Last updated: 23 August 2026
Business Leaders for Peace (BLFP), an unincorporated volunteer group, is responsible for the personal information described here. Contact businessleadersforpeace@proton.me for anything about privacy. We have not appointed a data protection officer.
Email. If you email us, we receive your contact details and your message. We rely on our legitimate interest in answering enquiries and running BLFP.
Suggestions. If you use the "suggest an action" box in the Actions Accumulator, we receive what you enter. Our form processor, currently Web3Forms, also processes your IP address, the time of submission and the page you came from. We rely on our legitimate interest in considering suggestions and preventing abuse.
Open letter signatories. The open letter closed on 20 October 2025. The record holds names, roles and campaign contact details. For publishing a name, we rely on the clear agreement to publication that each person gave when they signed. We publish a name only where we have evidence of that agreement. You can withdraw it and ask for your name to come off at any time. Some details came directly from the person; some came from a colleague or an earlier BLFP campaign record. We rely on our legitimate interest in keeping the internal record, administering the list and honouring removal requests. Giving signatory details was voluntary and the letter is closed, so nothing further is required of anyone.
Email updates. If you asked for updates, we use your contact details with your consent, which you can withdraw at any time. Our newsletter service records whether an update was opened and which links were clicked, so we can see what is useful and improve the updates. If you would rather we did not record that for you, email us and we will turn it off for your address, or use the unsubscribe link.
We use an analytics service, currently Google Analytics, to count visits and see which pages people read. A consent box appears before it loads. It loads only if you choose "Accept". "No thanks" keeps it off. You can change your decision later with the "Change your choice" link at the bottom of every page. Your answer is kept in your browser so we do not ask again; withdrawing reloads the page so the analytics stop.
Google Analytics sets cookies on your device (named _ga and _ga_ followed by a code). Google gives them a lifetime of two years; your browser may shorten that. The data goes to Google. For transfers from the UK to the United States, Google relies on the UK Extension to the EU-US Data Privacy Framework.
The Actions Accumulator stores the actions you tick in your browser so it can remember them. That is strictly necessary for the feature you asked for, so it needs no consent. Our web server is set not to log visitors' IP addresses.
We use a small number of service providers, described by type with the current provider named:
Some of these providers process information outside the UK. Web3Forms is run from India and its servers are in the United States. Its contract with us uses the standard legal safeguards the UK approves for that. Proton stores mail in Switzerland, Germany or Norway, which UK law treats as adequate. Mailchimp relies on the Data Privacy Framework for transfers to the United States, with contractual safeguards where required. Email us for copies of the safeguards.
We use security measures and access controls, including two-factor login on every system that holds signatory data. We may keep a secure backup copy of the signatory record. We make no automated decisions about you.
We keep the published signatory list while the letter stays on this website. When the letter is taken off this website, we delete the signatory record, keeping only the minimum needed to honour removal requests and deal with any legal claim.
We keep correspondence for 24 months after the last substantive contact. Web3Forms says submission data may stay in its systems for up to three years. We keep email update details while you are subscribed and, after you unsubscribe or object, only the minimum needed to make sure we do not contact you again.
Depending on the circumstances, you can ask to see your information, correct it, erase it, restrict how we use it, receive it in a portable form, or object to our use of it. Where we rely on consent, you can withdraw it at any time.
Where we rely on legitimate interests, you can object. We must then stop unless we have compelling grounds to continue or the information is needed for a legal claim. You have an absolute right to object to direct marketing. If you object, we stop.
You have the right to complain to us about how we handle your information. Email businessleadersforpeace@proton.me. We will acknowledge your complaint within 30 days, look into it, keep you informed and tell you the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
We may update this notice when our practices or providers change. If we plan a new use of personal information, we will tell the people affected before we start. The date at the top shows the current version.