If your religious organization has a website, it should have at least a basic privacy statement informing users what information you collect on the site, who has access to it, what you do with it, and how you protect it.
Does Your Church or Ministry Website Have a Privacy Policy?