Privacy Policy

Last updated: 23 May 2018

Lawyers for Justice in Libya (“we”, “our”, “us” or “LFJL”) are committed to protecting and respecting your privacy. We are a registered charity (no. 1152068) and a company limited by guarantee (no. 07741132) established in England, the United Kingdom with a registered office at 8 Blackstock Mews, London, N4 2BT. For the purpose of the General Data Protection Regulation (the “GDPR”), we are the data controller.

This policy sets out the basis on which we will process personal data and use information we collect from you, or that you provide to us, in connection with your use of our website at www.libyanjustice.org (the “Website”). Please read this policy carefully so that you understand your rights in relation to your personal data, and how we will collect, use and process your personal data. If you do not agree with this policy in general or any part of it, you should not access the Website.

  1.  What types of information do we collect and how do we use it?
    1. Information you give us. You may provide information by:
      • contacting us via our Website or email, telephone, instant chat, social media or otherwise;
      • signing up for our newsletters; or
      • making an online donation.
    2. Information we collect about you. We automatically collect certain data from you when you access the Website, including IP address or other unique device identifiers and information regarding your use of our newsletter such as page views and subscriber status.
    3. As it is in our legitimate interests to be responsive to you and to ensure the proper functioning of our organisation, we will use your information:
      • to communicate with you;
      • to provide you with the advice, services or information you have asked for;
      • for our own internal administrative purposes and to keep a record of your relationship with us;
      • to administer your donation or support your fundraising, including processing Gift Aid;
      • to provide you with information about us, our fundraising campaigns, our activities, and any other information, products or services that we provide or provide access to;
      • to improve our service by contacting you for feedback; or
      • to comply with applicable laws and regulations, and requests from statutory agencies.
  2. Technical usage information
    1. When you visit the Website, we automatically collect the information sent to us by your computer, mobile phone, or other access device. This information includes:
      • your IP address;
      • device information including, but not limited to, identifier, name, and type of operating system; and
      • Standard web information, such as your browser type and the pages you access on our Website.
    2. As it is in our legitimate interests to process your data to provide effective services and useful content to you we collect this information in order to:
      • personalise our Website to ensure content from the Website is presented in the most effective manner for you and your device;
      • monitor and analyse trends, usage and activity in connection with our Website to improve the Website;
      • administer the Website, and for internal operations, in order to conduct troubleshooting, data analysis, testing, research, statistical and survey analysis; or
      • keep the Website safe and secure.
  3. Do we use cookies?
    For information on how cookies are used on this website, please see our Cookie policy.
  4. How do we share your personal data?
    1. We will not disclose your personal information to anyone outside of LFJL except in the circumstances set out in this policy.
    2. We may allow our subcontractors or other providers acting on our behalf including:
      • website hosts;
      • email client providers;
      • newsletter providers; or
      • payment providers

      to access and use your personal information for the purposes for which you have provided it to us. If we do this, we will not give those individuals/organisations any rights to use your personal information (or to contact you) except in accordance with our instructions and this policy.

      Please see the table below for a list of our subcontractors:

      SubcontractorFunction
      ByteHouse, a division of Tristar Web Solutions Ltd, a company registered in the United Kingdom under registration number 04092696 with registered office at Biopark (Enterprise & Innovation Centre), Broadwater Road, Welwyn Garden City, Hertfordshire, AL7 3AX, United Kingdom (“ByteHouse”).ByteHouse hosts the LFJL’s human rights archive.
      Google Inc., a Delaware corporation with offices at 1600 Amphitheatre Parkway Mountain View, California 94043, United States (“Google”).Google hosts LFJL e-mail client and ancillary services such as Google Calendar and Google Drive.
      Dropbox, Inc., an American company with offices at 333 Brannan Street, San Francisco, CA 94107, USA (“Dropbox”)Dropbox hosts LFJL files.
      The Rocket Science Group LLC, trading as MailChimp, is a limited liability company registered in the State of Georgia with offices at 675 Ponce de Leon, Avenue NE, Suite 5000, Atlanta, GA 30308, United States (“MailChimp”)MailChimp hosts LFJL’s mailing lists and distributes LFJL’s newsletters.
      Adept Design (Norfolk) Ltd, trading as Adept, registered in England under company number 4666161 at 29 Morgan Way, Bowthorpe Industrial Estate, Norwich, Norfolk, NR5 9JJ, England (“Adept”)Adept manages LFJL’s website.
      Charities Aid Foundation, a registered charity under registration number 268369 at 25 Kings Hill Avenue, Kings Hill, West Malling, Kent, ME19 4TA, United Kingdom (“CAF”)CAF processes LFJL’s online donations.
    3. The only times we will pass your details to anyone else would be:
      • to enable payment providers to complete transactions;
      • to organisations within the payment card industry in order to prevent online fraud;
      • where we are required to do so by any law or court order;
      • where you have given us consent to do so; or
      • where LFJL or substantially all of its assets are acquired by a third party, in which case personal data held by us will be one of the transferred assets.
  5. Where do we store your personal data?
    The information that we collect from you will be transferred to, and stored at/processed in the United Kingdom. Your personal data is also processed by staff operating outside the EEA who work for us or for one of our providers. Such staff are engaged in the implementation and support of LFJL project activities. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this policy.
  6. The security of your personal data
    1. The Website has security measures in place to protect the loss, misuse and alteration of the information under our control.
    2. Unfortunately, the transmission of information via the internet or email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your information transmitted through the Website or over email; any transmission is at your own risk. Once we have received your information, we will take appropriate technical and organisational measures to safeguard your personal data against loss, theft and unauthorised use, access or modification.
    3. We will, from time to time, host links to and from the websites of our affiliates or third parties (including social media sites). If you follow a link to any of these websites, these websites will have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to those websites.
  7. How long do we store your personal data?
    We keep your information for as long as is necessary and is permitted or required by law. For example, we keep financial data, including information relating to donations, gift aid, invoices and receipts, for at least 6 years, in line with the requirements of the Charities Commission.
  8. Your rights
    1. You have the right to ask us to access the personal data we hold about you and be provided with certain information about how we use your personal data and with whom we share it. You also have the right to ask us to correct your personal data where it is inaccurate or incomplete.
    2. Where you request access to personal data we hold about you, we will within one month of receipt of the request. However, we may take a further two months where the request is large or complex. We may charge a reasonable fee for the administrative costs of complying with the request. We may request additional information to confirm your identification. If your request is manifestly unfounded or excessive, we may refuse to comply.
    3. In certain circumstances, you have the right to ask us to delete the personal data we hold about you:
      • where you believe that it is no longer necessary for us to hold your personal data;
      • where we are processing your personal data on the basis of legitimate interests and you object to such processing and we cannot demonstrate an overriding legitimate ground for the processing; and
      • where you believe the personal data we hold about you is being unlawfully processed by us.
    4. To exercise any of these rights above, please contact our Data Protection Officer at data@libyanjustice.org. In addition, you have the right to complain to the Information Commissioner’s Office or other applicable data protection supervisory authority.
    5. Please note that these rights are limited, for example, where fulfilling your request would adversely affect other individuals or intellectual property, where there are overriding public interest reasons or where we are required by law to retain your personal data.
  9. Withdrawal of Consent
    Where you have provided your consent for us to process your personal data, you can withdraw your consent at any time by clicking on this opt-out button.
  10. Complaints
    In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at data@libyanjustice.org and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the Information Commissioner’s Office or the data protection supervisory authority in the EU country in which you live or work where you think we have infringed data protection laws.
  11. Changes
    Any changes we will make to this policy in the future will be posted on this page. Please check back frequently to see any updates or changes to this policy.