Privacy Policy

Justice for journalists foundation

INTRODUCTION

We understand that your privacyis important to you and that you care about how your personal data is used.

In this Privacy Policy, we refer to all subscribers, members, donors, funders, event and course attendees, supporters, volunteers, partners, beneficiaries and all website users, as “you” for convenience.

Werespect and value your privacy and will only collect, hold, use, or share your personal data in ways that are described here, and in a way that is consistent with our obligations and your legal rights.

For the purposes of this Privacy Policy, “Data Protection Legislation” is defined as the Data Protection Act 2018, the General Data Protection Regulation (EU Regulation 2016/679) and the Privacy and Electronic Communications Regulations 2003.

  1. Information about us

Justice for Journalists Foundation is a registered charity no: 1201818and is a charitable company limited by guarantee registered in England under no. 13882886 whose registered address is: 16 Great Queen Street, Covent Garden, London WC2B 5AH.

  • What does this Policy cover?

This Privacy Policy explains the types of your personal data that we collect, how it is collected, how it is held, how we use it, and how it is processed. It also explains your rights under data protection legislation[1] relating to your personal data. Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

  • What is “personal data”?

Personal data is any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers. The personal data that we collect and use is set out in paragraph 5 below.

  • What are your rights?

Under the Data Protection Legislation, you have the following rights, which we will always work to uphold. You have the right to:

  • be informed about how we process your personal data;
    • access and be given a copy of the personal data we huld about you. (See paragraph 11 below about this);require us to correct any personal data that we huld about you if any of it is inaccurate or incomplete;be forgotten: in certain circumstances you have a right to have your personal data erased from our records;restrict (i.e. prevent) the processing of your personal data;        object to the way we process your personal data (e.g. for direct marketing);withdraw consent: if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time;data portability: the right in certain circumstances to have us transfer your personal data to another organisation; and

    •         not be subject to a decision based sulely on automated processing (including profiling) which produces legal effects on you. We do not use your personal data in this way.

    •         not be subject to a decision based sulely on automated processing (including profiling) which produces legal effects on you. We do not use your personal data in this way.
  • not be subject to a decision based solely on automated processing (including profiling) which produces legal effects on you. We do not use your personal data in this way.

As to how to contact us for more information about our use of your personal data or exercising your rights as outlined above, see paragraph 12 below.

It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed as long as wehave that data.

If you wish to make a complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office but please contact us first (see paragraph 12 below) so that we might try to resolve your concerns ourselves.

  • What personal data do we collect?

We may collect and hold some or all of the personal data set out below. We do not collect any ‘special category’ (‘sensitive’) personal data other than as set out below, or personal data relating to childrenordata relating to criminal convictions and/or offences.

  •    Contact information, such as your name, job title, postal address, including your home address, where you have provided this to us, date of birth, business address, telephone number, mobile phone number, fax number and email address.
  •    Payment data (only if you are making a donation) such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers.
  •    Your log-in details for any services provided by us on our website such as our Reader’s Portal, Incident Reporting Portal and account, and our JFJ Expert Account.
  •    Your previous donation history and details of your plans to give in the future.
  •    Your tax status if you have given us permission to claim Gift Aid or told us you are not eligible.
  •    Special categories of personal data which may relate to your political opinions and affiliations where you have informed us of the same via our “Contact Us” page on our website.
  • How do we collect your personal data

            We will collect information about you when:

  • You directly provide personal information to us via our website using services provided by JFJ.
  • You make a donation or enquire about an event.
  • You sign up to receive updates on our activities.
  • You attend a seminar or other event which is organised or sponsored by JFJ.
  • You post on our social media sites such as Facebook, X and Telegram. Depending on your privacy settings or the privacy policies of these sites, you might give us permission to receive information about you from them.
  • You or your organisation offer to provide or provide contractual services to JFJ.
  • You or your organisation partner with us.
  • You fundraise for us or enquire about doing this.
  • You contact us through the following channels: online, email, phone, SMS, social media or by post.
  • You visit our website. As you navigate through our website certain technical information is gathered, using various technologies and means, without you personally providing this to us. This information includes internet protocol addresses, internet tags, navigational data (“log files”, “server logs”, and “clickstream” data), the internet platform you are using and device identifiers. JFJ gathers and records some of this information about your website visit and uses cookies and anonymous identifiers in order to provide you with a better web experience. We do not use this information to attempt to find out the identities of those visiting our website. You can disable or delete some or all cookies in your browser setting, although this may affect some parts of the site’s functionality. Please see our Cookies Policy for more information.

We may also receive information about you from our partners (links are on our website) – but only if you have given them permission to share your information with us. These organisations will have their own privacy policies so please do make sure you read them before providing your information.

We may also collect personal information about you from the public domain, such as from social networks, company websites, political and property registers and news archives. We may also work with experts from external agencies to collect this information. This helps us find out where our supporters come from, what they do and what they are most interested in. This helps us in promoting our Mission and work. We do not control these third party sources and are not responsible for their privacy statements.

  • How do we use your personal data?

Under the Data Protection Legislation, we must always have a lawful basis for using personal data.

We will use your information for the following purposes when it is in both yours and our legitimate interests to do so:

  • To provide you with any service or information you have requested.
  • If you sign up for an event we will keep in touch with you regularly in the lead up to the event to ensure you have all of the details you need for taking part. We may also contact you after the event to get your feedback.
  • To administer your donations, including Gift Aid processing.
  • To send you mailings about how your donations are helping JFJ and its Mission.
  • To manage your or your organisation’s contractual, business or partner relationship with JFJ including billing, auditing, communication and support.
  • Compliance with JFJ’s legal obligations including record keeping obligations, financial compliance, etc. We may also process personal data for insurance purposes where necessary.
  • To analyse and improve your platform user experience.
  • To schedule events and meetings.
  • To comply with any court order or governmental authority mandatory requirement and/or defend our legal rights.
  • For any purpose related and/or ancillary to any of the above or any other purpose for which your personal data was provided to us.

With your permission and/or where permitted by law, we may use your personal data for marketing purposes solely for JFJ, which may include contacting you by email,telephonetext messageandpost with newsletters, fundraising appeals, campaigns, or other information or with information about ourservices. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the Data Protection Legislation, and you will always have the opportunity to opt-out.

Wewill always obtain your express opt-in consent before sharing your personal data with third parties for marketing purposes (and we will tell you who they are), and you will be able to opt-out at any time.

We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us using the details in paragraph 12 below.

If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.

In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.

  • How long will we keep your personal data?

We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Generally, your personal data will therefore be kept for a period of 6 years from the date of your last activity with us or such shorter period as we may reasonably determine, if a legitimate reason for retaining the same cannot be established.

For example, it will be deleted when it is no longer reasonably necessary or subject as provided below, you have withdrawn your consent or requested for it to be deleted. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you, or we have a legal obligation to retain the same.

  • How and where do we store or transfer your personal data?

We will only store or transfer your personal data within the UK. This means that it will be fully protected under the Data Protection Legislation.

The security of your personal data is essential to us, and to protect your data, we take a number of important measures, including the following:

  • limiting access to your personal data to those employees, volunteers, agents, contractors, and other third parties with a legitimate need to know and ensuring that they are subject to duties of confidentiality;
  • procedures for dealing with data breaches (the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, your personal data) including notifying you and/or the Information Commissioner’s Office where we are legally required to do so.
  1. Do we share your personal data?

We will not share any of your personal data with any third parties for any purposes, subject to the following exceptions.

If we merge any or all of our organisation or assets, your personal data may be transferred to another charity. Any such new owner of our charity may continue to use your personal data in the same way(s) that we have used it as specified in this Privacy Policy.

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.

We may pass your personal data to certain third party providers in order to communicate and engage with you. We deal only with GDPR compliant suppliers and have robust data protection agreements in place with these third parties to ensure your data is fully protected. Types of third party suppliers include CAF and CAF Bank, which provides us with a secure system for receiving donations. We do not hold your personal financial details such as bank account numbers, sort codes or security codes in our own systems.

Additionally,if you have made a donation to us which is eligible for gift aid, we are obliged to share that information with Her Majesty’s Revenue and Customs.

If any of your personal data is shared with a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law, as described above in paragraph 9.

  1. How can you access your personal data?

If you want to know what personal data we hold about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a subject access request (“SAR”).

All SARs should be made in writing and sent to the email or postal address shown in paragraph 12. Tomake it easier for us to respond to your request as quickly as possible, you may (but do not have to) use an SAR Form, a copy of which is contained in the Schedule below.

There is not normally any charge for a SAR. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will respond to your SAR not more than one month of receiving it (including all necessary identification verification documentation). Normally, weaim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.

  1. How do you contact JFJ?

To contact us about anything to do with your personal data and data protection, including to make a SAR, please use the following details (for the attention of the Data Protection Officer:

Email address: info@jfj.fund

Telephone number: 0203 769 6429

Postal Address: 67 WIMPOLE STREET, LONDON, W1G 8AP

  1. Changes to this Privacy Policy

We may change this Privacy Policy from time to time.

Updated: 16 September 2025

DOWNLOAD REQUEST FORM
SUPPORT US