ISKCON Dublin (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website at https://iskcondublin.com and associated services (collectively, the “Platform”).

Please read this policy carefully. By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Platform.

1. Who We Are

ISKCON Dublin is a registered non-profit religious organisation operating under the International Society for Krishna Consciousness (ISKCON). Our registered address is:

We are the data controller for the personal information described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: name, email address, and password.
• Profile information: display name, profile photo (avatar), biography, and public profile settings.
• Donations & payments: donation amount, billing address, and payment details (processed securely by Square — we do not store full card numbers).
• Event tickets: attendee name and email address.
• Volunteer (Seva) log: service dates, hours, type of service, and optional location and description.
• Comments & praises: any content you submit on the Platform.
• Communications: messages or enquiries you send to us.

2.2 Information Collected Automatically

• Usage data: pages visited, time on site, referring URL, browser type, and device information.
• Analytics: aggregated, anonymised data collected via Google Analytics (Google Tag Manager) when you consent to analytics cookies.
• Authentication tokens: session tokens stored in HttpOnly cookies that are inaccessible to JavaScript.

2.3 Information from Third Parties

• Google Sign-In: if you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account.
• Payment processing: Square may share transaction identifiers and status information with us to confirm successful payments.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Process donations and issue receipts and tax acknowledgements.
• Issue event tickets and manage event registrations.
• Display your public profile, seva contributions, and earned badges to the community (subject to your visibility settings).
• Send transactional emails, including donation receipts, email verification codes, and password reset links.
• Analyse and improve the performance and content of the Platform (analytics cookies, with your consent).
• Moderate community content and enforce our Terms of Use.
• Maintain security, prevent fraud, and comply with legal obligations.
• Communicate important updates about your account or our services.

We do not sell, rent, or trade your personal information to any third party for commercial purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance: to fulfil our obligations when you register, donate, or purchase tickets.
• Legitimate interests: to maintain security, prevent fraud, and improve our services.
• Consent: for analytics and marketing cookies, and for receiving promotional communications. You may withdraw consent at any time.
• Legal obligation: where required to comply with applicable law.

5. Cookies

We use cookies and similar tracking technologies on our Platform. Cookies are small text files stored on your device. We use the following categories:

• Essential cookies: required for authentication and core functionality. These cannot be disabled.
• Analytics cookies: used by Google Analytics (via Google Tag Manager) to collect aggregated, anonymised data about how visitors use our site. Only enabled with your consent.
• Marketing cookies: used to measure the reach of our outreach activities. Only enabled with your consent.

You can manage your cookie preferences at any time using the Cookie Settings link in our footer, or by adjusting your browser settings. For more information on Google's data practices, please visit policies.google.com/privacy.

6. How We Share Your Information

We may share your information with:

• Service providers: AWS (cloud hosting, database, email delivery), Square (payment processing), and Google (authentication, analytics) — each bound by their own privacy commitments and, where applicable, data processing agreements.
• Other community members: your public profile information (display name, avatar, approved seva hours, badges, praises) is visible to other registered users, subject to your profile visibility settings.
• Legal authorities: where required by law, court order, or to protect the rights, property, or safety of ISKCON Dublin, our users, or the public.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide you with our services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain certain data for legal, tax, or compliance purposes (e.g., donation records for Gift Aid or tax acknowledgement purposes).

8. Data Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS).
• Encrypted data storage (AWS DynamoDB server-side encryption).
• Authentication via AWS Cognito with optional multi-factor authentication (MFA).
• Access tokens stored in HttpOnly cookies, inaccessible to browser scripts.
• Payment card data processed exclusively by Square and never stored on our servers.
• Rate limiting and intrusion detection on all API endpoints.

No method of transmission or storage is 100% secure. In the event of a data breach that affects your rights, we will notify you and the relevant supervisory authority as required by applicable law.

9. Your Rights

If you are located in the EEA or UK, you have the following rights under GDPR / UK GDPR:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data (“right to be forgotten”).
• Restriction: request that we restrict processing of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: withdraw any previously given consent at any time (this does not affect the lawfulness of prior processing).

To exercise any of these rights, please contact us at info@iskcondublin.com. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission of Ireland at www.dataprotection.ie.

10. Children's Privacy

Our Platform is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. International Transfers

Our services are hosted on AWS infrastructure in the EU (eu-west-1, Ireland region). Some third-party providers (such as Google and Square) may process data in countries outside the EEA. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Where changes are material, we will notify registered users by email. Continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection contact at:

This Privacy Policy was last updated on 12 May 2026.