Privacy Policy

Who is responsible for your data

This platform hosts websites for Nepali community organisations in the United Kingdom. The platform is provided by Nepali Community UK, which is the data controller for your account and for the platform itself.

Each community site is run by the community organisation whose site it is. That organisation decides who may join, approves members and administers its own site, and is the data controller for its own membership records. Both are responsible for your personal data, for different parts of it.

For any question about your personal data, including the requests described below, contact [email protected].

What we collect

We collect only what the platform needs in order to work:

• Your name and email address, which you provide when you register. These identify you to other members and are how we contact you about your account.
• A password, stored only as a cryptographic hash. We cannot read it, and neither can anyone with access to the database.
• Optional profile details you choose to add — phone number, address, city, country, and a profile picture. You can leave these blank.
• Which communities you belong to and your role in each.
• Content you create: posts, comments, likes, saved posts, and event registrations.
• Basic technical information sent by your browser with every request, such as your IP address, which is unavoidable in operating a website.

Why we use it, and on what legal basis

We do not use your personal data for advertising, and we do not sell it.

• To provide the service you asked for — showing you your communities, your content and your saved posts. This is necessary to perform our agreement with you.
• To send you service messages such as email verification, password resets, and notifications about your membership or replies to your comments. This is necessary to perform our agreement with you.
• To keep the platform safe and working — preventing abuse, diagnosing faults. This is our legitimate interest in running a functioning service.

Who can see what you post

Anything you publish — posts, comments, likes on comments — is visible to other people. Posts and comments on a community site are visible to anyone who can see that site, including visitors who are not signed in and search engines. Treat anything you publish as public.

Posts written inside a group are the exception: they are visible only to members of that group, and they do not appear in the community feed, in search results or in the sitemap.

Your email address is not shown to other members. Administrators of a community you belong to can see your name, email address and membership status in order to administer that community.

Saved posts are private to you.

Who else your data is shared with

We do not sell personal data or share it for marketing.

• Email delivery: service emails are sent through an SMTP provider, which necessarily handles your email address and the content of those messages.
• Hosting: the platform and its database run on infrastructure operated on our behalf.
• Where a community has connected an external blog, articles are fetched from that third party and are subject to that provider's own terms and privacy policy, not this one.
• We may disclose information where the law requires it.

Cookies and browser storage

We do not use advertising or tracking cookies.

When you sign in, we store an authentication token and basic account details in your browser's local storage. This is what keeps you signed in between visits; without it the service cannot work. Signing out removes it, as does clearing your browser data.

How long we keep it

Your account details are kept for as long as your account exists.

Content you have published may remain visible after you delete your account, because removing it would break conversations other members took part in. Deleted comments are retained in the database in a withdrawn state so that replies to them are not lost, and are no longer shown with your name.

We do not keep personal data for longer than we need it for the purposes described above. If you would like your data removed sooner, contact us and we will act on it.

Your rights

Under UK data protection law you have the right to ask for a copy of your personal data, to have inaccurate data corrected, to have your data deleted, to object to or restrict how we use it, and to receive it in a portable form.

To exercise any of these, contact [email protected]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Children

This platform is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has registered, contact us and we will remove the account.

Changes

If we change this policy in a way that materially affects you, we will make that clear on this page and, where appropriate, tell you directly.