What it does
Members view, update or request deletion of their own data from their profile: subject-access requests handled in minutes, not a month. Consent is logged per-channel with timestamps, so withdrawing email opt-in doesn't quietly leave SMS on.
Every sensitive action: exporting people data, viewing pastoral notes, changing a member's role, leaves an audit row the admin can inspect later.