Churches need to communicate — service times, events, pastoral care, giving updates. But in South Africa, the Protection of Personal Information Act (POPIA) sets clear expectations for how personal information is collected, used, and shared. Getting communications right protects your members and your ministry.
What POPIA means for your church
- You need a lawful reason to use member contact details — usually consent or legitimate church ministry purposes.
- Members should know what you collect and why (a clear privacy notice).
- You must keep data accurate and secure.
- Members can ask to access or correct their information.
- You should not share contact lists for unrelated marketing.
SMS and email best practices
- Only message people who have agreed to receive communications — or who would reasonably expect church-related contact.
- Always include a clear way to opt out of non-essential messages.
- Segment your lists — youth parents, elders, volunteers — instead of blasting everyone.
- Avoid sharing sensitive pastoral details in bulk SMS or group emails.
- Use church-branded sending addresses members recognise.
What not to do
- Do not buy contact lists or import numbers without consent.
- Do not forward member databases to external vendors without agreements.
- Do not publish prayer requests with full names and phone numbers without permission.
- Do not ignore opt-out requests — honour them promptly.
Practical steps this month
- Publish or update your church privacy notice on your website and bulletin.
- Review who has admin access to member data in your system.
- Document who is allowed to send bulk SMS and email.
- Use a church management platform with permissions and audit trails.
Good communication and good compliance go together. When members trust how you handle their information, they are more receptive to the messages that matter. Churches Software helps churches organise members, control access, and communicate from one secure platform — so ministry stays personal and privacy stays protected.