NCCA
Nepali Christian Church

Privacy Policy

Last updated: 2026-09-28

This policy explains what personal information Nepali Christian Church Aldershot collects through this website, why we collect it, who we share it with, and what rights you have over it.

We keep it short and specific on purpose. It describes what this site actually does, not what a template says a website might do.

Who we are

The data controller is Nepali Christian Church Aldershot, a charity registered in England and Wales under number 1182148, at Nepali Christian Church, Ash Vale, GU12 5PA, United Kingdom.

Walk by Faith is a ministry of the church, not a separate legal entity, so this policy covers both walkbyfaith.uk and nepalichristianchurch.co.uk.

For anything in this policy, including any request about your own data, write to sec@nepalichristianchurch.co.uk.

When you send us a message

If you use the contact form, we store what you type so that someone can read and reply to it:

  • your name, your email address, and your phone number if you give one
  • your message
  • your IP address and browser information, recorded automatically to stop automated spam. We do not use these to identify you, and they are never shown publicly.

When you request the hall

A booking request for the hall at Ash Vale stores your name, email address, phone number, the organisation you are booking for if any, and what you plan to use the hall for. We need these to confirm the booking and to reach you if something changes.

The public availability calendar shows only whether a slot is busy or free. Your name and contact details are never shown on it — they are visible only to the church administrators handling bookings.

The emails we send

A new message or booking request sends a notification to the church’s own inbox. When a booking is confirmed, declined, or cancelled, we email you to tell you. These go through the church’s Microsoft 365 email.

We do not add you to a mailing list, and we do not send marketing.

Cookies

This site sets no advertising or tracking cookies, and we do not use website analytics here, which is why you see no cookie banner.

The only cookie the site itself may set remembers whether you chose English or Nepali. Our staff pages at /admin use a sign-in cookie, which never applies to visitors.

Where your information is stored

Our database is hosted by Supabase in London (eu-west-2), so donation records and any message you send us are stored in the United Kingdom.

Some of the services we rely on are run by companies based outside the UK — Stripe for payments, Microsoft for our email, Netlify for hosting this website, and Cloudflare for visitor statistics. Where information reaches them, it is protected by the safeguards UK data protection law requires for international transfers, such as the UK International Data Transfer Agreement.

We do not sell your information, and we do not share it with anyone for marketing.

How long we keep it

  • Donation records: at least six years after the end of the financial year they fall in, because UK charity and tax law requires us to keep financial records for that long. We cannot delete these earlier, even on request.
  • Emails we send or receive: kept while they are useful for answering questions about your gift or enquiry, then deleted.
  • Website statistics: aggregated only, never linked to you, and not kept as personal data at all.

Your rights

Under UK data protection law you have the right to ask us for a copy of the information we hold about you, to have it corrected if it is wrong, to have it deleted, to object to how we use it, and to ask us to restrict its use.

  • Write to sec@nepalichristianchurch.co.uk and we will respond within one month.
  • We may need to confirm who you are before we act, so that we do not disclose someone else’s information to the wrong person.
  • The one thing we usually cannot do is delete a donation record inside the retention period above, because keeping it is a legal obligation rather than our choice.

Complaints

If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113.

Children

This website is not aimed at children, and we do not knowingly collect information about anyone under 13. If you believe we hold information about a child, write to us and we will delete it.

Changes to this policy

If we change how we use personal information, we will update this page and change the date at the top. Please check back occasionally.