Privacy Policy.

Last updated: 22 July 2026

Our Voice is the controller of the personal information described in this policy. We only collect information that is necessary to respond to enquiries, manage supporter communication, protect our staff and contributors, and operate the website safely.

Contact enquiries and staff safety

Before a contact message can be sent, we email a one-time code to the address entered in the form. Entering that code confirms that the person sending the message can receive email at that address. It does not prove their identity. The code expires after ten minutes.

Until the code is accepted, the message remains in your browser and is not delivered to our contact inbox. Our server briefly processes the form to create a signed verification challenge. The challenge contains protected fingerprints of the form details rather than the readable message or email address, and expires after ten minutes.

When a verified message is sent, we collect your name, verified email address, enquiry type, message, submission time, public IP address, and an approximate city, region, postcode, and country derived from that IP address by our hosting provider. IP-based location is not a precise physical location and may be inaccurate, particularly when a VPN or mobile network is used.

We use this information to reply to genuine enquiries and to deter, prevent, detect, and investigate abusive or threatening communications. This helps us protect the safety and wellbeing of staff and contributors and, where appropriate, preserve evidence of an incident.

Our lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR: responding to enquiries, maintaining the security of our communications, and protecting staff and contributors from abuse. We have balanced those interests against the rights and freedoms of people using the form. We do not request browser GPS data, a street address, or precise coordinates.

Who processes the information

The website is hosted by Vercel, which supplies the IP and approximate location data to our server. The verification code and the final verified contact message are delivered using Resend, and the final message is then stored by our email provider. These providers process information on our behalf. We do not sell contact-form information.

How long we keep it

Verified contact messages, including the email-verification status, associated IP address, and approximate location, are normally kept for up to 12 months and then deleted when no longer needed. If a message is connected with a specific threat, pattern of abuse, legal dispute, or report to law enforcement, relevant records may be kept securely for longer, but only for as long as reasonably necessary for that incident.

Analytics

We use Vercel Analytics and Plausible Analytics to understand general website use. These services are separate from the contact-form safety record. Plausible is configured without personal tracking cookies.

Contributor information

Contributor information, interview material, and production correspondence are handled with care and are not shared publicly without consent.

Your data-protection rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict, or object to our use of your personal information. These rights are not absolute; for example, we may need to retain evidence connected with a safety incident or legal claim. To ask a question or exercise a right, use our contact form.

You can also complain to the UK Information Commissioner's Office through the ICO complaints service.