Privacy & Cookies
Privacy & Cookies Policy
A Penny For Nepal respects your privacy. This notice explains how we collect, use and protect personal information when you use our website, contact us, support our work or make a donation.
Who we are
A Penny For Nepal is a UK registered charity (Charity Registration No. 1162865). For privacy and data-protection enquiries, contact us at contact@apenny4nepal.co.uk.
Information we may collect
Depending on how you interact with us, we may collect your name, email address, the subject and contents of messages you send through our contact form, information you provide in connection with donations or support, and limited technical information generated when you use the website, such as security, anti-spam and cookie information.
Please do not include sensitive personal information in a general website enquiry unless it is necessary.
How and why we use your information
We may use personal information to respond to enquiries, administer donations and supporter relationships, maintain records we are required to keep, prevent spam or misuse, protect the security and operation of the website, and manage the charity’s activities.
Our lawful bases
The lawful basis depends on the particular activity. We may process information because it is necessary for our legitimate interests, for example to respond to enquiries and keep the website secure; because it is necessary to comply with a legal obligation, including relevant financial or charity record-keeping requirements; because it is necessary to perform a contract or take steps you request before entering one; or because you have given consent where consent is the appropriate basis. Where we rely on consent, you may withdraw it at any time.
Contact forms, CAPTCHA and anti-spam
When you submit our contact form, the information you enter is used to receive and respond to your enquiry. Our website also uses security and anti-spam measures, including CAPTCHA technology, to help distinguish genuine submissions from automated or abusive activity. These services may process limited technical information needed to provide security and prevent spam.
Donations and payments
If you make a donation through a payment provider, information needed to process the transaction may be handled by that provider. We do not intend to publish or expose your payment details through this website. Payment providers may process personal information under their own privacy terms. We may retain appropriate donation and transaction records where necessary for administration, accounting, fraud prevention and legal obligations.
Who we share information with
We may share personal information only where reasonably necessary with service providers that help us operate the website, hosting and email services, security and anti-spam providers, payment providers where applicable, professional advisers, or public authorities where disclosure is required by law. We do not sell personal information.
International processing
Some technology or service providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, we seek to use an appropriate lawful transfer mechanism or provider safeguards.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, accounting, safeguarding or reporting requirements. Routine enquiries are reviewed and deleted when they are no longer needed. Donation and financial records may need to be retained for longer to meet legal and accounting obligations.
Cookies and similar technologies
Our website may use cookies or similar technologies for essential functions such as security, form protection and site operation. If we use non-essential cookies or technologies, such as optional analytics or marketing technologies, they should only be activated where the required consent has been obtained. You can also control cookies through your browser settings, although blocking essential cookies may affect website functionality.
Your data-protection rights
Depending on the circumstances and the lawful basis being used, UK data-protection law may give you rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, objection to processing, and data portability. Where processing is based on consent, you can withdraw that consent. Some rights are subject to legal conditions and exemptions.
To exercise a data-protection right, email contact@apenny4nepal.co.uk.
How to complain
If you have concerns about how we use your personal information, please contact us first at contact@apenny4nepal.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Changes to this policy
We may update this policy when our website, services or legal obligations change. The current version will be published on this page.
Last updated: 3 September 2026.