Privacy Policy

We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you as to how we look after your personal data when you use our website or interact with us and tell you about your privacy rights and how the law protects you.

Who we are?

The Global Commission on Modern Slavery and Human Trafficking is a company limited by guarantee registered in England with our registered office at 1 Chamberlain Square Cs, Birmingham, United Kingdom, B3 3AX. Our company number is 15108108. We refer to ourselves as “GCMS”, “we”, “us” or “our” in this Privacy Policy. We work towards eradicating forced labour and ending modern slavery and human trafficking. We operate this website to provide the public with information and a point of contact in relation to our work.

What is this policy?

Under data protection laws, we are required to provide you with certain information about who we are, how we process your personal data and for what purposes, and your rights in relation to your personal data. This information is provided in this Privacy Policy and it is important that you read that information. By using our website and/or by communicating with us in any way, you confirm that you have read and accept this Privacy Policy.

Once you provide consent by using our website, you may change your mind and withdraw consent at any time by contacting us at but that will not affect the lawfulness of any processing carried out before you withdraw your consent.

What personal data do we collect about you and how do we collect it?

We collect information from you such as your name and email address when you email us to register interest, submit questions, provide feedback to us or otherwise communicate with us.

We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

How do we use your personal data?

GCMS collects and uses your personal information to operate the GCMS website and consider and respond to any questions or views you have shared. We may make your personal data available to certain people involved with the operation of GCMS and our website (for example those in administrative, marketing, legal, or system administration).

What lawful bases do we rely on to use your personal data?

We will process your personal information only for permitted purposes, including on the following bases:

  • you have given your consent for one or more specific purposes, for example receiving newsletters, emails or other correspondence from us. You are able to withdraw your consent at any time by contacting us at (note that this will not affect the lawfulness of any processing we carried out with your consent before its withdrawal);
  • it is necessary for us to perform a contractual obligation;
  • it is necessary for us to comply with a legal obligation;
  • it is necessary for us to perform a public task; or
  • it is necessary for the following legitimate interests:
    • the administration of GCMS, including maintaining and updating our records and managing our operations;
    • protecting our network security and preventing fraud; and
    • maintaining our website or other services.
  • We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your personal data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground applies

    International data transfers

    We, or a third party with whom we share personal information, may transfer, host, store and/or handle personal data outside of the UK or EEA – for example where we and/or our service providers (including servers) are based outside of the UK or EEA. We will only permit any transfers of personal information outside the UK and EEA to happen if adequate safeguards have been put in place to protect the personal data.

    How long is data retained?

    We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Where personal data is collected for the purposes related to our legitimate interests, it shall be retained as long as needed to fulfil such purposes. We may retain your personal data for a longer period where you have given consent to such processing, in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

    Data security1

    Your information is securely stored. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

    Your rights

    Under data protection law, you have rights including:

    • Your right of access – you have the right to ask us for copies of your personal information.
    • Your right to rectification – you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
    • Your right to erasure – you have the right to ask us to erase your personal information in certain circumstances.
    • Your right to restriction of processing – you have the right to ask us to restrict the processing of your personal information in certain circumstances.
    • Your right to object to processing – you have the right to object to the processing of your personal information in certain circumstances.
    • Your right to data portability – you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

    1We have proposed some drafting here in relation to GCMS’ data security procedures. It may need to be adapted to be consistent with the actual procedures

    You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you and we try to respond to all legitimate requests within that period. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

    Please contact us by emailing or writing to us at 1 Chamberlain Square Cs, Birmingham, United Kingdom, B3 3AX if you wish to make a request.

    How to complain

    If you have any concerns about the use of your personal data, you can make a complaint to us by emailing

    You can also make a complaint to the ICO if you are unhappy with how we have used your data. The ICO’s address is:

    Information Commissioner’s Office

    Wycliffe House Water Lane



    SK9 5AF

    Helpline number: 0303 123 1113

    ICO website:

    Changes to this Privacy Policy

    GCMS reserves the right to update this Privacy Policy from time to time. To ensure the personal data we hold about you is accurate and current, please keep us informed of any changes in your personal data.