Policies

IJM UK Privacy Policy

Effective as of 25th June 2026

We value your privacy and are committed to protecting your data. We only collect data from people for specific purposes and we will not share your personal data with anyone except as set out in this privacy policy.

This privacy policy describes how International Justice Mission UK collects and uses the personal information you provide in person, and on our website forms [www.ijmuk.org]. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.

IJM UK collects and manages your personal data in accordance with the law (including the retained EU law version of the General Data Protection Regulation or “UK GDPR”, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003), and the Data (Use and Access) Act 2025 (DUAA) and your rights as prescribed by these laws.

If you have any queries or complaints about our privacy policy or how your information is handled, please email the IJM UK team at [email protected] or write to: IJM UK, PO Box 78942, London, SE11 9EB

Collection and Use of Personal Information

We may collect information from you for a number of reasons but primarily to provide you with the most useful and relevant information and services from IJM UK, as well as to support our fundraising operations. We do this through collecting both anonymous or aggregate data, and personal information voluntarily provided by you via our website in person (e.g., when you fill in forms, subscribe to our services, (such as publications, sponsorship, or to attend events) and email newsletters.

We may collect the following personal information from you:

• Contact information such as name, email address, mailing address, phone number;
• Billing information such as credit card number, billing address, and if you are a UK taxpayer, further details to submit a Gift Aid application form;
• Confirmation of minimum age via tick box or date of birth (date of birth required if under 16).

We may use this information to:

• Process a donation
• Fulfil your request or order, including financial transactions
• Send you an order or donation confirmation
• Claim Gift Aid from the UK Government
• Send you requested product or service information
• Respond to your service requests
• Send you a newsletter, magazine or other information about our work
• Send you marketing communications and appeals (see further details below)
• Respond to your questions and concerns
• Update our website to better meet the needs of visitors and supporters (see further details below)
• For internal administration and analysis
• For other purposes disclosed to you at the time we collect your information.

We may process your personal data based on our legitimate interests, or where we are contacting you electronically or as otherwise specified in this notice, with your consent.

We may also send you emails or texts about our charitable work and ways to support us under the charitable‑purpose soft opt‑in introduced by the Data (Use and Access) Act 2025 (DUAA). We will only do this where the sole purpose of the message is to further our charitable purposes, where we collected your contact details when you expressed interest in those purposes or offered/provided support, and when we gave you a clear opportunity to opt out at that time. We include an easy opt‑out in every message. We do not rely on this for contact details collected before 5 February 2026 unless we have since collected them again under the new requirements.

We may also collect and process special category personal data or other sensitive information for a specific purpose, including but not limited to your racial or ethnic origin, age, political opinions, religious or spiritual beliefs or your physical or mental health condition. Where such special category data is sought, we will advise the reason for its collection, how it will be processed, stored and other relevant details, including the lawful basis for collecting such data. We may also process special category data and sensitive data obtained from publicly available sources or authorised third parties in connection with our work, e.g., to provide survivor support services.

Fundraising

We may process your personal data to support our fundraising efforts – this is based on our legitimate interests or where we are contacting you electronically, with your consent or where you have been softly opted-in. We may:

• process donations you give us, or support your fundraising for us, including Gift Aid;
• suggest suitable amounts for one-off online donations based on analysis of publicly available data related to your location, browser type and device, and website activity and donations history. This information is only ever used anonymously and in ways that cannot identify any individual
• ask for financial support and non-financial support.
• use publicly available information to research our supporter base so that we can be well informed when we meet you, prioritise relationship-based stewardship and reduce irrelevant appeals. We may also use your data for profiling, a process which uses a trusted third-party partner to screen your name and address against databases built up from publicly available information and licensed sources. We share only the minimum information needed to match records (e.g. name, postal address, your unique database ID). We do not obtain or use intrusive financial account data, and we always apply human review. We exclude children, vulnerable individuals and anyone who has objected to profiling or direct marketing.

We may also share your information with our contractors working on our behalf to process donations and send communications (listed below):

• Fundraise Up - Provide online donation services. Please click here or contact us if you would like to learn more about our use of Fundraise Up.
• Marketing Cloud - Provides the email platform to email supporters (with your consent).
• Give Clarity - provides support and maintenance for our supporter database.
• Forward Action – provides support with setting up and running social media (e.g., Meta) advertising and assisting development of online supporter surveys via Typeform (a survey software) (see further below under social media marketing).
• Printing and postal marketing suppliers – providing services to support marketing and advertising campaigns.
• Prospecting for Gold – provides profiling services under contract and processes your data only on our instructions to generate high-level indicators for stewardship planning.

For more information about our fundraising practices and our obligations to our supporters, please read our FAQs and our Fundraising Promise.

Information we collect on the Website and your interaction with our Website

We value your privacy and are committed to being transparent about how we collect, use, and safeguard your data when you interact with our website (IJMUK.org).

Information We Collect

1. Usage Data: 
   We collect information about how you use our site, such as pages visited, time spent on pages, and interactions with features.
2. Cookies and Tracking Technologies: 
   Cookies are small text files stored on your device for record-keeping purposes. They help us track your preferences and enhance your browsing experience.

Other data may be collected automatically when you visit our website, such as IP addresses (which tell us, for example, where people are logging on) but not limited to traffic data, location data, web logs and other communications data. This information is collected in aggregate form and is anonymous.

This data helps us to update our website to better meet the needs of visitors and supporters. The cookies collect information in a way that does not directly identify you. Please see the section on cookies below for more information.

How We Use Your Information

1. Website Optimisation: 
   We use tools like VWO to test and improve website features. This includes analysing user behaviour through metrics such as heatmaps and session replays to enhance your browsing experience and provide the information or services you’re seeking.
2. Analytics: 
   We use Google Analytics and other third-party providers, including Fundraise Up, Meta and VWO, to understand how users interact with our website content. These tools use cookies and tracking technologies to remember your activity, measure engagement, and help us improve our content and fundraising and marketing.

• To learn more about Google Analytics, visit their information page.
• If you wish to opt out, visit the Google Analytics Opt-Out page.

3. Data Usage:

Website usage data, captured via first- and third-party cookies, helps us:

• Optimise site content and navigation.
• Understand popular content and user preferences.
• Tailor advertising to better meet user interests.

For more details on how VWO collects and uses data, visit the VWO Privacy Policy.

Children

IJM recognises that the graphic nature of our work may not be suitable for young children. As such, we are committed to ensuring that individuals under the age of 16 do not receive content containing graphic details, or financial requests. We may request your date of birth at times to ensure that we uphold this standard. If an individual under the age of 16 provides their data to IJM UK, they will receive age-appropriate communications and we will hold this information on file until that person turns 16, at which point they will begin to receive our standard communications.

Marketing - Opt-In/Opt-Out/Soft Opt-In/ Update Your Preferences

We might use your data for marketing purposes (including personal and social media) for reasons noted above.

Website and social media advertising

You may also see our advertising online and on some social media sites if you have supported us before, or if your use of these channels suggests that you would find our campaigns relevant.

We use cookies to ensure that any investments we make in online advertising are as cost-effective as possible, by tracking how well individual adverts perform. These cookies are issued by third party service providers that we have assessed as secure.

If you do not wish to see these adverts, you can manage the privacy settings on your social media accounts, including Facebook, Instagram, LinkedIn,  X (Twitter) and TikTok.

Hashed lists

We may send a list of ‘hashed’ email addresses to online social media platforms for the purpose of creating a group of people with similar characteristics (such as a Facebook lookalike or custom audience), for the purpose of targeted advertising for our fundraising or campaigning activities. 

For targeted advertising, we may also upload ‘hashed’ files into social media platforms to use as an exclusion list for our ad campaigns, this helps us target new people for IJM UK, rather than targeting people who have already engaged with us. This is both cost effective and helps us grow the movement.

‘Hashing’ turns these email addresses into an unreadable code for the purposes of security and privacy during data transfer. The hashed data that we share with social media platforms is deleted after a short period of time and not used for any other purpose.

We may use social media platform advertising tools to build audiences matching particular characteristics to serve our advertising campaigns. For example, we might target people who have shown an interest in standing against slavery, violence and trafficking. This targeting is based on pages and/or posts people have previously engaged with on the platform. These tools allow us to inspire new people to engage with our work and help us spread awareness about the problem of slavery, violence and trafficking and how we can end it together.

You have the right to ask us at any time not to use your personal data for direct marketing purposes sent by email, post or SMS.

You can also unsubscribe online by visiting www.ijmuk.org/unsubscribe, by emailing us at [email protected] or writing to us via the physical address above.

Please also contact us if you have any questions on how we use social media or would prefer us to exclude you from social media marketing activities.

If you do not wish to contact us directly then you can also opt out via the Fundraising Preference Service who will then notify us of your request. https://public.fundraisingpreference.org.uk/

Cookies and Other Tracking Technologies

A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. We use cookies on this site, for example, to keep track of your preferences and profile information. Cookies are also used to collect general usage and volume statistical information that does not include personal information. More specifically we use:

• Strictly necessary cookies - required for the operation of our website.
• Preference or Functionality cookies - used to recognise you when you return to the website and record that you are a user of our website, or whether your web browser has Javascript enabled.
• Statistics - These are often called analytical/performance cookies. Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
• Marketing cookies - Marketing cookies are used to track visitors across websites. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

We use both session ID cookies and persistent cookies. A session ID cookie expires when you close your browser. Although session cookies are established, they are not capturing any behavioural or personal information, only information that is helpful to the user experience, such as whether the user's browser has JavaScript capability. A persistent cookie remains on your hard drive for an extended period of time. Persistent cookies are being used to switch one-time messages on and off and to record form completion. You can remove persistent cookies by following directions provided in your internet browser’s “help” file.

Analytics / Log Files

As is true of most websites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp and clickstream data.

We use this information, which does not identify individual users, to analyse trends, to administer the site, to track users’ movements around the site, and to gather demographic information about our user base as a whole. IJM UK uses Google Analytics to compile statistics including website conversation rates on how our website is being used, which can help us to improve our website. We do not link this automatically collected data to personal information.

Third Party Cookies

Fundraise Up: Cookies are used to provide key functionality and also to provide and improve anti-fraud protections. For more details click here: Fundraise Up Cookies.

Google Analytics: we use Google Analytics to measure interactions on our website. This data is unidentifiable aggregated data only and does not include personal identifiable information. For more details click here: Google Analytics Cookies.

Facebook Tracking Pixels: we use Facebook pixels to track visitors to our website from Facebook and for remarketing purposes. This data is unidentifiable aggregated data only and does not include personal identifiable information. For more details click here: Facebook Pixels.

If you reject cookies, you may still use our site, but your ability to use some areas of our site, such as forms or surveys, will be limited.

Links to Other Websites

Our site includes links to other websites whose privacy practices may differ from those of International Justice Mission UK. If you submit personal information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.

Third Party Social Media

Our website includes social media features, such as Facebook and Twitter widgets and the ‘Share this’ button. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the company providing it.

Information Sharing

We do not sell your personal information to third parties for any purpose, ever. We will share your personal information with third parties only in the ways that are described in this privacy policy.

We may provide your personal information to companies that provide services to help us with our business activities such as shipping your order or offering customer service. These companies are authorised to use your personal information only as necessary to provide these services to us. From time to time, IJM UK does partner with other external organisations on a particular campaign or project, where information may be shared (for example petitions). In such instances, IJM UK will seek your explicit consent to share your data with the third party, but the data shared will be limited to that which was collected from the stated activity and not obtained elsewhere. In addition, we may disclose your personal information to our international Partner Offices, so that they may contact users located in their country.

IJM UK is an affiliate of IJM Global which works in a number of countries outside the European Economic Area (“EEA”). The data we collect from you may be transferred to or stored in a destination outside the EEA. It may also be processed by staff operating outside the EEA who work for us, or one of our suppliers. IJM UK holds an International Data Transfer agreement in place with IJM Global and we conduct transfer risk assessments when required. IJM UK monitor information security compliance and have written contracts which obligate our partners to process your personal information only on our instructions and in accordance with applicable data protection and privacy laws. IJM UK will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this privacy policy.

We may also disclose your personal information:

• As required by law or regulatory body such as to comply with a legal request from a law enforcement agency or for HMRC as part of a Gift Aid audit.
• When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request,
• To any other third party with your prior consent to do so, for example, our partners in an advocacy campaign.

We seek to ensure the data we hold about you is kept up to date. Should you spot any errors, or your personal details change, please update your information by emailing us at [email protected] or writing to us via the physical address above.

Youthscape: The Freedom Challenge

IJM UK and Youthscape are joint controllers for the data provided by subjects purchasing The Freedom Challenge resource on the Youthscape website, and data subjects requesting access to the resource via IJM’s website. IJM UK and Youthscape will share information in a secure format. IJM UK will process, share and store this information for the usual purposes including but not limited to marketing, campaign analysis and service provision.

Data Retention

We will retain your information for as long as your relationship with IJM UK is active, is needed to provide you services, or in-line with legal and regulatory obligations, or to resolve disputes and enforce our agreements. We will not retain your personal information for longer than is needed to support these requirements.

If you wish to cancel your relationship with IJM UK, or request we no longer use your information to provide you services, please contact us using the contact information below.

Personal information will be deleted in a secure manner when no longer required to fulfil these purposes.

We require processors to delete or return personal data once services are completed as outlined in our agreement with them.

Security

The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our website, you can contact us at [email protected]. When you enter sensitive information (such as a credit card number) on our order forms, we encrypt the transmission of that information using secure socket layer technology (SSL).

We require our processors to implement appropriate technical and organisational measures and to notify us of personal data breaches without undue delay.

Transaction Security

The personal information collected when you make a contribution or purchase items by credit card is kept for the purposes of tracking your order and to provide a receipt of the transaction. This information is stored on an encrypted, secure server managed by a third-party payment processor.

Your rights

You have the right to request access to the personal data we hold about you. When responding to a Data Subject Access Request (DSAR), we are required to carry out a search that is reasonable and proportionate in the circumstances. We will acknowledge your request within 30 days.

Please write to the Data Protection Officer at the [email protected]. and include the following information:

• Your full name and contact details
• Your relationship with the organisation (donor, supporter, former/ current member of staff, trustee or other volunteer)
• Any other relevant information - e.g. timescales involved

You have the right to raise any concerns about how we use your personal data directly with us. We are required to maintain an accessible internal complaints process and will maintain a secure record of data complaints, investigations, outcomes and remedial actions taken. You should submit your data protection complaint to us first before it can be escalated to the Information Commissioner’s Office (ICO).

You can contact us by emailing [email protected] in writing to IJM UK, PO Box 78942, London SE11 9EB or by phoning 02034059080. Complaints should be directed to the Data Protection Officer.

We will acknowledge your complaint within the required timeframe of 30 days and take appropriate steps to investigate and respond.

You also have the right to lodge a complaint directly with the Information Commissioner’s Office at any time and to lodge a claim before a competent court, irrespective of whether you have lodged a complaint with IM UK https://ico.org.uk/concerns

You have the right to object at any time to profiling for fundraising and to direct marketing. Where we rely on consent, you can withdraw it at any time; where we rely on legitimate interests, we will stop processing for these purposes if you object. You can contact us at [email protected].

Changes to IJM UK’s privacy policy

We may update this policy to reflect changes to our information practices and to keep it up-to-date and relevant. If we make any material changes, we will notify you by email (sent to the latest email address we have on file for you) or by means of a notice on this site prior to the change becoming effective.

Please make sure you check this page regularly for the latest information on our privacy practices and to see what has changed.

Contact Information

IJM UK PO Box 78942, London, SE11 9EB

T: 0203 405 9080

E: [email protected]

Personal Information Notice

Effective as of 2 October 2020

To Persons Suspected of Being Involved in or Associated with Activities Proscribed by Applicable Laws Directed Towards Victims/Survivors

IJM’s mission includes helping victims/survivors of violence and oppression pursue legal claims and seek redress and seek protection. The purpose of this document is to describe how International Justice Mission, its branch offices and certain affiliated entities of International Justice Mission (“IJM”, “we” or “us”) processes personal information relating to persons who pose or who have posed a threat to person(s) who IJM supports and are suspected of being involved in or associated with activities proscribed by applicable laws directed towards these victims/survivors (“you” or “your”). This includes information that we receive from the victim/offender or their caregiver(s), the police, courts, public authorities in charge of preventing crime or supporting victims, publicly available sources (such as social media), and other persons or entities that may have information about you.

1. What information do we receive about you?

We only collect as much information about you as needed to achieve the purposes set out below and as permitted by applicable law and in support of local authorities. We may collect your name, gender, contact information, country of residence, and information about the offenses that you allegedly committed against the victim/survivor and other relevant information related to our support of victims and authorities. Depending on the victim/survivor’s case and where relevant, we may in some instances also receive information about sensitive data including special categories of your personal data in compliance with Article 14(1)(d) of the General Data Protection Regulations (“sensitive information”).

We will keep your personal information secure and will only disclose your information as necessary for the purposes mentioned below and in compliance with applicable law.

2. How we use your information?

We will only collect and use the information about you for the following purposes:

• Where necessary to fulfil the victim’s legitimate interests, as applicable:
  • to help the victim escape a situation in which he or she may be the victim of a crime;
• to help the victim/survivor establish and exercise legal claims against the persons alleged to have committed a crime against him or her;
• to aid law enforcement and, where appropriate, support prosecution authorities in their pursuit of persons that are alleged to have committed a crime against the victim/survivor in order to support victims;
• if, applicable, to help the victim/survivor (re)integrate into society and enrol him or her in dedicated support programmes;
• to manage the victim/survivor’s case file; and
• to assess the victim/survivor’s rehabilitation progress.
• To comply with the laws that apply to IJM UK.
• For our legitimate interests and the interests of other victims of crime and, where applicable, for statistical or scientific research purposes and in accordance with safeguards required by law, in particular to create anonymized data, including statistics, which we will use to issue reports about our work and create and disclose stories of rescue on our website and social media and at events.
• For the protection of the victim/survivor’s vital interests, if the victim/survivor is unable to give his or her consent and where his or her life or well-being is threatened.
• As necessary to establish, exercise or defend legal claims or be responsive to government inquiries and/or requests.
• As necessary for reasons of substantial public interest in accordance with applicable law.

While we think that we have compelling legitimate grounds to process your information for the purposes mentioned above, applicable laws may grant you the right to object to our processing of your information. You may exercise this right by contacting us at the details we provide below.

If we process your sensitive information, we do so:

We also process information in the context of the work that we conduct with, and as applicable under the control of, local law enforcement and other relevant public authorities and agencies.

3. What are your rights?

In accordance with applicable law, you have certain rights, subject to applicable exemptions, with respect to your information, such as a right of access, rectification, restriction, erasure, opposition, and portability. To exercise those rights, please contact us at the details we provide below. If you are not satisfied with our response or have concerns about how we use your information, you can contact us at: [email protected]. You may have a right to lodge a complaint with the Supervisory Authority for data protection in your country.

4. With whom do we share your information?

To the extent necessary to achieve the purposes mentioned in Section 2 above, your information may be shared with other IJM entities, including in the U.S., where different levels of privacy protection apply. We put in place contractual safeguards (standard contractual clauses) to guarantee an appropriate level of protection as required by applicable law. For more information or a copy of these contracts, please contact us at the details we provide below. Certain personal information may also be shared with IJM’s service providers, with the local police, courts or tribunals and other public authorities, lawyers, partner or government authorities for the benefit of victims.

5. How long do you keep my information?

We will only keep your personal information as long as needed to for the purposes mentioned above in Section 2. We may be required by law to keep your information for longer. After this period of time, we will either delete your personal information or anonymize it.

We keep your information confidential and secure as required by law.

6. How can you contact us?

IJM UK PO Box 78942, London, SE11 9EB

T: 0203 405 9080

E: [email protected]

Safer Recruitment

Effective as of 22 June 2023

International Justice Mission is committed to maintaining the highest possible standards of integrity, accountability and openness as an organisation. All IJM staff and volunteers are obliged to conduct themselves in keeping with these high standards and, as such, are required to comply with our safer recruitment practices and suite of safeguarding policies.

The IJM UK Executive Team will ensure all workers are appointed, trained, supported and supervised in accordance with government guidance on safe recruitment. This includes ensuring that:

• A written job description and person specification is provided for all posts
• Full applications, including a cover letter, statement of faith and curriculum vitae are submitted by applicants
• Short listed candidates are interviewed
• Safeguarding is discussed at interview
• Written references are obtained and followed up on where appropriate
• A criminal record self-declaration form is completed and signed; follow up takes place where necessary
• A disclosure and barring check (DBS) is completed where appropriate (compliance with Code of Practice concerning fair treatment of applicants and handling of information will be adhered to)*
• Qualifications where relevant are verified
• Appropriate onboarding and training is provided
• Post holders complete probationary periods
• Post holders are given copies of IJM’s safeguarding policy and made aware of reporting procedures.

*All staff and volunteers may be asked to complete a basic DBS check whilst some specific roles may require an enhanced DBS check. Where an enhanced DBS is required, it will normally be included in the job description.

Please email [email protected] for a copy of the relevant Safeguarding, conduct and whistleblowing policies