Privacy Notice
Last reviewed: 23 August 2026
APEX MEND JUSTICE is the controller of personal information described in this notice. Registration number: 15503585.
Contact: info@AMJustice.org
27 Old Gloucester Street
London
United Kingdom
WC1N 3AX
Information we collect and why
| Activity and information | Purpose | Lawful basis |
|---|---|---|
| Enquiries: name, contact details and message | Respond to and administer your enquiry | Legitimate interests; or steps requested before a contract |
| Support or human-rights submissions, which may include health, racial or ethnic origin, religion, political opinions, sexuality, allegations or criminal-offence information | Assess whether APEX can lawfully assist, investigate or advance its objects | Article 6 legitimate interests or legal claims; an applicable Article 9 condition and, where required, a Data Protection Act 2018 Schedule 1 condition. We will request explicit consent where that is the appropriate condition. |
| Gift-card customer and transaction information | Provide the requested service, prevent fraud, keep accounting records and meet legal obligations | Contract, legal obligation and legitimate interests |
| Technical and security logs | Secure, diagnose and protect the website | Legitimate interests |
| Optional analytics or marketing identifiers | Measure or promote the service | Consent |
Do not send confidential evidence, medical records or allegations about another person through an ordinary contact email unless APEX has confirmed a secure method and explained the lawful basis for collection.
Sharing and processors
We disclose information only where necessary to hosting, security, communications, professional-adviser, payment and service providers; competent courts, regulators or authorities; and other recipients where legally authorised. Payment providers such as Stripe or PayPal may act as independent controllers for parts of their processing. We do not sell personal information.
International transfers
Some providers may process information outside the United Kingdom. Where UK adequacy regulations do not apply, we use an authorised safeguard, normally the UK International Data Transfer Agreement or UK Addendum, and assess relevant transfer risks.
Retention
Ordinary unsuccessful case or support enquiries are normally reviewed for deletion after 24 months. Transaction and accounting records are normally retained for 7 years, subject to applicable legal requirements. Active disputes, safeguarding matters, legal holds and regulatory obligations may justify a different period. APEX must apply its internal retention schedule in each case.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. You may also complain to the Information Commissioner’s Office. We may need to verify identity and may lawfully refuse or limit a request where an exemption applies.
Automated decisions and children
We do not use solely automated decisions producing legal or similarly significant effects unless we specifically notify you. This general website is not directed at children. A child or person acting for a child should not submit sensitive case material without appropriate adult involvement and a secure process agreed by APEX.
Changes
We will update this notice when our processing changes. Material changes will be communicated where required.