Privacy Policy

Last updated: 14 September 2025

This Privacy Policy explains how Lohana Community of North London (LCNL) (“we”, “us”, “our”) handles your personal data when you use our website lcnl.org and related services (e.g. membership, event bookings, and contact forms).

Who we are

The data controller is LCNL, based in the United Kingdom. You can contact us at info@lcnl.org.

Data we collect

• Contact details: name, email, phone.
• Membership details: household, membership type/status, life member flag.
• Event/booking details: tickets, preferences, attendees.
• Payments: amounts, method, references (we do not store full card data on our servers).
• Website usage: IP address, device/browser info, pages visited, cookies/analytics.
• Children’s data (where relevant): collected only from or with consent of a parent/guardian.

How we use your data

• To manage membership accounts and household groupings.
• To process event registrations and payments.
• To respond to enquiries and provide community updates (where you opt in).
• To maintain security, prevent fraud/abuse, and meet our legal obligations.
• To improve our website and services via analytics.

Lawful bases (UK GDPR)

• Contract – providing membership or event services you request.
• Consent – sending newsletters/updates; using non-essential cookies.
• Legitimate interests – running an effective, secure community service.
• Legal obligation – tax/accounting and other statutory requirements.

Sharing your data

We do not sell your personal data. We may share limited data with:

• Service providers (e.g., website hosting, email, payment processors) under data-processing terms.
• Event partners only where necessary to deliver an event you have booked.
• Authorities where required by law.

International transfers

If data is processed outside the UK/EEA, we use appropriate safeguards (e.g., UK IDTA or EU Standard Contractual Clauses as applicable).

Retention

• Membership records: while active and up to 7 years after last activity for audit.
• Event/booking records: up to 7 years for financial records.
• Contact form enquiries: typically 24 months.
• We may retain longer if required by law or to establish/defend legal claims.

Cookies & analytics

We use essential cookies for the site to function. With your consent, we may use analytics cookies (e.g., to understand page usage). You can change your cookie preferences in your browser or via our cookie banner (if enabled).

Security

We apply technical and organisational measures to protect personal data. No method is 100% secure, but we review and improve our controls regularly.

Your rights

Under UK GDPR you may have the right to:

• Access, correct, or delete your data.
• Object to or restrict certain processing.
• Data portability (where applicable).
• Withdraw consent at any time (where processing is based on consent).

To exercise your rights, email info@lcnl.org. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

Children’s data

We only collect children’s details for relevant activities/programmes and normally from a parent/guardian. Please contact us if you wish to review or delete a child’s data.