Privacy Policy (Al-Adli Justice)

Last updated: 01/02/2026

This Privacy Policy explains how Al-Adli Justice (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use our website, contact us, donate, sign up to our newsletter, volunteer, attend our workshops, or access our support.

We aim to collect the minimum personal data needed and keep it secure, confidential, and lawful.

1) Who we are (data controller)

Data controller: Al-Adli Justice
Contact email: privacy@aladli.org
Postal address:  Collingwood Buildings, 38 Collingwood Street, Newcastle Upon Tyne, NE1 1JF
Safeguarding contact: operations.admin@aladli.org

If you have questions about this policy or your data, contact us using the details above.

2) What personal data we collect

We may collect the following types of personal data:

A) Data you give us

• Identity/contact: name, email, phone number, preferred language, location (general area)
  
  

• Support requests: information you share about your situation (which may include sensitive details)
  
  

• Volunteer applications: CVs, experience, references (if provided), availability
  
  

• Workshop/event signups: name, contact details, access needs (if disclosed)
  
  

• Newsletter signups: email address (and name if you provide it)
  
  

• Donations: amounts, donation message (if any), and transaction metadata handled by payment platforms
  
  

B) Data collected automatically (website)

• Technical data: IP address (often shortened), device/browser info, pages visited, referral source
  
  

• Cookie/analytics data: where enabled, aggregated usage analytics
  
  

We do not intentionally collect personal data from anyone, including u18s - if you believe a child has provided personal data, contact us.

3) Sensitive (“special category”) data

Some information you share may be special category data under UK GDPR (e.g., health, ethnicity, religion, political opinions) or may relate to criminal allegations/convictions.

We only process special category data when:

• you choose to provide it, and it’s necessary for support/safeguarding, and
  
  

• a lawful basis and special condition applies (see Section 4).
  
  

4) Why we use your data (lawful bases)

We process personal data under the UK GDPR on one or more of these lawful bases:

• Consent: e.g., newsletter signup; optional marketing; optional access needs you disclose
  
  

• Contract / steps before contract: e.g., volunteer onboarding, delivering a requested service
  
  

• Legitimate interests: e.g., responding to enquiries, running the organisation, improving services, preventing misuse (balanced against your rights)
  
  

• Legal obligation: e.g., financial record-keeping, responding to lawful requests
  
  

• Vital interests: in urgent safeguarding scenarios where someone may be at risk
  
  

For special category data, we rely on additional conditions such as:

• Explicit consent (where appropriate), and/or
  
  

• Substantial public interest (e.g., safeguarding), and/or
  
  

• Establishing, exercising, or defending legal claims (where relevant)
  
  

We do not sell your data.

5) How we use your data

We use personal data to:

• respond to messages and enquiries
  
  

• triage and manage support requests
  
  

• provide educational resources, templates, and practical support
  
  

• refer/signpost you to regulated advisers or other organisations when appropriate
  
  

• recruit, train, and manage volunteers
  
  

• administer workshops/events and respond to access needs
  
  

• send newsletters/updates (only where you’ve opted in)
  
  

• handle donations and maintain financial records
  
  

• maintain security, prevent abuse, and improve the website
  
  

6) Confidentiality and casework boundaries

Where we provide support, we treat information you share as confidential and restrict access to people who need it to do their role (e.g., relevant volunteers/supervisors).

We may share information without your consent only where necessary for:

• safeguarding (risk of serious harm), or
  
  

• preventing/handling serious wrongdoing, or
  
  

• complying with a legal obligation or lawful request.
  
  

7) Who we share data with (processors and partners)

We may share data with trusted providers who help us run our services (these providers act as processors or independent controllers depending on context):

Website hosting and analytics

• Google Sites / Google (website hosting and embedded services)
  
  

• Google Analytics (if enabled; analytics reporting)
  
  

• Cloudflare (if used for security/performance)
  
  

Communications

• Email provider (e.g., Proton Mail) for inbox management
  
  

• Newsletter platform (if you use one; otherwise remove)
  
  

Forms, files, and internal operations

• Google Workspace or equivalent tools (if used for forms/docs/storage—include only what you actually use)
  
  

Donations and payments

• Open Collective (donation processing and public transparency pages)
  
  

• Buy Me a Coffee (donation processing)
  
  

• Payment processors used by those platforms (e.g., Stripe/PayPal)
  
  

Referrals/signposting

Where needed and appropriate, we may share limited information with regulated advisers/solicitors or support organisations with your knowledge/consent, unless safeguarding requires otherwise.

We require service providers to protect personal data and only use it for specified purposes.

8) International transfers

Some providers (e.g., Google, payment processors) may process data outside the UK.

Where data is transferred internationally, we rely on appropriate safeguards, such as:

• the UK International Data Transfer Agreement (IDTA) or UK Addendum, and/or
  
  

• adequacy regulations where applicable, and/or
  
  

• other lawful safeguards recognised under UK GDPR.
  
  

9) How long we keep your data (retention)

We keep personal data only as long as necessary for the purpose collected, including legal, safeguarding, and accountability needs.

Typical retention (adjust to fit your reality):

• General enquiries: up to 12 months
  
  

• Newsletter subscription data: until you unsubscribe (then removed from active lists promptly)
  
  

• Volunteer records: duration of volunteering + up to 24 months
  
  

• Support/case records: up to [X years] after last contact, unless a shorter/longer period is justified (e.g., safeguarding/legal claims)
  
  

• Financial records (donations): typically 6 years to meet UK accounting/tax expectations (depending on your legal structure)
  
  

Where possible, we anonymise data instead of keeping identifiable data.

10) Cookies and analytics

Our website may use cookies and similar technologies.

• Essential cookies: required for the site to function properly
  
  

• Analytics cookies: help us understand how the site is used (e.g., Google Analytics) to improve content and access
  
  

Where required, we use a cookie banner to request consent for non-essential cookies. You can manage cookies in your browser settings and (where provided) through the site’s cookie controls.

11) Your rights

Under UK GDPR, you may have rights to:

• access your personal data
  
  

• correct inaccurate data
  
  

• erase data (“right to be forgotten”) in certain circumstances
  
  

• restrict processing in certain circumstances
  
  

• object to processing based on legitimate interests
  
  

• data portability (where processing is based on consent/contract and automated)
  
  

• withdraw consent at any time (this does not affect processing already carried out)
  
  

To exercise rights, contact us at [privacy@aladli.org]. We may ask for information to verify your identity.

12) Complaints

If you’re unhappy with how we handle data, contact us first so we can try to fix it.

You also have the right to complain to the Information Commissioner’s Office (ICO) (the UK data protection authority).

13) Security

We use reasonable administrative and technical measures to protect data, including access controls and confidentiality obligations. No system is perfectly secure, but we take security seriously and aim to minimise risk.

14) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with a revised “Last updated” date.

15) Contact

For privacy questions or requests:
Email: privacy@aladli.org
Post: Collingwood Buildings, 38 Collingwood Street, Newcastle Upon Tyne, NE1 1JF