Privacy Policy

Who we are

The data controller is Nepali Christian Church Aldershot, a charity registered in England and Wales under number 1182148, at Nepali Christian Church, Ash Vale, GU12 5PA, United Kingdom.

Walk by Faith is a ministry of the church, not a separate legal entity, so this policy covers both walkbyfaith.uk and nepalichristianchurch.co.uk.

For anything in this policy, including any request about your own data, write to sec@nepalichristianchurch.co.uk.

When you donate

Donations are handled by Stripe on Stripe’s own secure pages. Your card number never reaches this website and we never see it or store it.

Once a payment completes, Stripe tells us that it happened and we record the following:

• the amount, currency, and whether the gift was one-off or monthly
• which part of our work you chose to give to, if you chose one
• your email address and name, as you gave them to Stripe
• the date, and Stripe’s own reference for the payment

The email we send you

After a donation we send you one thank-you email confirming what you gave and what it supports. It goes through the church’s Microsoft 365 email, and a copy is kept in our sent mail so that we can answer questions about your gift later.

We do not add you to a mailing list, and we do not send marketing. If you set up a monthly gift, replying to that email is enough to cancel it.

Visitor statistics

We use Cloudflare Web Analytics to see how many people visit, which pages they read, and whether they use the English or Nepali version. It is deliberately chosen because it does not use cookies and does not build a profile of you or follow you across other websites.

We see totals, not people. Nothing in these statistics identifies you.

Cookies

This site sets no advertising or tracking cookies, which is why you see no cookie banner.

The only cookie the site itself may set remembers whether you chose English or Nepali. Stripe sets its own cookies on its own checkout pages, for fraud prevention — those are covered by Stripe’s privacy policy, not this one. Our staff pages at /admin use a sign-in cookie, which never applies to visitors.

Where your information is stored

Our database is hosted by Supabase in London (eu-west-2), so donation records and any message you send us are stored in the United Kingdom.

Some of the services we rely on are run by companies based outside the UK — Stripe for payments, Microsoft for our email, Netlify for hosting this website, and Cloudflare for visitor statistics. Where information reaches them, it is protected by the safeguards UK data protection law requires for international transfers, such as the UK International Data Transfer Agreement.

We do not sell your information, and we do not share it with anyone for marketing.

How long we keep it

• Donation records: at least six years after the end of the financial year they fall in, because UK charity and tax law requires us to keep financial records for that long. We cannot delete these earlier, even on request.
• Emails we send or receive: kept while they are useful for answering questions about your gift or enquiry, then deleted.
• Website statistics: aggregated only, never linked to you, and not kept as personal data at all.

Your rights

Under UK data protection law you have the right to ask us for a copy of the information we hold about you, to have it corrected if it is wrong, to have it deleted, to object to how we use it, and to ask us to restrict its use.

• Write to sec@nepalichristianchurch.co.uk and we will respond within one month.
• We may need to confirm who you are before we act, so that we do not disclose someone else’s information to the wrong person.
• The one thing we usually cannot do is delete a donation record inside the retention period above, because keeping it is a legal obligation rather than our choice.

Complaints

If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113.

Children

This website is not aimed at children, and we do not knowingly collect information about anyone under 13. If you believe we hold information about a child, write to us and we will delete it.

Changes to this policy

If we change how we use personal information, we will update this page and change the date at the top. Please check back occasionally.