us directly. We aim to respect consumer privacy and data security regardless of jurisdiction.

Privacy Policy Version Date: April 1, 2025

To request a copy of a previous version of our policy you can Contact Us.

<img src="https://eaqmp884dxd.exactdn.com/wp-content/themes/wc2021/images/w-lines.svg" alt="Letter W represented as diagonal lines" data-eio="l"> Privacy Policy

Privacy Policy