Privacy Policy

1. Data Controller

This website (snluk.org) is operated by Mendee CIC, a Community Interest Company registered in England and Wales.

• Company number: 15445605
• Registered address: Workspace Lock Studios, 7 Corsican Square, London E3 3YD
• Email: hello@snluk.org

Mendee CIC is registered with the Information Commissioner’s Office (ICO). You can verify our registration at ico.org.uk.

2. What Data We Collect

We collect minimal data through this website:

Data	Source	Purpose
Page views, device type, approximate location (country/city)	Google Analytics (with consent)	Understand how visitors use the site
Name, email address, message content	Contact enquiries via email	Respond to your enquiry
IP address, request headers	Cloudflare (hosting/CDN)	Deliver the website, security protection

3. Cookies

This site uses the following cookies:

Cookie	Type	Purpose	Duration
snluk-consent	Necessary	Stores your cookie preference	Persistent (localStorage)
_ga, _ga_G-FDVF8M7PLK	Analytics	Google Analytics 4 — distinguishes users, tracks sessions	Up to 14 months

Analytics cookies are only set if you click “Accept all” in our cookie banner. If you choose “Necessary only”, no analytics cookies are set and the Google Analytics script is not loaded. You can change your preference at any time using the cookie icon in the bottom-left corner of the page.

4. Legal Basis for Processing

We process personal data under the following lawful bases (UK GDPR):

• Consent — Article 6(1)(a): Analytics cookies (Google Analytics). You may withdraw consent at any time via the cookie preference control.
• Legitimate interests — Article 6(1)(f): Responding to contact enquiries sent to us by email. Our legitimate interest is to communicate with prospective funders and partners who contact us.

5. Third Parties

We share data with the following third-party processors:

• Google LLC (Google Analytics, measurement ID: G-FDVF8M7PLK) — analytics data is processed in accordance with Google’s Privacy Policy. IP anonymisation is enabled.
• Cloudflare, Inc. — provides hosting, CDN, and DDoS protection. Cloudflare processes request metadata in accordance with their Privacy Policy.

Both processors operate under appropriate safeguards for international data transfers (UK adequacy decisions or approved transfer mechanisms).

6. Data Retention

• Google Analytics data: retained for 14 months, after which it is automatically deleted.
• Contact enquiries: retained for as long as necessary to respond to and follow up on your enquiry, and then deleted.
• Cloudflare logs: retained for up to 72 hours in accordance with Cloudflare’s standard practices.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing — request we limit how we use your data
• Right to object — object to processing based on legitimate interests
• Right to data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, email us at hello@snluk.org. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office: ico.org.uk/make-a-complaint.

8. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Significant changes will be communicated through the website.