Last Sunday

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how JAOC Investigations (“we”, “our”, “the site”) collects, uses, and protects personal information. We are committed to safeguarding your privacy and ensuring that any data you provide is handled lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

 

1. Who We Are

JAOC Investigations is an independent public‑interest platform focused on transparency, accountability, and factual reporting.

If you have any questions about this Privacy Policy, you can contact us at:

Email: justanordinarycitizen@proton.me

 

2. What Personal Data We Collect

We collect only the minimum information necessary to operate the website and respond to enquiries.

Information you provide directly

  • Your name (if you choose to include it)

  • Your email address

  • Any information you include when contacting us

Information collected automatically

We use Google Analytics to understand how visitors use the site. This includes anonymised information such as:

  • Pages visited

  • Time spent on the site

  • Browser and device type

  • Approximate location (city‑level only)

All analytics data is anonymised and cannot identify you personally.

We do not use:

  • Advertising cookies

  • Remarketing cookies

  • Behavioural tracking

  • Cross‑site tracking

 

3. How We Use Your Information

We use your information only for:

  • Responding to enquiries

  • Improving the website and understanding visitor behaviour

  • Ensuring site security

  • Meeting legal obligations if required

We do not sell, share, or use your data for marketing.

 

4. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Legitimate Interests — operating a public‑interest website, responding to enquiries, ensuring security

  • Consent — when you voluntarily contact us

  • Legal Obligation — if required to comply with UK law

 

5. Cookies

This website uses:

Essential cookies

Required for the site to function securely. These do not identify you.

Analytics cookies

Used to collect anonymised usage statistics through Google Analytics. These cookies are optional and only load if you consent via the cookie banner.

We do not use advertising or tracking cookies.

For full details, please see our Cookie Notice.

 

6. How Long We Keep Your Data

  • Emails: up to 12 months, unless needed for legal or safeguarding reasons

  • Analytics data: typically 30–90 days

  • Security logs: up to 12 months

Investigation‑related correspondence may be retained for longer where necessary for safeguarding, legal obligations, public‑interest reporting, or ongoing case work.

Whistleblower and investigation‑related correspondence may be retained for longer where necessary for safeguarding, public‑interest reporting, legal obligations, or ongoing case work. This information is handled with strict confidentiality.

Newsletter subscription data is retained until you choose to unsubscribe. If you unsubscribe, we remove your email from our mailing list but may retain a minimal suppression record to ensure you are not contacted again.

You may request deletion of your data at any time.

7. Sharing Your Data

We only share personal data when strictly necessary:

  • With service providers who host or secure the website

  • If required by law or regulatory authority

  • To prevent fraud, abuse, or security threats

We never sell personal data.

 

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction

  • Request deletion

  • Object to processing

  • Restrict processing

  • Request a copy of your data

  • Withdraw consent at any time

To exercise these rights, email: justanordinarycitizen@proton.me

9. Confidential Whistleblower Information

We recognise that individuals may contact us with sensitive information relating to wrongdoing, safeguarding concerns, or matters of significant public interest. We treat all whistleblower communications with the highest level of confidentiality and care.

How We Handle Whistleblower Information

  • We do not disclose the identity of any whistleblower unless legally required to do so.

  • We do not share whistleblower information with third parties unless necessary for safeguarding, legal obligations, or to prevent serious harm.

  • We store whistleblower correspondence securely and restrict access to authorised personnel only.

  • We take steps to protect the anonymity of individuals who request it.

Legal Basis for Processing

Whistleblower information is processed under the following lawful bases:

  • Public Interest Journalism

  • Legitimate Interests

  • Safeguarding and Prevention of Harm

  • Legal Obligations (where applicable)

These bases allow us to handle sensitive information responsibly and in the public interest.

How Long We Keep Whistleblower Information

Due to the nature of whistleblowing and investigative work, information may need to be retained for longer than standard correspondence. This is necessary to:

  • support ongoing or future investigations

  • protect individuals who have raised concerns

  • maintain evidence for legal or safeguarding purposes

  • ensure accuracy and accountability in public‑interest reporting

Whistleblower information is retained only for as long as necessary for these purposes and is handled with strict confidentiality at all times.

Your Rights

Whistleblowers may request access to, or deletion of, their personal data where appropriate. However, in some cases we may be unable to delete information immediately if doing so would:

  • compromise an investigation

  • endanger an individual

  • breach legal or safeguarding obligations

We will always explain the reason if this applies.

10. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those websites.

 

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.