GDPR Compliance Guide – IK Prayer Requests
GDPR Compliance Guide – IK Prayer Requests
IK Prayer Requests includes built-in tools to help your church or organization comply with GDPR (General Data Protection Regulation) and similar privacy laws like CAN-SPAM and CCPA.
Consent Collection
The plugin includes a configurable consent checkbox on the prayer request submission form. When enabled:
- A consent checkbox appears before the submit button with customizable text
- The form cannot be submitted without checking the consent box
- The consent timestamp and IP address are stored with the prayer request record
- Consent data is available for audit purposes in the admin panel
To enable: Go to Prayer Requests > Settings > Privacy and check “Enable consent checkbox”.
Data Retention
Configure automatic data retention policies:
- Set a maximum retention period (30, 60, 90, 180, 365 days, or unlimited)
- Expired requests are automatically anonymized (personal data removed, prayer content retained for historical records)
- Anonymized requests show “Anonymous” instead of the submitter name and email
WordPress Privacy Tools Integration
IK Prayer Requests integrates with WordPress core privacy tools:
- Privacy Exporter: When a user requests their data export (Tools > Export Personal Data), all prayer requests associated with their email are included in the export
- Privacy Eraser: When a user requests data erasure (Tools > Erase Personal Data), their prayer requests are anonymized
Intercessor Data
Intercessor registrations (name and email) are also covered by the privacy tools. When an erasure request is processed, intercessor registrations matching that email are removed.
Spam Protection
The plugin supports Cloudflare Turnstile and Google reCAPTCHA v2 for spam protection. Both are privacy-friendly spam protection methods.
Recommended Privacy Policy Text
Add the following to your site privacy policy:
We collect prayer requests submitted through our website. The information collected includes your name, email address, and the content of your prayer request. This data is used solely for the purpose of managing prayer requests within our community. You may choose to submit requests anonymously. We retain prayer request data for [your retention period] after which personal information is automatically anonymized. You can request export or deletion of your data at any time by contacting us.