Privacy policy
Privacy Policy
Lotus Justice & Support Centre CIC respects your right to privacy and is committed to protecting the personal data you provide to us.
Last updated: October 2026
Who we are
Data controller
Lotus Justice & Support Centre CIC is the data controller responsible for your personal data. We are a Community Interest Company registered in England and Wales.
Address: Lotus Justice & Support Centre CIC, London, United Kingdom.
Privacy contact email: contact@lotusjusticesupport.uk
What data we collect
Categories of data
Identity data
Name, surname, date of birth, gender.
Contact data
Email address, phone number, postal address.
Situation data
Information provided through referral forms, including data about abuse, housing and safety.
Technical data
IP address, browser type, pages visited — collected via analytics cookies (with your consent).
Donation data
Email address and donation amount, processed via Stripe. We do not store card details.
Volunteering data
Information provided through the volunteering form: motivation, availability, skills.
How we use your data
Purposes and legal bases
Providing support services
We process referral form data to provide you with appropriate support. Legal basis: vital interests (Art. 9(2)(c) GDPR) or explicit consent.
Communication
We use contact data to respond to your enquiries. Legal basis: performance of a contract or legitimate interests.
Processing donations
We process donation data to confirm transactions and issue confirmations. Legal basis: performance of a contract.
Improving the website
We use anonymised technical data to understand how the site is used. Legal basis: consent (analytics cookies).
Legal obligations
We may process your data to comply with legal obligations, including mandatory reporting in cases of imminent risk. Legal basis: legal obligation.
Data storage and security
Where and how we store data
Your data is stored on secure servers located within the European Economic Area (EEA). We do not transfer data outside the EEA without adequate safeguards.
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction, including encryption in transit (HTTPS/TLS) and need-to-know access controls.
Payments are processed by Stripe Inc., which complies with the PCI DSS standard. We never store full card details on our servers.
Retention periods
How long we keep data
Referral form data
7 years from last interaction, in accordance with our data retention policy.
Donation data
7 years, in accordance with UK tax and accounting requirements.
Contact data (general enquiries)
2 years from last communication.
Technical / analytics data
26 months (in accordance with Google Analytics 4 settings).
Volunteering data
3 years from application or end of volunteering period.
Sharing data with third parties
Who we share data with
Stripe Inc.
Payment processor for donations. Card data is handled exclusively by Stripe.
Google LLC (Analytics)
Anonymised analytics data, only with your consent via the cookie banner.
Public authorities
We may disclose data to competent authorities if there is an imminent risk to life or a legal reporting obligation.
IT service providers
Hosting and infrastructure providers acting as data processors under data processing agreements (DPAs).
We never sell, rent or trade your personal data.
Cookies
Cookie policy
We use essential cookies (necessary for the site to function) and optional analytics cookies (Google Analytics 4). Analytics cookies are only activated with your explicit consent, given through the cookie banner.
You can withdraw consent at any time via the cookie banner or through your browser settings.
Read our full Cookies Policy →Your rights
GDPR / UK GDPR rights
Right of access
You can request a copy of the personal data we hold about you.
Right to rectification
You can request correction of inaccurate or incomplete data.
Right to erasure
You can request deletion of your data, subject to legal retention obligations.
Right to restriction
You can request restriction of processing of your data in certain circumstances.
Right to portability
You can request transfer of your data in a structured, machine-readable format.
Right to object
You can object to processing based on legitimate interests or for direct marketing purposes.
Right to complain
You can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Privacy contact
Exercise your rights
For any request regarding your personal data or to exercise your UK GDPR rights, please contact us. We will respond within 30 calendar days.