Privacy & Data Protection Policy
At Lesotho London, protecting your privacy and securing your personal data is a core priority. This Privacy Policy outlines how we collect, process, use, and protect your personal information when you visit our website, in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
1. Who We Are (Data Controller)
For the purposes of UK data protection laws, the Data Controller is Lesotho London.
If you have any questions about this policy, how we handle your data, or if you wish to exercise your legal rights, you can contact our data protection representative at:
* Email: [admin@lesotholondon.org.uk]
* Mailing Address: London, United Kingdom
2. What Personal Data We Collect
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
* Identity Data: First name, last name, or username (e.g., when you subscribe to a newsletter or leave a comment).
* Contact Data: Email address and any billing/postal addresses.
* Technical Data: IP address, browser type and version, time zone setting, operating system, and platform used to access our site.
* Usage Data: Information about how you navigate and interact with our website, articles, and services.
* Marketing Data: Your preferences in receiving newsletters or promotional updates from us.
3. Our Legal Bases for Processing Your Data
Under the UK GDPR, we must have a valid legal basis to process your personal data. We rely on the following lawful grounds:
| Purpose / Activity | Type of Data | Lawful Basis for Processing |
| To deliver our newsletters or requested news alerts. | Identity & Contact | Consent (You explicitly opt-in). |
| To administer and protect our website (troubleshooting, data analysis, system security). | Technical & Usage | Legitimate Interests (Necessary to run a secure and stable website). |
| To deliver relevant website content and advertisements to you. | Technical, Usage & Marketing | Consent (Via our cookie banner settings) or Legitimate Interests (To study how users interact with our site). |
4. How We Share Your Personal Data
We do not sell, rent, or trade your personal data with third parties. However, we may share your information with trusted partners to keep our services running:
* Service Providers: Third-party vendors who provide IT, system administration, email distribution, and website hosting services.
* Professional Advisers: Legal experts, auditors, and insurers who assist with our business operations.
* Legal Authorities: Government bodies or law enforcement agencies if required by law or to protect our legal rights.
5. International Data Transfers
Some of our third-party service providers (such as hosting servers or email marketing platforms) may be located outside the UK or the European Economic Area (EEA). Whenever we transfer your data outside the UK, we ensure a similar degree of protection is afforded to it by implementing Standard Contractual Clauses (SCCs) or relying on UK International Data Transfer Agreements (IDTAs).
6. Data Security
We have implemented robust physical, electronic, and managerial security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. We also limit access to your personal data to employees and service providers who have a legitimate business need to know.
7. Your Legal Rights Under UK Law
Under the UK GDPR, you have the following rights regarding your personal data:
* Right of Access: You can request a copy of the personal data we hold about you.
* Right to Rectification: You can ask us to correct incomplete or inaccurate data.
* Right to Erasure (“Right to be Forgotten”): You can ask us to delete your personal data under certain conditions.
* Right to Object: You can object to our processing of your data for direct marketing or legitimate interests.
* Right to Data Portability: You can request the transfer of your data to you or a third party in a structured format.
* Right to Withdraw Consent: You can withdraw your consent to receive newsletters or tracking cookies at any time.
To exercise any of these rights, please contact us at [admin@lesotholondon.org.uk]. We aim to respond to all legitimate requests within one calendar month, free of charge.
If you are not satisfied with our response, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO) (at [ico.org.uk]).
8. Updates to This Policy
We review and update this Privacy Policy periodically to reflect shifts in our practices or changes in UK regulations. The date of the most recent revision will always be displayed at the top of this page.