Jali Collective is committed to protecting your privacy and handling personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. We collect and use personal data only on lawful grounds and for legitimate purposes. This policy outlines what information we collect, how we use it, and your rights regarding your data.

Who We Are

Jali Collective is an unincorporated, volunteer-run non-profit collective based in Edinburgh, Scotland.

Personal Data We Collect and Use

We only collect personal information necessary for our activities:

• Contact & Event Details: When you interact with us – for example, by contacting us, reserving a ticket for a screening, or signing up for an event – we may collect your name and contact information (such as email or phone number). We use this to fulfill your request and keep you informed about the event or service. (For internal administration, we also maintain contact and payment details of our Core Members and contractors.)

• Optional Information: You might choose to provide additional details such as accessibility needs or optional demographic feedback (e.g. via anonymous surveys). We use accessibility information only to accommodate you at events. Any demographic data is voluntary, anonymised and used only to improve our outreach and report broad statistics – never to identify you personally.

• Mailing List: If you subscribe to our newsletter, we collect your name and email to send you updates about our activities (such as films and events). We only send these communications if you opt-in, and you can unsubscribe at any time.

• Website Usage Data: If you visit our website, we may use cookies or analytics to understand how visitors use the site (for example, which pages are viewed). This helps us improve the website experience. Such data is collected in aggregate form and does not identify you individually. You can control or disable cookies in your browser settings.

Lawful Basis for Processing

In most cases, we rely on your consent (e.g. when you sign up for our emails or give optional information) or on our legitimate interests (e.g. to run events you attend and further our mission in a way that doesn’t override your rights). If you enter into a contract with us (e.g. as an employee, freelancer, contractor or ticket buyer), we will process your information as needed to fulfill that contract. We may also have a legal obligation to process or retain data in certain situations (e.g. to comply with a court order or legal requirement).

Data Sharing

We do not sell your personal data, and will only share it in limited circumstances:

• Service Providers: We sometimes use third-party services (e.g. an email newsletter platform or venue ticketing service) to carry out our operations. These providers must handle your data securely and only use it for our specified purposes.

• Partners and Funders: We may share anonymised, aggregated data with partners or funders to report on our activities. This data contains no personal identifiers. We will not share your personal details with other organisations without your consent.

• Legal Compliance: If required by law – or to protect the rights, safety, or property of our collective or others – we may disclose personal data. For example, we might have to comply with a court order or provide information to prevent fraud or abuse.

Data Security

We store personal data securely on password-protected systems, and only authorised Core Members of Jali Collective have access to it. We maintain measures to prevent unauthorised access or loss of data. If a data breach occurs that affects your personal information, we will inform you and the relevant authorities (such as the Information Commissioner’s Office).

Data Retention

We keep personal data only for as long as necessary for the purpose it was collected. We periodically review and delete or anonymise information that is no longer needed. For example, if you unsubscribe from our emails, you will be automatically removed from our mailing list. If you attend an event, we will delete or anonymise your registration details after the event and any necessary follow-up. Some records may be kept longer if required for legal or administrative reasons, but only for the minimum period necessary.

Your Rights

You have the right to access the personal information we hold about you, to have it corrected or updated, and to request its deletion or restrict its use in certain circumstances. You can also object to certain processing (such as opting out of marketing emails) and withdraw consent where we rely on it.

To exercise any of these rights, please contact us (see below). If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Contact Us

If you have any questions about this policy or want to exercise your rights, please contact us at contact [at] jalicollective.co.uk

This policy was last reviewed in August 2025.