This is some text inside of a div block.
.png)
Privacy Policy
Animal Justice Project is the data controller for personal information collected through this website, and this policy explains what we do with it. It applies to www.animaljusticeproject.com, our online shop, and donation pages hosted at donate.animaljusticeproject.com.
1. Who we are
Animal Justice Project ("AJP", "we", "us", "our") is a registered charity in England and Wales (charity number 1184965) and a registered company (company number 09335745). Our address is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
We are the "controller" of your personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations 2003 (PECR). This means we decide why and how your data is used.
You can contact us about your data at info@animaljusticeproject.com or by post at the address above, marking your letter "Data Protection".
2. About this policy
This policy tells you what personal data we collect, why we collect it, who we share it with, how long we keep it and what your rights are. It covers visitors, campaigners, donors, members, fundraisers, shop customers, job applicants, volunteers, whistleblowers and anyone who contacts us.
Some services are run by third parties with their own privacy notices, and we link to them where relevant. If we use your data for a new purpose, we will update this policy and, where the law requires, ask for your consent first.
3. What personal data we collect
We collect personal data directly from you, automatically when you use our website, and occasionally from third parties (for example, when you donate through a fundraising platform such as Facebook Fundraising or a giving page set up by a supporter). The categories are as follows.
Identity and contact data
Your name, title, email, postal address and phone number. We collect this when you donate, sign petitions, join our mailing list, buy from the shop, contact us or apply for a role.
Donation and gift details
Donation amount, frequency, date, campaign or appeal, Gift Aid declaration, tax status and home address. We collect this when you donate, become a member or fundraise for us.
Order details
Items ordered, delivery address, order history and communications about your order. We collect this when you buy from our shop.Payment details. Card or wallet details, billing address and transaction reference. We collect this when you donate or buy from the shop. Payment processors collect and hold full card numbers; we do not see or store them.
Communication preferences
The topics and channels you want to hear about, your consents and opt-outs, and records of when and how you gave them. We collect this when you sign up or change your preferences.
Campaigning and action data
Petition signatures, messages you send to decision-makers via our action tools, and the postcode used to identify your representative. We collect this when you use the Action Centre.
Technical and usage data
IP address, browser type and language, device type, operating system, pages viewed, referring site, time and date of visit, and approximate location. We collect this automatically when you visit the website, using cookies and similar technologies.
Correspondence
Emails, messages, form submissions and call notes. We collect this when you contact us.
Volunteer, job and fundraiser data
CV, employment history, references and emergency contact details. We collect this when you apply or volunteer.
Whistleblower submissions
Information you choose to give about an animal-related concern, and your contact details if you provide them. We collect this when you use our whistleblower form.
We do not ask for "special category" data (such as health, religion, or ethnicity) as part of normal supporter activity. Please do not include it in free-text forms unless it is necessary. Because our work is connected to a philosophical belief (animal rights), we treat information that reveals your support for our campaigns with additional care, and we never sell it.
4. How and why we use your data
We only use personal data when we have a lawful basis under Article 6 of the UK GDPR. Each purpose and the basis we rely on are set out below.
Processing donations and memberships, taking payment, and issuing receipts and thank you messages
Our lawful basis is contract (where you have agreed to a regular gift or membership) and legitimate interests (running our fundraising and keeping accurate records).
Claiming Gift Aid
Our lawful basis is legal obligation (HMRC record-keeping) and legitimate interests.
Fulfilling shop orders, delivery, returns and customer service
Our lawful basis is contract.
Keeping financial and tax records
Our lawful basis is legal obligation.
Sending email, SMS or other electronic marketing and campaign updates
Our lawful basis is consent, which you can withdraw at any time.
Sending postal fundraising and campaign updates
Our lawful basis is legitimate interests. You can object at any time.
Petitions and action tools, including passing your details to the relevant decision-maker where you ask us to
Our lawful basis is consent.
Responding to enquiries, complaints and requests to exercise your rights
Our lawful basis is legitimate interests and, where it applies, legal obligation.
Non-essential cookies, analytics and advertising technologies
Our lawful basis is consent.
Essential cookies that make the site and checkout work
Our lawful basis is legitimate interests, and no consent is needed under PECR.
Keeping our website and systems secure, and preventing fraud
Our lawful basis is legitimate interests and legal obligation.
Analysing supporter behaviour to improve fundraising and campaigns
Our lawful basis is legitimate interests. We balance this against your rights and stop if you object.
Recruiting staff and volunteers
Our lawful basis is legitimate interests and, once you are offered a role, contract.
Handling whistleblower reports
Our lawful basis is legitimate interests (protecting animals and investigating wrongdoing), and consent for anything you ask us to keep confidential.
Reporting to the Charity Commission, Companies House and other regulators
Our lawful basis is legal obligation.
Where we rely on legitimate interests, our interest is raising funds and awareness to protect animals, and we have concluded these uses are proportionate and do not override your rights. You can ask us for details of our assessment.
We do not make decisions about you using solely automated processing that has legal or similarly significant effects. We may use basic supporter analysis to decide which appeals to send you. If you would rather we didn't, tell us.
5. Donations and payments through Engaging Networks
When you click "Donate", you are taken to our secure donation pages at donate.animaljusticeproject.com, which are run by our supplier Engaging Networks. Engaging Networks acts as our data processor: it holds and handles your donation data only on our instructions and under a written contract. You can read its own privacy information on the Engaging Networks website.
What is collected
Your name, contact details, donation amount and frequency, campaign or appeal, Gift Aid declaration and home address (if you give one), marketing preferences, and the payment details needed to take your gift.
How payment works
Card, wallet or other payment details are entered on the donation page and passed directly to a payment services provider connected to Engaging Networks. We never see or store your full card number, expiry date or security code. We receive only a confirmation that the payment succeeded, plus limited details such as the last four digits of the card and the transaction reference.
Why we use it
To process and record your donation, send a receipt and thank-you, claim Gift Aid from HMRC, keep the financial records the law requires, and prevent fraud. If you tick the relevant boxes, we will also send you news and appeals by the channels you choose.
Gift Aid
If you make a Gift Aid declaration, we keep it, and the related donation records, for the period HMRC requires (see section 11). Declarations can be withdrawn by contacting us.
Regular gifts
If you set up a regular donation, we keep your instruction until you cancel it. You can cancel or change it at any time by emailing info@animaljusticeproject.com.
Sharing
We share donation data only with Engaging Networks, the payment provider, HMRC (for Gift Aid) and our professional advisers and auditors. We never sell or rent donor data or swap it with other charities.
Your choices
Giving a donation does not require you to receive marketing. Consent to communications is optional and separate, and you can change it later (see section 7).
6. Online shop orders and payments
Our shop runs on the Webflow Ecommerce platform. Webflow, and the payment providers connected to it (such as Stripe and PayPal), process your data to complete your order and act as processors or, for their own fraud and compliance checks, as independent controllers. Each has its own privacy notice.
What is collected
Your name, email, phone number (if requested), billing and delivery addresses, the items you order, your order history, and payment details entered at checkout.
How payment works
You enter card or wallet details on the secure checkout, and they go directly to the payment provider. We never see or store your full card number, expiry date or security code. We receive confirmation of payment, the last four digits of the card, and the transaction reference.
Why we use it
To take payment, confirm and deliver your order, handle returns, refunds and customer service, keep the accounting records the law requires, and detect fraud. Providing your details is necessary for us to complete a purchase; if you don't, we can't fulfil your order.
Delivery
We share your name, delivery address and contact details with the couriers and fulfilment partners who deliver your order, and only for that purpose.
Adding a donation to your basket
If you add a donation at shop checkout, the payment is taken through the shop, and we treat the information as donation data under section 5.
Marketing
We will not add you to our mailing list because you bought something. We will only email you marketing if you tick the opt-in box, which is separate from your order. Service messages about your order (for example, confirmation and delivery updates) are not marketing.
Accounts
If you create an account, we keep your details until you ask us to delete it or the account has been inactive for a long period (see section 11).
7. Campaigning, petitions and marketing
We only send you email, SMS or other electronic marketing if you have given us your consent, and we keep a record of when, how and what you agreed to. You can withdraw consent at any time, and it is as easy to withdraw as to give.
If you change your mind
Click "unsubscribe" in any email, reply "STOP" to any SMS, email info@animaljusticeproject.com, or write to us at the address in section 1. We act on opt-outs promptly and keep a minimal suppression record so we do not contact you again.
Postal contact
We may send campaign and fundraising updates by post where we have a legitimate interest in doing so. You can object at any time.
Newsletter sign-up
When you subscribe through the sign-up form, we use your name and email address to send campaign news, action alerts and appeals. We measure whether emails are opened and links are clicked, using tracking pixels and links, to see what interests supporters. You can turn off image loading in your email client to limit this.
Petitions and action tools
If you sign a petition or use an action tool, we use your details to record your action and, if the tool says so, send your message to the named decision-maker. We will tell you before we pass your name to anyone else. We do not publish your personal details alongside your signature.
Telephone
If we ever call you for fundraising or marketing, we will do so only where the law allows, including checking the Telephone Preference Service first.
Your data is not for sale
We do not sell, rent or swap supporter data.
8. Cookies and similar technologies
Cookies are small files stored on your device when you visit a website. We also use similar technologies such as pixels, web beacons and local storage, and we call all of these "cookies" here. We only set cookies that are not strictly necessary if you have agreed to them through our cookie banner.
We use four types of cookie.
Strictly necessary cookies
These keep the site secure, remember your basket, run checkout and remember your cookie choices. They do not need your consent. Examples include Webflow site and shop cookies and payment provider security cookies.
Preference cookies
These remember settings such as your region or form entries. They need your consent.
Analytics cookies
These count visits and show which pages and campaigns are popular, so we can improve the site. They need your consent.
Marketing and social cookies
These measure the reach of our campaigns and let social buttons and embedded videos work. They need your consent. Examples include Facebook, Instagram, X, TikTok, YouTube and LinkedIn plug-ins and pixels.
Some of these cookies are set by third parties (such as social media platforms and video hosts) when you view embedded content. They may collect your IP address, browser and pages visited, and may combine this with other data they hold about you. We do not control these companies; see their privacy notices for details.
Managing your choices
When you first visit, our banner lets you accept or decline non-essential cookies. You can change your mind at any time using the cookie settings link in the website footer. You can also delete or block cookies in your browser settings, though parts of the site (such as the basket and checkout) may stop working if you block essential cookies. Guidance is available at allaboutcookies.org.
How long they last
Session cookies expire when you close your browser. Persistent cookies last for a fixed period, which will not usually exceed 13 months.
Email tracking
Our emails may contain small images that tell us if a message was opened, as described in section 7.
The law on cookies is PECR, as amended by the Data (Use and Access) Act 2025, which allows some low-risk analytics and functionality cookies without consent in certain conditions. We will apply those changes when we are satisfied that they fit our set-up, and will update this section if so.
9. Who we share your data with
We never sell your personal data. We share it only with the following, and only as far as needed.
Engaging Networks
Runs our donation pages, supporter database, email and action tools. It acts as our processor.
Payment providers (including those connected to Engaging Networks and to our shop)
They take payments and help prevent fraud. They act as processors and, for their own compliance checks, as independent controllers.
Webflow
Hosts our website and runs the shop. It acts as our processor.
Couriers and fulfilment partners
They deliver shop orders. They act as processors or independent controllers.
Email and communications providers
They send our emails and messages. They act as our processors.
Analytics and social media providers
They measure site use and campaigns, where you have consented. They act as independent controllers or processors.
IT, web development, accounting, audit and legal advisers
They support our operations. They act as processors or independent controllers.
HMRC
Receives data for Gift Aid claims, as an independent controller.
Regulators, courts and police
We share data with them where the law requires it, or to protect rights, safety or property. They act as independent controllers.
All processors are bound by written contracts under Article 28 of the UK GDPR. If our charity merged with or transferred its work to another organisation, we would tell you first and only share your data with a similar body.
10. International transfers
Some of our suppliers (including Webflow, payment providers, analytics and social media companies) are based in, or use servers in, countries outside the UK, including the United States. Where we transfer your data outside the UK, we make sure it is protected by at least one of the following safeguards.
First, the country has a UK "adequacy" decision, or the recipient is certified under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge").
Second, the transfer is covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed.
You can contact us for more information about the safeguards for a specific transfer.
11. How long we keep your data
We keep personal data only as long as we need it for the purposes above, and then delete or anonymise it. Our usual periods are below.
Donation records and Gift Aid declarations
We keep these for at least 6 years after the end of the accounting period in which the donation was made (or, for a Gift Aid declaration, 6 years after the last donation it covers).
Shop orders, invoices and payment records
We keep these for 6 years after the end of the financial year of the sale.
Supporter and mailing list records
We keep these while you are active, and for up to 3 years after your last interaction with us, then delete or anonymise them.
Marketing opt-outs (suppression list)
We keep these indefinitely, so we can respect your choice.
Petition and action data
We keep this for up to 3 years after the campaign ends.
Enquiries and correspondence
We keep these for 2 years after the matter is closed.
Unsuccessful job and volunteer applications
We keep these for 6 months.
Whistleblower reports
We keep these for as long as the investigation or any resulting legal action needs, and then review them.
Website analytics and cookie data
We keep this for up to 26 months, or the cookie lifetime if shorter. Where the law or a legal claim requires it, we may keep data for longer.
12. How we keep your data secure
We use appropriate technical and organisational measures, including encrypted connections (HTTPS) on our website, access controls limited to staff who need the data, staff training, and contracts with suppliers that require them to protect your data. Card details are handled only by PCI-DSS-compliant payment providers.
No system is completely secure, so please take care with what you send us by email. If a breach is likely to put your rights at risk, we will report it to the Information Commissioner's Office within 72 hours and, where there is a high risk to you, tell you directly.
13. Your rights
Under the UK GDPR you have the following rights over your personal data. To use any of them, contact us using the details in section 17. We will reply within one month, and may ask you to confirm your identity first. There is no fee unless a request is clearly unfounded or excessive.
The right to be informed
To be told how we use your data, which is the purpose of this policy.
The right of access
To get a copy of the personal data we hold about you.The right to rectification. To have inaccurate or incomplete data corrected.
The right to erasure
To have your data deleted in certain circumstances.
The right to restriction
To ask us to pause using your data in certain circumstances.
The right to data portability
To receive data you gave us in a common, machine-readable format, where we use it on the basis of consent or contract.
The right to object
To object to processing based on legitimate interests, and to object to direct marketing at any time (which we must always honour).
The right to withdraw consent
To withdraw consent at any time, without affecting the lawfulness of earlier processing.
Rights around automated decisions
Not to be subject to decisions based solely on automated processing with legal or similarly significant effects.
These rights are not absolute, and in some cases (for example, legal record-keeping for Gift Aid) we may have to keep data despite a request. We will explain if that applies.
14. Children
Our website is not aimed at children under 13, and we do not knowingly collect their personal data. If you are under 18, please ask a parent or guardian before making a purchase or donation. If you think a child has given us their data, contact us and we will delete it.
15. Links and social media
Our website links to other sites and to social media platforms including Facebook, Instagram, X, TikTok, YouTube and LinkedIn. We do not control them and are not responsible for their privacy practices. Please read their notices before giving them your data. If you interact with our pages on social media, the platform, not us, is responsible for the data it collects.
16. Changes to this policy
We review this policy regularly and may update it when our practices or the law change. The latest version is always on this page, with the date it was last updated. If we make material changes, we will tell you by email (if we hold your address) or by a notice on the website. This version was published on 30 September 2026.
17. Contact us and complaints
For questions about this policy or to use your rights, contact us by email at info@animaljusticeproject.com, or by post at Data Protection, Animal Justice Project, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. We will acknowledge your complaint within 30 days, investigate without undue delay and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Last updated: 30 September 2026
Animal Justice Project is the data controller for personal information collected through this website, and this policy explains what we do with it. It applies to www.animaljusticeproject.com, our online shop, and donation pages hosted at donate.animaljusticeproject.com.
1. Who we are
Animal Justice Project ("AJP", "we", "us", "our") is a registered charity in England and Wales (charity number 1184965) and a registered company (company number 09335745). Our address is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
We are the "controller" of your personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations 2003 (PECR). This means we decide why and how your data is used.
You can contact us about your data at info@animaljusticeproject.com or by post at the address above, marking your letter "Data Protection".
2. About this policy
This policy tells you what personal data we collect, why we collect it, who we share it with, how long we keep it and what your rights are. It covers visitors, campaigners, donors, members, fundraisers, shop customers, job applicants, volunteers, whistleblowers and anyone who contacts us.
Some services are run by third parties with their own privacy notices, and we link to them where relevant. If we use your data for a new purpose, we will update this policy and, where the law requires, ask for your consent first.
3. What personal data we collect
We collect personal data directly from you, automatically when you use our website, and occasionally from third parties (for example, when you donate through a fundraising platform such as Facebook Fundraising or a giving page set up by a supporter). The categories are as follows.
Identity and contact data
Your name, title, email, postal address and phone number. We collect this when you donate, sign petitions, join our mailing list, buy from the shop, contact us or apply for a role.
Donation and gift details
Donation amount, frequency, date, campaign or appeal, Gift Aid declaration, tax status and home address. We collect this when you donate, become a member or fundraise for us.
Order details
Items ordered, delivery address, order history and communications about your order. We collect this when you buy from our shop.Payment details. Card or wallet details, billing address and transaction reference. We collect this when you donate or buy from the shop. Payment processors collect and hold full card numbers; we do not see or store them.
Communication preferences
The topics and channels you want to hear about, your consents and opt-outs, and records of when and how you gave them. We collect this when you sign up or change your preferences.
Campaigning and action data
Petition signatures, messages you send to decision-makers via our action tools, and the postcode used to identify your representative. We collect this when you use the Action Centre.
Technical and usage data
IP address, browser type and language, device type, operating system, pages viewed, referring site, time and date of visit, and approximate location. We collect this automatically when you visit the website, using cookies and similar technologies.
Correspondence
Emails, messages, form submissions and call notes. We collect this when you contact us.
Volunteer, job and fundraiser data
CV, employment history, references and emergency contact details. We collect this when you apply or volunteer.
Whistleblower submissions
Information you choose to give about an animal-related concern, and your contact details if you provide them. We collect this when you use our whistleblower form.
We do not ask for "special category" data (such as health, religion, or ethnicity) as part of normal supporter activity. Please do not include it in free-text forms unless it is necessary. Because our work is connected to a philosophical belief (animal rights), we treat information that reveals your support for our campaigns with additional care, and we never sell it.
4. How and why we use your data
We only use personal data when we have a lawful basis under Article 6 of the UK GDPR. Each purpose and the basis we rely on are set out below.
Processing donations and memberships, taking payment, and issuing receipts and thank you messages
Our lawful basis is contract (where you have agreed to a regular gift or membership) and legitimate interests (running our fundraising and keeping accurate records).
Claiming Gift Aid
Our lawful basis is legal obligation (HMRC record-keeping) and legitimate interests.
Fulfilling shop orders, delivery, returns and customer service
Our lawful basis is contract.
Keeping financial and tax records
Our lawful basis is legal obligation.
Sending email, SMS or other electronic marketing and campaign updates
Our lawful basis is consent, which you can withdraw at any time.
Sending postal fundraising and campaign updates
Our lawful basis is legitimate interests. You can object at any time.
Petitions and action tools, including passing your details to the relevant decision-maker where you ask us to
Our lawful basis is consent.
Responding to enquiries, complaints and requests to exercise your rights
Our lawful basis is legitimate interests and, where it applies, legal obligation.
Non-essential cookies, analytics and advertising technologies
Our lawful basis is consent.
Essential cookies that make the site and checkout work
Our lawful basis is legitimate interests, and no consent is needed under PECR.
Keeping our website and systems secure, and preventing fraud
Our lawful basis is legitimate interests and legal obligation.
Analysing supporter behaviour to improve fundraising and campaigns
Our lawful basis is legitimate interests. We balance this against your rights and stop if you object.
Recruiting staff and volunteers
Our lawful basis is legitimate interests and, once you are offered a role, contract.
Handling whistleblower reports
Our lawful basis is legitimate interests (protecting animals and investigating wrongdoing), and consent for anything you ask us to keep confidential.
Reporting to the Charity Commission, Companies House and other regulators
Our lawful basis is legal obligation.
Where we rely on legitimate interests, our interest is raising funds and awareness to protect animals, and we have concluded these uses are proportionate and do not override your rights. You can ask us for details of our assessment.
We do not make decisions about you using solely automated processing that has legal or similarly significant effects. We may use basic supporter analysis to decide which appeals to send you. If you would rather we didn't, tell us.
5. Donations and payments through Engaging Networks
When you click "Donate", you are taken to our secure donation pages at donate.animaljusticeproject.com, which are run by our supplier Engaging Networks. Engaging Networks acts as our data processor: it holds and handles your donation data only on our instructions and under a written contract. You can read its own privacy information on the Engaging Networks website.
What is collected
Your name, contact details, donation amount and frequency, campaign or appeal, Gift Aid declaration and home address (if you give one), marketing preferences, and the payment details needed to take your gift.
How payment works
Card, wallet or other payment details are entered on the donation page and passed directly to a payment services provider connected to Engaging Networks. We never see or store your full card number, expiry date or security code. We receive only a confirmation that the payment succeeded, plus limited details such as the last four digits of the card and the transaction reference.
Why we use it
To process and record your donation, send a receipt and thank-you, claim Gift Aid from HMRC, keep the financial records the law requires, and prevent fraud. If you tick the relevant boxes, we will also send you news and appeals by the channels you choose.
Gift Aid
If you make a Gift Aid declaration, we keep it, and the related donation records, for the period HMRC requires (see section 11). Declarations can be withdrawn by contacting us.
Regular gifts
If you set up a regular donation, we keep your instruction until you cancel it. You can cancel or change it at any time by emailing info@animaljusticeproject.com.
Sharing
We share donation data only with Engaging Networks, the payment provider, HMRC (for Gift Aid) and our professional advisers and auditors. We never sell or rent donor data or swap it with other charities.
Your choices
Giving a donation does not require you to receive marketing. Consent to communications is optional and separate, and you can change it later (see section 7).
6. Online shop orders and payments
Our shop runs on the Webflow Ecommerce platform. Webflow, and the payment providers connected to it (such as Stripe and PayPal), process your data to complete your order and act as processors or, for their own fraud and compliance checks, as independent controllers. Each has its own privacy notice.
What is collected
Your name, email, phone number (if requested), billing and delivery addresses, the items you order, your order history, and payment details entered at checkout.
How payment works
You enter card or wallet details on the secure checkout, and they go directly to the payment provider. We never see or store your full card number, expiry date or security code. We receive confirmation of payment, the last four digits of the card, and the transaction reference.
Why we use it
To take payment, confirm and deliver your order, handle returns, refunds and customer service, keep the accounting records the law requires, and detect fraud. Providing your details is necessary for us to complete a purchase; if you don't, we can't fulfil your order.
Delivery
We share your name, delivery address and contact details with the couriers and fulfilment partners who deliver your order, and only for that purpose.
Adding a donation to your basket
If you add a donation at shop checkout, the payment is taken through the shop, and we treat the information as donation data under section 5.
Marketing
We will not add you to our mailing list because you bought something. We will only email you marketing if you tick the opt-in box, which is separate from your order. Service messages about your order (for example, confirmation and delivery updates) are not marketing.
Accounts
If you create an account, we keep your details until you ask us to delete it or the account has been inactive for a long period (see section 11).
7. Campaigning, petitions and marketing
We only send you email, SMS or other electronic marketing if you have given us your consent, and we keep a record of when, how and what you agreed to. You can withdraw consent at any time, and it is as easy to withdraw as to give.
If you change your mind
Click "unsubscribe" in any email, reply "STOP" to any SMS, email info@animaljusticeproject.com, or write to us at the address in section 1. We act on opt-outs promptly and keep a minimal suppression record so we do not contact you again.
Postal contact
We may send campaign and fundraising updates by post where we have a legitimate interest in doing so. You can object at any time.
Newsletter sign-up
When you subscribe through the sign-up form, we use your name and email address to send campaign news, action alerts and appeals. We measure whether emails are opened and links are clicked, using tracking pixels and links, to see what interests supporters. You can turn off image loading in your email client to limit this.
Petitions and action tools
If you sign a petition or use an action tool, we use your details to record your action and, if the tool says so, send your message to the named decision-maker. We will tell you before we pass your name to anyone else. We do not publish your personal details alongside your signature.
Telephone
If we ever call you for fundraising or marketing, we will do so only where the law allows, including checking the Telephone Preference Service first.
Your data is not for sale
We do not sell, rent or swap supporter data.
8. Cookies and similar technologies
Cookies are small files stored on your device when you visit a website. We also use similar technologies such as pixels, web beacons and local storage, and we call all of these "cookies" here. We only set cookies that are not strictly necessary if you have agreed to them through our cookie banner.
We use four types of cookie.
Strictly necessary cookies
These keep the site secure, remember your basket, run checkout and remember your cookie choices. They do not need your consent. Examples include Webflow site and shop cookies and payment provider security cookies.
Preference cookies
These remember settings such as your region or form entries. They need your consent.
Analytics cookies
These count visits and show which pages and campaigns are popular, so we can improve the site. They need your consent.
Marketing and social cookies
These measure the reach of our campaigns and let social buttons and embedded videos work. They need your consent. Examples include Facebook, Instagram, X, TikTok, YouTube and LinkedIn plug-ins and pixels.
Some of these cookies are set by third parties (such as social media platforms and video hosts) when you view embedded content. They may collect your IP address, browser and pages visited, and may combine this with other data they hold about you. We do not control these companies; see their privacy notices for details.
Managing your choices
When you first visit, our banner lets you accept or decline non-essential cookies. You can change your mind at any time using the cookie settings link in the website footer. You can also delete or block cookies in your browser settings, though parts of the site (such as the basket and checkout) may stop working if you block essential cookies. Guidance is available at allaboutcookies.org.
How long they last
Session cookies expire when you close your browser. Persistent cookies last for a fixed period, which will not usually exceed 13 months.
Email tracking
Our emails may contain small images that tell us if a message was opened, as described in section 7.
The law on cookies is PECR, as amended by the Data (Use and Access) Act 2025, which allows some low-risk analytics and functionality cookies without consent in certain conditions. We will apply those changes when we are satisfied that they fit our set-up, and will update this section if so.
9. Who we share your data with
We never sell your personal data. We share it only with the following, and only as far as needed.
Engaging Networks
Runs our donation pages, supporter database, email and action tools. It acts as our processor.
Payment providers (including those connected to Engaging Networks and to our shop)
They take payments and help prevent fraud. They act as processors and, for their own compliance checks, as independent controllers.
Webflow
Hosts our website and runs the shop. It acts as our processor.
Couriers and fulfilment partners
They deliver shop orders. They act as processors or independent controllers.
Email and communications providers
They send our emails and messages. They act as our processors.
Analytics and social media providers
They measure site use and campaigns, where you have consented. They act as independent controllers or processors.
IT, web development, accounting, audit and legal advisers
They support our operations. They act as processors or independent controllers.
HMRC
Receives data for Gift Aid claims, as an independent controller.
Regulators, courts and police
We share data with them where the law requires it, or to protect rights, safety or property. They act as independent controllers.
All processors are bound by written contracts under Article 28 of the UK GDPR. If our charity merged with or transferred its work to another organisation, we would tell you first and only share your data with a similar body.
10. International transfers
Some of our suppliers (including Webflow, payment providers, analytics and social media companies) are based in, or use servers in, countries outside the UK, including the United States. Where we transfer your data outside the UK, we make sure it is protected by at least one of the following safeguards.
First, the country has a UK "adequacy" decision, or the recipient is certified under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge").
Second, the transfer is covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed.
You can contact us for more information about the safeguards for a specific transfer.
11. How long we keep your data
We keep personal data only as long as we need it for the purposes above, and then delete or anonymise it. Our usual periods are below.
Donation records and Gift Aid declarations
We keep these for at least 6 years after the end of the accounting period in which the donation was made (or, for a Gift Aid declaration, 6 years after the last donation it covers).
Shop orders, invoices and payment records
We keep these for 6 years after the end of the financial year of the sale.
Supporter and mailing list records
We keep these while you are active, and for up to 3 years after your last interaction with us, then delete or anonymise them.
Marketing opt-outs (suppression list)
We keep these indefinitely, so we can respect your choice.
Petition and action data
We keep this for up to 3 years after the campaign ends.
Enquiries and correspondence
We keep these for 2 years after the matter is closed.
Unsuccessful job and volunteer applications
We keep these for 6 months.
Whistleblower reports
We keep these for as long as the investigation or any resulting legal action needs, and then review them.
Website analytics and cookie data
We keep this for up to 26 months, or the cookie lifetime if shorter. Where the law or a legal claim requires it, we may keep data for longer.
12. How we keep your data secure
We use appropriate technical and organisational measures, including encrypted connections (HTTPS) on our website, access controls limited to staff who need the data, staff training, and contracts with suppliers that require them to protect your data. Card details are handled only by PCI-DSS-compliant payment providers.
No system is completely secure, so please take care with what you send us by email. If a breach is likely to put your rights at risk, we will report it to the Information Commissioner's Office within 72 hours and, where there is a high risk to you, tell you directly.
13. Your rights
Under the UK GDPR you have the following rights over your personal data. To use any of them, contact us using the details in section 17. We will reply within one month, and may ask you to confirm your identity first. There is no fee unless a request is clearly unfounded or excessive.
The right to be informed
To be told how we use your data, which is the purpose of this policy.
The right of access
To get a copy of the personal data we hold about you.The right to rectification. To have inaccurate or incomplete data corrected.
The right to erasure
To have your data deleted in certain circumstances.
The right to restriction
To ask us to pause using your data in certain circumstances.
The right to data portability
To receive data you gave us in a common, machine-readable format, where we use it on the basis of consent or contract.
The right to object
To object to processing based on legitimate interests, and to object to direct marketing at any time (which we must always honour).
The right to withdraw consent
To withdraw consent at any time, without affecting the lawfulness of earlier processing.
Rights around automated decisions
Not to be subject to decisions based solely on automated processing with legal or similarly significant effects.
These rights are not absolute, and in some cases (for example, legal record-keeping for Gift Aid) we may have to keep data despite a request. We will explain if that applies.
14. Children
Our website is not aimed at children under 13, and we do not knowingly collect their personal data. If you are under 18, please ask a parent or guardian before making a purchase or donation. If you think a child has given us their data, contact us and we will delete it.
15. Links and social media
Our website links to other sites and to social media platforms including Facebook, Instagram, X, TikTok, YouTube and LinkedIn. We do not control them and are not responsible for their privacy practices. Please read their notices before giving them your data. If you interact with our pages on social media, the platform, not us, is responsible for the data it collects.
16. Changes to this policy
We review this policy regularly and may update it when our practices or the law change. The latest version is always on this page, with the date it was last updated. If we make material changes, we will tell you by email (if we hold your address) or by a notice on the website. This version was published on 30 September 2026.
17. Contact us and complaints
For questions about this policy or to use your rights, contact us by email at info@animaljusticeproject.com, or by post at Data Protection, Animal Justice Project, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. We will acknowledge your complaint within 30 days, investigate without undue delay and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Last updated: 30 September 2026
sign up to our newsletter
Stay updated on our life-changing campaigns for animals, investigations, policy change and action alerts!
Oops! Something went wrong while submitting the form.
how Can you Help today?
Help us ensure that our campaigns reach as many people as possible.
.png)