Privacy Policy

Last updated: October 2026

This Privacy Policy describes how LeftForward Ltd (“we,” “us,” or “our”) processes personal data when you use the website leftforward.org (the “Site”). We process data in accordance with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), the EU General Data Protection Regulation (“EU GDPR”) where it applies, and applicable national laws where you are located.

1. Data controller

The data controller responsible for processing personal data in connection with the Site is LeftForward Ltd (Company No. 17497178), a company registered in England and Wales. Registered office: Level One, Basecamp Liverpool, 49 Jamaica Street, Liverpool, L1 0AH. For questions about this policy or your data, you can email us at privacy@leftforward.org, use the Contact page on this Site, or write to us at the registered office address above.

2. What data we process

Depending on how you use the Site, we may process:

• Technical and usage data: such as IP address, browser type, device type, pages viewed, and approximate location derived from IP, collected through server logs and, only if you accept analytics cookies, through Google Analytics.
• Information you send us: for example your name, email address, and the content of your message when you email us or use the contact form. Please do not include sensitive information, such as details of your political views, health, or other special-category data, in your message unless it is necessary for your enquiry.
• Cookie and consent data: your cookie preferences stored in your browser (see section 4).

3. Purposes and legal bases

We process personal data on the following bases:

• Legitimate interests (Art. 6(1)(f) UK GDPR / EU GDPR): operating and securing the Site, keeping server logs limited to what is necessary, and responding to your enquiries and messages.
• Consent (Art. 6(1)(a) UK GDPR / EU GDPR): non-essential cookies such as analytics, and any marketing or communications where we ask for your explicit consent. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c) UK GDPR / EU GDPR): where we must retain or disclose information to comply with the law.

4. Cookies

We use cookies and similar technologies to run the Site and, only with your consent, to measure traffic and improve content, in line with PECR.

• Necessary cookies: required for basic functions (for example remembering your cookie choice). These are set when you use the Site or choose “Necessary only” in our banner.
• Analytics cookies: used by Google Analytics to understand how the Site is used (for example aggregated page views). These are loaded only if you choose “Accept all” in our cookie banner. You can change your mind by clearing site data for leftforward.org or contacting us.

You can control cookies through your browser settings. Blocking necessary cookies may affect how the Site works.

5. Recipients and transfers

We use service providers who process data on our behalf under data processing terms, including:

• Hostinger, for hosting the Site and its server logs;
• Google Workspace, for email and productivity tools, which hold messages you send us; and
• Google Analytics, for website analytics, only if you consent to analytics cookies.

Some of these providers may process data outside the United Kingdom and the European Economic Area. Where required, we rely on appropriate safeguards for those transfers, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and the EU Standard Contractual Clauses.

6. Retention

We keep personal data only for as long as we need it for the purposes described above. Our current retention periods are:

• Website server logs: our hosting provider (Hostinger) keeps website access logs, which include IP addresses, browser/user-agent details and response times, for a rolling period of approximately seven days. We use them only for security and troubleshooting.
• Enquiries: messages you send us by email or through the contact form are kept for up to 12 months after our last reply, so that we can follow up and handle any related questions, and are then deleted. We may keep them longer if needed to establish or defend legal claims.
• Analytics data (only if you accept analytics cookies): processed through Google Analytics. Data linked to cookies and user identifiers is kept for 14 months, and event-level data used for detailed analysis is kept for 2 months, as set in our Google Analytics configuration, after which it is deleted automatically. Aggregated statistics that do not identify individuals may be kept longer.
• Cookie preferences: stored in your browser until you clear them or they expire.

When these periods end, we delete the data or anonymise it so that it can no longer identify you.

7. Your rights

Under the UK GDPR and, where it applies, the EU GDPR, you may have the right to access, rectify, erase, restrict processing, object to certain processing, data portability, and to withdraw consent at any time where processing is based on consent.

To exercise your rights, email us at privacy@leftforward.org or use the Contact page. We will respond within the timeframes required by law.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint, or, if you are in the EEA, to the data protection authority in your country. We would appreciate the chance to address your concerns first, so please contact us.

8. Children

The Site is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. We encourage you to review this page periodically.