Privacy Notice

Last updated: 31 August 2026

1. Who we are

IPP Committee in Action is an international civil-society movement campaigning for the complete retrospective abolition of the Imprisonment for Public Protection and Detention for Public Protection sentences. This Privacy Notice explains how we collect, use, store and protect personal information when you visit ippcommitteeinaction.com, subscribe for updates or contact us. For the personal information covered by this notice, IPP Committee in Action is the data controller.

You can contact us about privacy or data-protection matters at:

ippcommitteeinaction@yahoo.com

2. Information we may collect

Depending on how you interact with us, we may collect:

  • your name and email address;

  • information you provide when contacting us;

  • your communication preferences;

  • correspondence between you and IPP Committee in Action;

  • technical information including your IP address, browser, device and website activity;

  • information supplied through our subscription forms;

  • limited information provided to us by an external fundraising platform following a donation; and

  • any other personal information you choose to provide.

Please do not send prison records, OASys assessments, medical records, pre-sentence reports, legal documents or other sensitive case material through our general email address unless we have specifically requested it and agreed a suitable method of transfer.

3. How we use personal information

We may use personal information to:

  • respond to enquiries and correspondence;

  • send campaign news, legal developments and People’s Inquiry updates where a person has subscribed;

  • administer and improve the website;

  • understand how visitors use the website;

  • protect the website and its users from misuse or security threats;

  • manage supporter and donation-related communications;

  • maintain appropriate organisational records; and

  • comply with legal, regulatory or safeguarding obligations.

We do not sell personal information.

4. Our lawful bases

We process personal information only where we have a lawful basis.

Consent

We rely on consent when:

  • you subscribe to receive updates;

  • you accept optional cookies; or

  • we ask for permission to use information for a clearly explained purpose.

You may withdraw your consent at any time. Every campaign email should include an unsubscribe facility.

Legitimate interests

We may rely on legitimate interests where processing is reasonably necessary to:

  • respond to a communication you have initiated;

  • operate and protect our website;

  • administer the campaign;

  • maintain accurate organisational records; or

  • advance our lawful civil-society, research and public-accountability work.

Before relying on legitimate interests, we consider the effect upon the individual’s rights, freedoms and reasonable expectations.

Legal obligation

We may process or disclose information where this is necessary to comply with a legal obligation.

5. Sensitive information

Because of the nature of IPP, people contacting us may disclose health information, criminal-offence information or other particularly sensitive personal information. We minimise the collection of such information and restrict access to people who genuinely need it. If we need to retain or use sensitive information beyond responding or directing a person to the appropriate route, we will identify and document the additional legal condition required under UK data-protection law. Where consent is the appropriate condition, we will obtain specific and informed consent. Sending sensitive information to our general email address does not constitute a formal submission to the People’s Inquiry and does not authorise publication.

6. The People’s Inquiry

The People’s Inquiry into the IPP Sentence will have a separate Evidence Privacy Notice, consent process, safeguarding procedure and secure evidence route.

These will explain:

  • what evidence will be collected;

  • the purposes for which it will be used;

  • who may access it;

  • whether information may be quoted or published;

  • how anonymity and confidentiality will operate;

  • how long evidence will be retained; and

  • how consent may be withdrawn.

No general enquiry or previous correspondence will automatically be treated as evidence for the Inquiry.

7. Mailing-list subscriptions

When you subscribe for updates, we use your email address to send the information described beside the subscription form. Subscription is voluntary and is not a condition of contacting, supporting or donating to the campaign. You can unsubscribe at any time by using the link in an email or contacting us directly. We may retain a minimal suppression record after an unsubscribe request to ensure that the address is not added to the mailing list again unintentionally.

8. Cookies and website information

Our website is hosted by Squarespace. Squarespace and connected services may process technical information and place cookies necessary to operate, secure and analyse the website. Non-essential cookies will be addressed through our cookie-consent arrangements. Further information will be provided in our Cookie Policy.

9. Donations and external websites

Our website may link to external fundraising, social-media, government, legal, news or support websites. When you use an external service, that organisation is responsible for its own processing under its privacy notice. Where donations are handled by an external fundraising provider, IPP Committee in Action does not receive or store your complete payment-card or bank details. We are not responsible for the privacy practices of external websites.

10. Who we may share information with

Where necessary and proportionate, personal information may be shared with:

  • authorised members of IPP Committee in Action;

  • website, email and technology providers, including Squarespace;

  • professional advisers subject to appropriate confidentiality;

  • safeguarding or emergency services where there is a lawful and necessary reason;

  • regulators, courts or public authorities where disclosure is legally required; and

  • another organisation where you have specifically agreed to the sharing.

We do not share mailing-list information with third parties for their own marketing.

11. International transfers

Some technology providers may process information outside the United Kingdom. Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is used, such as an adequacy regulation or approved contractual protections.

12. How long we retain information

We retain personal information only for as long as reasonably necessary.

Normally:

  • mailing-list information is retained until you unsubscribe;

  • general enquiries are retained for up to 24 months after the matter is closed;

  • safeguarding, complaints or legal records may be retained for longer where necessary;

  • donation and financial records are retained for any legally required period; and

  • technical website information is retained according to our website settings and the applicable provider’s retention arrangements.

Information may be deleted sooner where it is no longer required. Formal Inquiry evidence will be governed by a separate retention policy.

13. Security

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Access is limited according to role and genuine need. However, no email or internet-based service can be guaranteed to be completely secure.

14. Your rights

Depending on the circumstances and lawful basis, you may have the right to:

  • request access to your personal information;

  • ask us to correct inaccurate or incomplete information;

  • request deletion of information;

  • request restriction of processing;

  • object to processing;

  • receive certain information in a portable format;

  • withdraw consent at any time; and

  • complain about how your information has been handled.

You have an absolute right to object to your personal information being used for direct marketing.

To exercise a right, contact ippcommitteeinaction@yahoo.com. We may need to verify your identity before acting upon a request.

You may also complain to the Information Commissioner’s Office:

Website: ico.org.uk
Telephone: 0303 123 1113

15. Children and young people

This website is intended principally for adults. A person under 18 should speak with a trusted adult before providing personal information.

We will take additional care where information concerns a child or young person.

16. Automated decision-making

We do not use personal information collected through this website to make decisions based solely upon automated processing that produce legal or similarly significant effects.

17. Changes to this notice

We may update this Privacy Notice when our work, website or legal responsibilities change. The current version and its update date will always be published on this page.