📄 Leicester Kerala Community Mobile App

1. Introduction

Welcome to the Leicester Kerala Community (LKC) Mobile Application (“App”). Leicester Kerala Community (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application. By using the LKC App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

For LKC Members:

• Personal Identification Information:
  • First name and last name
  • Email address
  • LKC Member ID
  • Spouse name and email (if applicable)
  • Phone number (optional)
• Membership Information:
  • Membership status
  • Membership validity dates
  • Renewal information

For Guest Users:

• No personal information is required to browse events in guest mode
• Email address (only if you choose to register for membership)

2.2 Information Collected Automatically

• Device Information:
  • Device type (iOS or Android)
  • Operating system version
  • App version
  • Device push notification token
  • Device language preference
• Usage Information:
  • App features accessed
  • Events viewed
  • Messages read
  • Login timestamps
  • Error logs and crash reports

2.3 Information We Do NOT Collect

3. How We Use Your Information

3.1 Primary Purposes

• Account Management:
  • Authenticate your LKC membership
  • Display your membership profile and details
  • Manage membership renewal reminders
  • Verify member access to exclusive features
• Communication:
  • Send push notifications about upcoming events
  • Deliver important community announcements
  • Share emergency alerts or urgent updates
  • Respond to your inquiries and support requests
• App Functionality:
  • Display personalized content based on membership status
  • Remember your login session
  • Provide a seamless user experience
  • Troubleshoot technical issues
• Event Management:
  • Display relevant events in the calendar
  • Send event reminders
  • Provide event details and updates
  • Show your event registration status (when available)

3.2 Legal Obligations

We may use your information to:

• Comply with legal requirements
• Enforce our Terms and Conditions
• Protect the rights, property, or safety of LKC, our members, or others
• Respond to legal requests from authorities

4. How We Share Your Information

4.2 Limited Sharing

We may share your information only in the following circumstances:

• Service Providers:
  • Firebase Cloud Messaging (Google): For delivering push notifications
    
    Privacy Policy: https://firebase.google.com/support/privacy
• Legal Requirements:
  • When required by law or legal process
  • To protect our legal rights
  • To prevent fraud or security threats
  • In response to valid requests from public authorities
• LKC Executive Committee:
  • Limited membership information may be shared with authorized LKC executive members for administrative purposes only
  • All executive members are bound by confidentiality obligations

4.3 No Third-Party Marketing

Your information will never be shared with third parties for their marketing purposes.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your personal information:

• Technical Safeguards:
  • Secure HTTPS/SSL encryption for all data transmission
  • JWT (JSON Web Token) authentication for member accounts
  • Encrypted storage of sensitive data
  • Secure API endpoints with authentication
  • Regular security audits and updates
• Organizational Safeguards:
  • Limited access to personal data (need-to-know basis)
  • Staff training on data protection
  • Confidentiality agreements with all team members
  • Regular review of security practices

5.2 Your Responsibility

Please help us protect your information by:

• Keeping your login credentials confidential
• Not sharing your LKC Member ID with others
• Logging out after using the app on shared devices
• Reporting any suspicious activity immediately

5.3 Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of becoming aware
• Report to relevant authorities as required by GDPR
• Take immediate steps to mitigate the impact
• Provide guidance on protecting yourself

6. Data Retention

6.1 Active Members

We retain your personal information for as long as:

• Your LKC membership is active
• You continue to use the app
• Required for legal or accounting purposes

6.2 Inactive Accounts

If your membership lapses:

• Your account data will be retained for 12 months
• After 12 months, your personal data will be anonymized or deleted
• You can request immediate deletion (see Section 8)

6.3 Legal Requirements

Some information may be retained longer when:

• Required by UK law
• Necessary for tax or accounting purposes
• Subject to ongoing legal proceedings

7. Your Rights Under GDPR

As a data subject under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

8. Children’s Privacy

8.1 Age Restrictions

The LKC App is intended for general audiences and families. We do not knowingly collect personal information from children under 13 without parental consent.

8.2 Parental Responsibility

Parents and guardians are responsible for:

• Supervising children’s use of the app
• Managing family membership accounts
• Ensuring children do not share personal information

8.3 If We Discover Children’s Data

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible.

To report: Email [email protected] with “Child Privacy Concern” in the subject line.

9. Push Notifications

9.1 What We Send

Push notifications are used to deliver:

• Upcoming event reminders
• Important community announcements
• Emergency alerts
• Membership renewal reminders
• New message notifications

9.2 How to Manage

9.3 Device Token

We collect your device push notification token to send notifications. This token:

• Is anonymous and doesn’t identify you personally
• Is stored securely on our servers
• Is deleted when you uninstall the app or disable notifications
• Cannot be used to track your location

10. Cookies and Tracking

10.1 Cookies in the App

Our mobile app uses minimal local storage for:

• Authentication tokens: To keep you logged in
• User preferences: To remember your settings
• Cache data: To improve app performance

10.2 No Third-Party Tracking

10.3 App Analytics

We collect basic anonymous usage statistics to:

• Improve app performance
• Fix bugs and crashes
• Understand which features are most used
• Plan future updates

This data is:

• Aggregated and anonymized
• Never linked to your personal identity
• Used solely for app improvement

11. International Data Transfers

11.1 Data Storage Location

Your personal data is primarily stored on servers located in the United Kingdom.

11.2 Service Providers

Some service providers may process data outside the UK:

• Firebase (Google): May process data in Google’s data centers worldwide
• All transfers are protected by appropriate safeguards (Standard Contractual Clauses)

11.3 Safeguards

When data is transferred internationally, we ensure:

• Adequate protection through legal mechanisms
• Compliance with UK GDPR
• Appropriate security measures

12. Changes to This Privacy Policy

12.1 Updates

We may update this Privacy Policy from time to time to:

• Reflect changes in our practices
• Comply with new legal requirements
• Improve clarity and transparency
• Add new features or services

12.2 Notification of Changes

When we make significant changes:

• We will update the “Last Updated” date at the top
• We will notify you via push notification
• We will post a notice in the app
• We may send an email to registered members

12.3 Continued Use

Your continued use of the app after changes constitutes acceptance of the updated Privacy Policy.

12.4 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Third-Party Links

13.1 External Websites

The app may contain links to external websites, including:

• leicesterkeralacommunity.org.uk (our main website)
• Social media platforms (Facebook, Instagram, YouTube)
• Event booking platforms

13.2 No Responsibility

We are not responsible for:

• Privacy practices of third-party websites
• Content on external sites
• Data collection by other platforms

13.3 User Awareness

When you click on external links:

• You leave the LKC App
• Different privacy policies apply
• We recommend reviewing their privacy policies

14. Data Protection Officer

Leicester Kerala Community has designated a Data Protection Officer (DPO) to oversee GDPR compliance and handle privacy concerns.

DPO Responsibilities:

• Ensuring GDPR compliance
• Handling data subject requests
• Conducting privacy impact assessments
• Training staff on data protection
• Serving as point of contact with supervisory authorities

15. Your California Privacy Rights (CCPA)

While LKC primarily operates in the UK, we respect the privacy rights of California residents.

If you are a California resident, you have the right to:

• Know what personal information we collect
• Request deletion of your personal information
• Opt-out of sale of personal information (note: we don’t sell data)
• Non-discrimination for exercising your rights

To exercise these rights: Contact [email protected]

16. Complaints and Supervisory Authority

16.1 Contact Us First

If you have concerns about how we handle your personal data, please contact us first:

• Email: [email protected]
• We will investigate and respond within 30 days

16.2 Supervisory Authority

You have the right to lodge a complaint with the UK supervisory authority:

16.3 EU Residents

If you are in the EU, you can contact your local Data Protection Authority.

17. Consent

17.1 How We Obtain Consent

By using the LKC App, you consent to:

• Collection and processing of your personal information as described
• Receiving push notifications (can be disabled anytime)
• Use of cookies and local storage for app functionality

17.2 Explicit Consent

For certain processing activities, we obtain explicit consent:

• Marketing communications (if applicable)
• Sharing photos from events
• Sensitive personal data (if collected)

17.3 Withdrawing Consent

You can withdraw consent at any time by:

• Disabling notifications in settings
• Deleting your account
• Contacting us directly

18. Data Accuracy

18.1 Our Commitment

We strive to keep your personal information accurate and up-to-date.

18.2 Your Responsibility

Please help us by:

• Updating your profile when information changes
• Notifying us of any errors
• Reviewing your information periodically

18.3 How to Update

19. Automated Decision-Making

19.1 No Automated Decisions

19.2 Human Review

All significant decisions regarding membership or access are made by human administrators.

20. Business Transfers

20.1 Asset Transfer

In the event LKC undergoes a business transition (merger, acquisition, sale of assets):

• Your personal information may be transferred
• You will be notified via email and app notification
• The new entity will be bound by this Privacy Policy
• You will have the option to delete your data

20.2 Your Rights Remain

Any successor organization must:

• Honor this Privacy Policy
• Obtain new consent for material changes
• Respect your data protection rights

21. Contact Information Summary

22. Acknowledgment

By using the Leicester Kerala Community Mobile App, you acknowledge that:

• You have read and understood this Privacy Policy
• You agree to the collection and use of your information as described
• You understand your rights under GDPR and how to exercise them
• You can withdraw consent and delete your account at any time
• You are responsible for maintaining the confidentiality of your login credentials