Privacy Policy

The Scoffield & Margaret Eversley Foundation (“the Foundation”, “we”, “us”, or “our”) is a non-profit philanthropic and charitable organization duly established and operating in accordance with the laws of Barbados. This comprehensive Privacy Policy sets out our solemn commitments, procedural safeguards, and statutory obligations regarding the collection, holding, storage, disclosure, and protection of personal data.

Our information governance architecture complies rigorously with the provisions of the Barbados Data Protection Act, 2019–29 (DPA), as well as recognized international standards of civil data stewardship. This Policy governs all interactions undertaken through our primary web domains (www.eversleyfoundation.org), our charitable grant application cycles, church ministry initiatives, benevolent aid registries, and in-person volunteer programs.

We gather only that information which is strictly necessary, proportionate, and germane to the furtherance of our charitable and benevolent mandate. We classify collected records into four distinct data categories:

In accordance with Section 6 of the Barbados Data Protection Act, 2019–29, the Foundation processes personal data only where a legitimate legal ground exists. Our lawful processing bases include:

Explicit Consent: Granted freely when subscribing to our gazettes, submitting volunteer dossiers, or presenting benevolent grant solicitations.

Legitimate Charitable Interest: Maintaining foundational fellowship registers, stewarding patron relationships, confirming transaction authenticity, and validating aid delivery.

Legal & Regulatory Obligation: Satisfying statutory audit filing rules with the Registrar of the Supreme Court and Barbados Revenue Authority (BRA).

Charitable contributions routed via wire transfer, debit or credit card, or authenticated third-party clearing engines are protected by TLS 1.3 / 256-bit encryption. The Foundation maintains strict computational boundaries separating donor identification directories from processing vaults.

Uncompromised Cardholder Security

At no time do staff, trustees, or system administrators possess access to full 16-digit Primary Account Numbers (PAN) or Card Verification Values (CVV). All real-time settlements occur under audited tokenization frameworks supervised by registered financial institutions in Barbados and international clearinghouses.

We do not sell, rent, commercialize, or barter personal information under any circumstance. Personal data is shared strictly under the following controlled scenarios:

Electronic dispatches, including annual ministry digests, financial transparency bulletins, and impact reports, are transmitted solely to persons who have explicitly opted into receipt. Every message incorporates a direct, functional one-click unsubscribe mechanism.

Revocation requests are processed through our automated distribution ledger within five (5) business days, terminating promotional communications while maintaining necessary fiscal receipt records as mandated by statutory accounting conventions.

Our digital interfaces deploy first-party, essential session tokens required for secure site navigation, accessibility preferences, and form state preservation. We categorically reject intrusive third-party cross-site advertising trackers.

Where aggregate metrics are logged to assess page latency and bandwidth optimization across Caribbean network backbones, data streams are stripped of unique identifiers. Users may modulate or prohibit cookie operations via local web browser configuration settings without impairing primary reading experiences.

During fellowship convocations, community aid distributions, and church milestone celebrations in Barbados, the Foundation documents proceedings to share genuine testimonials of transformative grace.

In accordance with international child safeguarding charters and the laws of Barbados, the Foundation does not knowingly solicit or collect identifiable records from minors under eighteen (18) years of age without explicit, verifiable authorization from a parent or legal guardian.

Youth ministry, educational bursary, and nutritional enrichment applications must be countersigned by an authorized parent or legal custodian. Records relating to minor participants are housed within elevated access-tier environments subjected to perpetual audit logging.

We apply multi-layered technical countermeasures to neutralize risk of unlawful access, accidental destruction, unauthorized disclosure, or data modification:

Access Controls

Mandatory multi factor authentication (MFA) and role based permissions restricted strictly by functional necessity.

Vault Storage

Data at rest is secured via AES-256 cryptographic protocols across physically guarded server enclosures.

Audit Logs

Real-time log ingestion systems track unauthorized query attempts and generate automated security advisories.

We retain personal data exclusively for the duration necessary to satisfy the objectives for which it was originally collected, including the satisfaction of statutory, legal, accounting, and reporting criteria under Barbados law.

Fiscal journals, contribution ledgers, and formal tax receipts are maintained for a period of seven (7) years following the conclusion of the relevant fiscal period, in compliance with Barbados Revenue Authority directives. Upon expiry of statutory retention mandates, records undergo certified cryptographic deletion or high-temperature physical incineration.

Under Part III of the Barbados Data Protection Act, 2019–29, you enjoy explicit statutory rights regarding the governance of your personal information:

Our website may occasionally incorporate informational links to affiliated ecclesiastical bodies—such as the Church of the Nazarene Barbados District or recognized community partner foundations.

The Scoffield & Margaret Eversley Foundation exercises no operational dominion over third-party digital portals. When you transition via outbound hyperlink to an external property, you become subject to that operator’s distinct privacy documentation. We strongly encourage review of all outside disclosures.

In order to maintain resilient, geographically redundant systems, donor records and application backups may be replicated across enterprise cloud nodes located outside the jurisdiction of Barbados (such as Canada, the United States, or the European Economic Area).

Whenever cross-border replication takes place, we verify that target hosting regimes enforce privacy frameworks comparable to the Barbados Data Protection Act, supported by enforceable Standard Contractual Clauses (SCCs) and verified ISO/IEC 27001 data center certifications.

We apply an elevated tier of data containment to individuals and families receiving benevolent emergency assistance, medical hardship subsidies, or pastoral care interventions.

The Board of Trustees conducts periodic reviews of our institutional privacy standards to ensure persistent alignment with evolving case law, judicial rulings from the High Court of Barbados, and international regulatory shifts.

Substantive revisions will be flagged prominently via a formal alert banner on our homepage and reflected by an incremented “Effective Date” at the inception of this document. Continued engagement with Foundation initiatives following publication signifies acceptance of the amended covenants.

For any questions, Subject Access Requests (SARs), requests for data rectification, or formal notifications, please address our appointed Privacy Officer using the institutional contact coordinates below:

The Scoffield & Margaret Eversley Foundation

Office of Institutional Compliance & Secretariat

Barbados HQ

Postal Address

Church of the Nazarene, Barbados District
Clyde and Marjorie Greenidge Complex
Eagle Hall, St. Michael
BARBADOS

Electronic Correspondence

info@eversleyfoundation.org

Official Web Domains

www.eversleyfoundation.org

Our Secretariat guarantees formal acknowledgement of all statutory requests within thirty (30) calendar days.