Last updated: 27 August 2026
1. Who we are
This website, www.kalayaan.org.uk, is operated by Kalayaan, a charity registered in England and Wales (charity number 1146596) and a company limited by guarantee (company number 7968872). Our registered office is:
13 Hippodrome Place London W11 4SF
Telephone: 020 7243 2942
Email: info@kalayaan.org.uk
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Kalayaan is the “data controller” of personal information collected through this website.
2. What this policy covers
This policy explains how we collect and use personal information through this website only. It applies to visitors browsing the site and to people who contact us, sign a campaign pledge, or donate through links on the site.
It does not cover the information we collect when you use our services, for example when you become a client of our legal advice service.
3. Information we collect through the website
Information you give us. If you contact us through the website or by using the email address published on it, we collect the details you provide, such as your name, contact details, and the content of your message. If you sign one of our campaign pledges, we collect your name, email address, and a record of the pledge you have made, along with any other details the pledge form asks for.
Information collected automatically. When you browse the site, we collect technical information such as your IP address, browser type, device information, approximate location, and the pages you visit. This is collected through cookies and similar technologies — see section 8.
Donations. Our “Donate” button takes you to PayPal, which processes your donation on its own website under its own privacy policy. We do not collect your card or bank details. PayPal provides us with confirmation of your donation, which may include your name, email address, and the amount given, so that we can record and acknowledge it.
A note on sensitive information. This website is not designed to collect “special category” data (such as information about your health or ethnicity). If you need advice, please contact our legal team, who will explain how your information is handled before you share it.
4. How we use your information and our lawful bases
UK GDPR requires us to have a lawful basis for using your personal information. Through this website, we use your information to:
-
respond to your enquiries — on the basis of our legitimate interests in communicating with people who contact us;
-
record and administer campaign pledges — on the basis of our legitimate interests in running our campaigns, and with your consent where we send you campaign updates;
-
send you news and updates by email, where you have signed up — on the basis of your consent, which you can withdraw at any time using the unsubscribe link in any email or by contacting us;
-
record and acknowledge donations — on the basis of our legitimate interests in administering our fundraising, and our legal obligations to keep accounting records;
-
operate, secure, and improve the website — on the basis of our legitimate interests, and your consent where analytics cookies are used.
5. Who we share your information with
We treat your information as confidential and never sell it. We share it only with trusted service providers who help us run the website and our communications — such as our website hosting provider IONOS and analytics provider Google Analytics — all acting on our instructions under contracts that require them to protect your data. Donations are processed by PayPal as described above. We may also disclose information where the law requires it, for example to regulators or law enforcement.
6. International transfers
We store your information in the United Kingdom wherever possible. Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision for the destination country or the UK International Data Transfer Agreement or Addendum.
7. How long we keep your information
We keep personal information only as long as necessary for the purposes described above, after which it is securely deleted or anonymised.
8. Cookies
Cookies are small text files placed on your device when you visit a website. We use essential cookies to make the site work, and, with your consent, analytics cookies to understand how the site is used so we can improve it. You can accept or reject non-essential cookies through our cookie banner, and manage or delete cookies at any time through your browser settings.
9. Your rights
Under UK GDPR you have the right to: request access to a copy of the personal information we hold about you; have inaccurate or incomplete information corrected; have your information erased in certain circumstances; restrict how we use your information in certain circumstances; receive certain information in a machine-readable format (data portability); object to processing based on legitimate interests, and to direct marketing at any time; and withdraw consent at any time where consent is our lawful basis, without affecting processing that took place before withdrawal.
To exercise any of these rights, contact us using the details in section 12. We will respond within one month and may need to verify your identity first.
10. Security
We use appropriate technical and organisational measures to protect the information collected through this website, including secure hosting, encrypted connections (HTTPS), and access controls limiting information to those who need it. If a personal data breach occurs that risks your rights and freedoms, we will report it to the ICO and, where required, inform you.
11. Children and links to other websites
This website is aimed at adults, and we do not knowingly collect personal information from children through it.
The site contains links to other websites, including PayPal and our pages on social media. This policy does not cover those sites, and we encourage you to read their own privacy notices.
12. Contact us and how to complain
If you have any questions about this policy or wish to exercise your rights, please contact our Data Protection Lead:
Kalayaan, 13 Hippodrome Place, London W11 4SF
Email: info@kalayaan.org.uk
Telephone: 020 7243 2942
If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. You also have the right to complain at any time to the Information Commissioner’s Office:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 | www.ico.org.uk
13. Changes to this policy
We keep this policy under regular review and will publish any updates on this page, with the “last updated” date revised accordingly.