GDPR Compliance Statement
UK General Data Protection Regulation · Data Protection Act 2018
Sapkota Kalyan Kendra UK Ltd is committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Lawful Processing
We only process personal data where we have a clear lawful basis — contract, legal obligation, legitimate interest, or consent.
Data Security
All personal data is stored securely on UK-based servers with encryption at rest and in transit. Access is restricted to authorised personnel only.
Data Minimisation
We collect only the personal data that is strictly necessary for the purposes described in our Privacy Policy.
Retention Limits
Personal data is not held longer than necessary. Membership data is retained for the duration of membership plus 2 years. Donation records are kept for 7 years (UK tax law).
Your Rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and to object. Contact us to exercise any right.
Data Breach Procedure
In the event of a personal data breach we will notify the ICO within 72 hours where required, and affected individuals without undue delay.
Supervisory Authority
The UK supervisory authority for data protection is the Information Commissioner's Office (ICO). You have the right to lodge a complaint at ico.org.uk.
For data-related enquiries: sapkotakalyankendrauk@gmail.com