1. About this Policy


1.1         Justice First Ltd collects personal data for a variety of purposes relating to its charitable functions.  It is the duty of the charity’s trustees to ensure that the personal data we hold is appropriate and sufficient for these purposes.


1.2         We may collect, use and store personal data, as described in this Data Protection Policy and as described when we collect data from you.


1.3         We may change this policy from time to time.  The current policy can be obtained from www.justicefirst.org.uk .


1.4         We will always comply with the General Data Protection Regulation (GDPR) when dealing with your personal data. Further details on the GDPR can be found at the website for the Information Commissioner (www.ico.gov.uk). For the purposes of the GDPR, Justice First Ltd will be the “controller” of all personal data we hold about you.


  1. Who are we?


2.1       We are Justice First Ltd]. We can be contacted at Justice First Ltd, 135 Norton Rd, Stockton-on-Tees TS18 2BG Phone:01642 601122.  You can contact us by email using our website www.justicefirst.org.uk .


  1. What information we collect and why.


Type of information Purposes Legal basis of processing
Client name, address, telephone numbers,

numbers, e-mail address(es), identity information, personal data.

Data is collected to support any applications we make on your behalf to government agencies or departments Legitimate interest in support of our clients inline with our charitable registration.
Employee name, address, telephone number, identity details in relation to right to work, DBS report. To be able to fulfil our responsibilities as an employer. Fulfilment of employment contract.  Duties under employer liability insurance arrangements.
Volunteer name, address, telephone number, email address(es) Contacting volunteer. Legitimate interest in support of the charity’s activities.
Trustee name, address, telephone numbers, email address(es), DBS record Contacting trustees and ensuring that they can legitimately act as trustees. Legal requirement.
Donor name, address, email address(es) when available. To provide donors with information about the activities of the charity and to collect Gift Aid where permission has been provided. Legitimate interest in maintaining good relationships with our donors.  Legal requirement in relation to Gift Aid.


  1. How we protect your personal data


4.1         We will not transfer your personal data outside the EU without your consent.


4.2         We have implemented generally accepted standards of technology and physical security to protect personal data from loss, misuse, or unauthorised alteration or destruction.


4.3         If you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.


4.4         We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.


  1. Who else has access to the information you provide us?


5.1         We will never sell your personal data. We will not share your personal data with any third parties without your prior consent (which you are free to withhold) except where we are required to do so by law or as set out in the table above or in paragraphs 5.2 and 5.3 below.


5.2         We may pass your personal data to third parties who are service providers to us for the purposes of completing tasks and providing services to you on our behalf (e.g. to manage payroll services). We do this to fulfil our legitimate interests in operating the charity and for supplying services to our clients. However, we disclose only the personal data that is necessary for the third party to deliver the service and we only use a service that ensures information is kept securely and not to use it for their own purposes. It is possible that third parties may themselves engage others (sub-processors) to process your data. Where this is the case third parties will be required to have contractual arrangements with their sub-processor(s) that ensure your information is kept secure and not used for their own purposes.



5.3         We will also pass on personal data of our clients to government agencies or departments when providing appropriate support.  We will only provide sufficient information in pursuit of our clients’ legitimate interests.  It is the duty of government agencies and departments to ensure that any data is held securely.


  1. How long do we keep your information?


6.1         We will hold personal data on our systems whilst providing support and for as long afterwards as it is in Justice First Ltd’s legitimate interest to do so or for as long as is necessary to comply with our legal obligations.  We will hold data in respect of employees, trustees and volunteers for as long as it is necessary to comply with legal obligations and to fulfil contractual duties in relation to employer liability. We will review personal data every year to establish whether we are still entitled to process it. If we decide that we are not entitled to do so, we will stop processing your personal data except that we will retain your personal data in an archived form to be able to comply with future legal obligations e.g. compliance with tax requirements and exemptions, and the establishment, exercise or defence of legal claims.


  1. Your rights


7.1       You have rights under the GDPR:


(a)        to access your personal data

(b)        to be provided with information about how your personal data is processed

(c)        to have your personal data corrected

(d)        to have your personal data erased in certain circumstances

(e)        to object to or restrict how your personal data is processed

(f)        to have your personal data transferred to yourself or to another organisation in certain circumstances.


7.2         You have the right to take any complaints about how we process your personal data to the Information Commissioner:




0303 123 1113.


Information Commissioner’s Office


Wycliffe House


Water Lane





Cheshire SK9 5AF


For more details, please address any questions, comments and requests regarding our data processing practices to the Trustee who oversees our processing of data Fred Hutchinson at Justice First Ltd, 135 Norton Rd, Stockton-on-Tees TS18 2BG Phone:01642 601122.  You can contact him by email using our website www.justicefirst.org.uk .


  1. Review


This policy will be reviewed on 30 April 2019