It is the policy of the Unitarian Universalist Church of Elgin that no financial account details related to payments to the Church including credit card, check, or other payment methods shall be retained by UUCE outside of third-party systems such as PowerChurch, Vanco, Chase Bank, or other similar payment processors.
This includes credit or debit card account numbers, bank account numbers, verification codes, and security codes of members or visitors of the Church. Such records shall not be retained on paper or in electronic systems of the Church other than in third-party systems. This includes paper or electronic copies or images of checks, credit, or debit cards. Appropriate inquiries into the security policies of third-party providers shall be made to determine if they comply with best practices and industry and government regulations.
No employee or volunteer of the Church shall make copies or download such information to church or personal equipment including computers, phones, or tablets, and appropriate training and notices regarding this policy shall be sent on an annual basis by the Board of Trustees.
Personal identity information of employees and vendors including tax ids shall be collected only when necessary to comply with government regulations, and when stored in physical form such information shall be stored in secure locations such as locking safes and filing cabinets, and access to such physical locations shall be granted only to those who require this access in order to perform Church functions. When stored in electronic form such information shall be made available only to those who require access in order to perform Church functions.