How we handle your information

The Gloucester Nepalese Community (“GNC”, “we”, “us”) is a community organisation based in Gloucester, United Kingdom. This policy explains what personal information we collect through this website, why we collect it, and what your rights are. We try to collect as little as possible and never sell your data.

Who is responsible

The data controller is the Gloucester Nepalese Community committee. For any question about your data, or to make a request under UK GDPR, email gloucesternepalesecommunity@outlook.com.

What we collect and why

• Contact form — when you send us a message we store your name, email address, and the message itself so a committee member can reply. Legal basis: legitimate interest (responding to your enquiry).
• Gallery photos — if you appear in a photo we publish on this site, it is because a committee member uploaded it with a note that consent was confirmed. If you would like a photo of you or your family removed, email us and we will remove it, usually within a few days.
• Nepali class photos — the same rule applies. Photos are only published where a parent or guardian has agreed.
• Committee / admin accounts — email address and hashed password, held so committee members can sign in to the admin area. Legal basis: legitimate interest (running the website).
• Basic site analytics — we use Vercel Analytics and Vercel Speed Insights to count page views and measure page load speed. These services do not use cookies and do not track you across other sites. No personally identifying information is stored.

What we do not do

• We do not sell, rent, or trade your personal information.
• We do not use advertising cookies or tracking pixels.
• We do not share your details with third parties for marketing.

Where your information is stored

Website content and form submissions are stored in Supabase (a hosted Postgres database) and served via Vercel. Both providers operate in the UK / EU region for our project. Email correspondence lives in our Outlook mailbox.

How long we keep things

• Contact messages — retained while relevant to our reply, then archived. Anything older than two years is deleted on request or during routine clean-ups.
• Gallery photos — retained until the person in them (or their parent / guardian) asks us to remove them.
• Admin accounts — retained while the person is a committee member. Removed when they step down.

Your rights

Under UK GDPR you can ask us to:

• Tell you what personal data we hold about you.
• Correct anything that is wrong.
• Delete your data (subject to any legal obligation to keep it).
• Stop using it for a particular purpose.

Email us at the address above and we will respond within one month. If you are unhappy with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

The Nepali class involves children. Photos, names, or any other information about a child are only ever published with the explicit permission of a parent or guardian, and can be removed at any time on request.

Changes to this policy

If we make significant changes to how we handle personal data we will update this page and change the “last updated” date at the top.