LEGAL
Privacy Policy
How we handle your information, in plain English
This policy explains what information Khaja Khoj collects, why, and what we do with it. We have tried to write it in language a person can actually read. If anything is unclear, ask us and we will explain it.
Who we are
Khaja Khoj is a directory of Nepalese-owned businesses in the United Kingdom. It is run by the Khaja Khoj team, based in the UK, and reachable through our contact form or by email at hello@khajakhoj.co.uk. For the purposes of UK GDPR we are the data controller for the information described below.
What we collect
- When you use the contact form — your name, email address, and whatever you write in the message. Nothing more.
- When you ask to be listed — your business name, address, phone number, opening hours, photos and any links you send us. All of this is intended to be published; that is the point of a listing. We use the email address you give only to confirm and manage your listing.
- Automatically — our host keeps standard server logs including IP addresses, used for security and to keep the site running.
Businesses listed from public sources. To help visitors find businesses before every owner has signed up, we sometimes add a business using details it already publishes, such as its name, address, phone number and website. Where the business is run by an individual, these details count as personal data, and we rely on our legitimate interest in helping people find local businesses. Owners can ask us to correct or remove their listing at any time using the “Is this your business?” link on the listing or our contact form.
Why we collect it
To reply to your message, to build and maintain your listing, and to keep the site secure. We rely on our legitimate interests in running the directory, answering enquiries and keeping the site secure. For businesses that ask to be listed, we also rely on that request.
What we do not do
- We do not sell your personal information to anyone, ever.
- We do not add you to a mailing list because you used the contact form.
- We do not currently show adverts or use advertising trackers, and we will never sell audience data.
- We do not use your enquiry for anything other than answering it.
Cookies
We do not currently use advertising or analytics cookies. The site uses a very small number of cookies and similar storage:
- Festival and event popups. When a popup announces an upcoming festival or community event, a cookie remembers that you closed it, so it does not appear again for a few days.
- Events bar. Closing the events bar is remembered only until you close your browser.
- Logging in. If you log in as an administrator, WordPress sets its standard session cookies.
None of these track you across other websites or are used for advertising.
Advertising in the future. We may in future show adverts or sponsored listings, for example from businesses or event organisers serving the Nepalese community. Sponsored content will always be clearly labelled. If we ever use advertising or analytics cookies, we will update this policy first and ask for your consent before any non-essential cookies are set, and you will be able to refuse them.
Who else sees your information
Only the services needed to run the site. Our web host, Hostinger, stores the website and its database on servers located in Germany (Frankfurt). Hostinger also provides our email service. Encrypted backup copies of the site, which include enquiries and listing details, are stored in Google Drive. Page fonts are loaded from Google Fonts, which means your browser shares your IP address with Google when it fetches them. Each of these providers acts on our behalf under its own terms.
Transfers outside the UK. Because our website is hosted in Germany, and Hostinger and Google may process some data in other countries, including the United States, your information may be processed outside the United Kingdom. Transfers to the European Economic Area are covered by the UK Government adequacy regulations; transfers elsewhere rely on the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Addendum built into those providers’ terms.
How long we keep it
Contact form enquiries are kept only as long as we need them to deal with your message and any follow-up, and are deleted when they are no longer needed. Business listing information is kept for as long as your listing is live, and removed when you ask us to take it down.
Your rights
Under UK GDPR you can ask us to show you what we hold about you, correct it, delete it, or stop using it. Email use our contact form or email hello@khajakhoj.co.uk and we will respond within one month, free of charge. If you are not satisfied with how we have handled it you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
This site is not directed at children and we do not knowingly collect information from anyone under 16.
Changes
If we change this policy we will update the date at the bottom of this page. Material changes affecting how we use your information will be announced on the site.
Last updated 11 October 2026.
