01. Who is responsible?
Moonlight Children’s Home, Satdobato-Godawari Road, Taukhel, Godawari-3, Lalitpur, 44709 Nepal, is the contact point for this website. Contact its management using the protected email on the Contact page or the published telephone numbers. This notice describes the website; the organisation must confirm internal records, policies and retention periods before launch.
02. Information and purposes
The website does not accept payments or upload enquiry-form data to our server. A contact enquiry opens your own email application; if sent, the recipient receives the name, reply address and message you provide. We use correspondence to respond to enquiries, assess proposed donations and volunteer applications, maintain records where required, and handle safeguarding concerns. Please do not send personal details about children.
03. Hosting, log data and security
Cloudflare serves the website and may process IP addresses, request headers, traffic/security metadata and server logs necessary to deliver and protect it. Essential local browser storage remembers privacy choices. Technical processing may occur independently of analytics consent.
04. Optional Google Analytics 4
Google Analytics 4 measurement ID G-ZT3BYV695V is activated only when you choose Accept. Google may process device and online identifiers, approximate location and interaction information, and set analytics cookies. You may reject just as easily, or withdraw consent using Cookie settings in the footer. The site attempts to remove analytics cookies on withdrawal; existing Google-side processing is not undone.
05. Google Maps and external websites
The embedded Google map is not loaded on arrival. Only clicking Load interactive map creates a connection with Google; Google may then obtain IP address, browser details and usage data and may set storage under its own policies. You can instead open the external Maps link. Facebook and YouTube links are external and follow their own privacy policies.
06. Donations and volunteer applications
Payment details are currently requested directly from MCH. This website does not collect bank-card details or operate its own donation payment gateway. A bank or payment provider may process personal and financial information under separate terms. Volunteer applications may involve identification, references or screening, but no such files should be submitted via the public website; obtain a direct, secure process from MCH.
07. International visitors and transfers
Visitors may come from the European Union/EEA, United Kingdom, United States, Australia and elsewhere. Google, Cloudflare, email and financial-service providers may process data outside your country. Where applicable laws require a lawful basis, disclosures, safeguards or transfer mechanisms, the organisation must establish and document them. No claim of blanket compliance with every jurisdiction is made.
08. Your choices and rights
Depending on applicable law, you may have rights to ask for access, correction, deletion, restriction or objection, or to withdraw consent and complain to a competent regulator. For California and other US state laws, or Australian Privacy Principles, additional rights and exceptions may apply depending on whether the law covers the organisation and relevant processing. Contact MCH to make a request; it should verify identity where needed.
09. Children’s safety
Do not send identifying, health or school information concerning residents using public forms or social media. Images of children will be displayed only after a child-safeguarding review and appropriate permissions; children must not be featured solely to solicit gifts.
10. Retention and changes
We store a consent choice locally for up to 180 days. Analytics retention depends on configured GA4 settings, which MCH must verify. Email and financial records should be retained only as long as justified by their purpose and applicable rules; precise schedules must be confirmed internally. We will update this policy when processing practices change. Please contact MCH with questions.
Detailed analytics controls
We use Google Analytics 4 (GA4), measurement ID G-ZT3BYV695V, with Google Consent Mode v2 (basic mode). Before you explicitly enable analytics, no Google Analytics code is downloaded, and no Analytics measurement request is made. All Google advertising consent signals (ad_storage, ad_user_data and ad_personalization) remain denied. Marketing pixels and remarketing are not enabled on this site.
What is measured
After analytics consent, GA4 may measure pages visited (with query strings removed by our tag setup), approximate geography, browser/device characteristics, site language and interactions such as donation or volunteering interest, opening a contact link or map, reading articles, scrolling and opening FAQs. These interest signals are not completed donations, submitted applications or verified payments. No message content, form answers, visitor names, email addresses, phone numbers or information about children is intentionally passed in analytics events. Google may still process technical identifiers as described in its policy.
Cookies, storage and retention
Your consent decision is recorded in localStorage as mch_privacy_v2 for up to 180 days. If you agree, Google Analytics may set _ga and _ga_* first-party cookies with a configured expiry of up to 90 days. Actual Google-side storage and event retention are subject to the Analytics property settings and Google policies, which must be verified by the organisation. If you withdraw consent, the site blocks new analytics requests, attempts to clear accessible _ga cookies and reloads the page; historical data already received by Google is not automatically erased.
International safeguards and your rights
The same opt-in requirement is used for visitors in Nepal, the EU/EEA, the United Kingdom, the United States, Australia and elsewhere; we do not assume a visitor location from their language. Depending on the applicable rules, rights may include access, correction, deletion, objection and complaint to a regulator. International data transfers to Google and other providers require separate assessment and appropriate safeguards where applicable. This notice and technical consent controls are not a blanket guarantee of GDPR, US state-law or Australian Privacy Act compliance.