Legal

PRIVACY
NOTICE

How the Stop AI Abuse campaign collects, uses and protects your personal data.

Data controller: Reset Tech UK Limited  ·  Last updated: May 2026  ·  Contact: contact@saiacampaign.com

The 'Stop AI Abuse' Campaign

The 'Stop AI Abuse' is a grassroots campaign group ("we", "us", "our", "SAIA"). SAIA is run by Reset Tech UK Limited who are the data controller for use of personal information within our campaign and the group.

This privacy notice is to inform you of how we use your personal data when you interact with us. We have identified the following ways you might interact with us, you may be a:

Supporter
You have signed a petition we are running or indicated you want to be kept informed of our activities and ways you can support us including being part of the SAIA WhatsApp Groups; have given your time or expertise to our campaign.
Donor
You have been kind enough to make a donation to our campaign. If you weren't already a Supporter, you will automatically become a Supporter once you have made a donation.
Beneficiary
You are directly benefiting from our campaign, donations, training, information, awareness and advice, and where you have indicated you may want legal advice.
Contributor
This is where you want to share your story with us in an interview or recording that will be used in the campaign literature and social media locations.
Journalist
You are a member of the media we are interacting with to help our campaign.
Supplier
You are an employee of a service provider to the campaign.
Website Visitor
Anyone looking at this website.

For questions or concerns about this privacy notice, contact us at: contact@saiacampaign.com

What is Personal Data?

Personal data is any information that can be used to identify you. We may create unique codes for you in our systems, so we reduce how easily you are identified. These codes are also considered to be personal data. We do our best to reduce anyone's ability to know who you are unless they need to as part of the work we are doing.

What Personal Data do we collect and where do we get it from?

If you are a Supporter, we collect your personal data directly from you which includes your name, email address, the petition you may have signed and whether you have indicated you are happy to receive further information about the campaign. It is not mandatory to provide your telephone number; if you do, we will use it to add you to the SAIA WhatsApp campaign group.

If you are a Donor, we collect your personal data directly from you which includes the same information as a Supporter and bank details including account holder name, sort code, account number, and donation amount(s).

If you are a Beneficiary, we collect your personal data directly from you or from the person who may be completing the form on your behalf. This is specifically related to collecting your personal data where you feel you, or someone you know, has been affected by AI generated or AI manipulated images of you/them. We do not collect the specific information about how you/they have been affected which will be for the law firm we partner with to manage carefully with you (the law firm is AWO Legal and will be the data controller once we have passed your contact details to them).

If you are a Contributor, we collect your personal data directly from you or from others around you who are helping to tell your story. We will collect your name, preferred name, email address, home address, availability to participate, and how you or the person you are telling us about were affected. This may include sensitive information or special categories of personal data concerning the circumstances of the story.

If you are a Journalist, we will collect social media handles, job title, employer, work history and the names of any other organisation you represent that either you have provided or is publicly available. We may also collect publicly available information on websites or in articles you have written or have been written about you and thoughts and opinions you may have about the campaign.

If you are an employee of a Supplier, we will be provided with your personal data from the organisation you work for or from a reference contact we may have if it is not directly from you. We will collect your name, job title, email address and the name of the organisation you work for.

As a Website Visitor we will collect:

  • Information about the device used to access our website, your visits and use of the website including your IP address, internet log information, location, browser type and version, referrer and activity, and details of visitor behaviour patterns
  • Your activity and preferences when visiting our website including through the use of cookies (see "Cookies", below)
  • IP address, operating system and browser information
  • The information you provide in any of the forms you complete on the website

How we use your Personal Data and our Lawful Basis

We will only use your personal data in a way that you expect us to use it. We will never sell your data or share it with anyone that you do not expect it to be shared with. We have aligned our uses to the lawful basis for your awareness as we're required to do by UK law.

Uses Lawful Basis
To run the SAIA campaign, encourage the UK government to introduce new policy or a change in the law, and to help bring justice for those affected by this and other similar scandals. UK GDPR Article 6.1(f) Legitimate interest.
To add you to a petition when you add your details to the petition(s) we run.
To add you to the SAIA WhatsApp campaign group. Unless otherwise stated, where you have provided your telephone number, this indicates to us that you want to be part of the WhatsApp group.

NOTE: Although we manage the WhatsApp community groups and ensure its settings reduce how identifiable you will be to others in the group(s) and have clear guidelines in the community notes, anything you write in the group(s) should be treated as publicly available information. Please do not write anything you would not want made public about you as we are unable to control how other people may use this information. You can remove yourself at any time.
To analyse the effectiveness and reach of the campaign from the information we have gathered throughout the campaign.

To reply to any communications you have with us and share any relevant information with individuals involved to further the campaign.
To keep you informed of the campaign and provide you with more ways you are able to get involved or donate. You can opt-out at any time. UK GDPR Article 6.1(a) Consent.
To process your donation.

Where you have completed the appropriate form, to pass on your information to AWO Legal who can work with you where appropriate.

NOTE: Once your personal data has been shared with AWO Legal, we are no longer the data controller for this data. Please see their privacy notice about how they will use your personal data.		 UK GDPR Article 6.1(b) where the use of your personal data is necessary in the performance of a contract.
If you are able to receive direct support from the campaign as a Beneficiary of the campaign we will use your personal data to understand how our campaign support can help you, to decide on the best way we may be able to assist and then to provide the assistance/support where we can. UK GDPR Article 6.1(f) Legitimate interest.
To allow you to be recorded by us so your story can be told within the campaign. This is to support the campaign, raise awareness of the issue and to encourage changes in legislation and government policy.

This will be published on our website, digital locations including social media and possibly broadcast media (TV/Radio).		 UK GDPR Article 6.1(f) Legitimate interest of the Data Controller.

And: Consent for the use of special category personal data in accordance with UK GDPR Article 9.2(a).
To capture and hold a contributor and digital rights release waiver for the footage we take of you when you are recorded for the campaign. UK GDPR Article 6.1(f) Legitimate interest.
Monitor the website and keep it secure; to understand how we might improve the website through numbers of visits, visitor patterns and behaviour. Public Task — UK GDPR Article 6.1(e). Special categories: Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To report to the appropriate authorities any incidents of harm, child safeguarding, or concerns of crimes that may be witnessed or discussed.

To help protect an individual from neglect or physical, mental or emotional harm, or protect the physical, mental or emotional well-being of an individual.
To identify Personal Data and take relevant action upon submission of a data subject rights request.

To be able to assess any impact on individuals of a Personal Data Breach.		 Compliance with a legal obligation — UK GDPR Article 6.1(c). Special categories: UK GDPR Article 9.2(g).
To deal with any legal claims and any ongoing litigation cases. Compliance with a legal obligation — UK GDPR Article 6.1(c). Special categories: establishment, exercise or defence of legal claims — UK GDPR Article 9.2(f).

Do we share your Personal Data with anyone?

We only share your personal data in ways that you would expect. We will never sell your personal data.

Your personal information will be accessed by the people in the campaign team which includes a digital campaign management company. Your personal data will be used within digital service providers for storage, sending emails, petition management, direct communications (SMS, WhatsApp), processing donation payments, and managing the campaign. All third parties we work with are bound by data protection agreements we have in place with them.

Where you have completed the form to indicate you feel there is a legitimate legal case that needs to be addressed your personal data will be shared with AWO Legal. Upon transfer to AWO Legal, your personal data will be governed by their privacy notice, and they will be the data controller.

Where you have indicated that you are happy for your personal data to be shared with other campaigns we will do so although we do not do this automatically. Should you click on links to other campaigns and their respective websites from our website or any communications we send you, we are not responsible for sharing any information with them and you do so voluntarily.

Where appropriate, we may share your personal information with our professional advisers including our lawyers and auditors, and project partners, where it is strictly necessary. It is also possible that we may be required to share your data to comply with applicable laws or with valid legal processes, such as in response to a court order.

We may also share your personal data if we choose to transfer the management of the campaign to another charity, or where the company responsible for the campaign merges parts of its business or sells our assets in the future.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded by implementing at least one of the following safeguards:

  • Transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK
  • Specific contracts/agreements approved by the UK which give personal data the same protection it has in the UK (UK International Data Transfer Agreements)

Notes about sharing data with the Law Firm

If you submit a first-hand account of harm (via our reporting form), we will share the following with the law firm:

  • Your name
  • Your email address
  • Your postcode (if provided)

The law firm will use this information to contact victims who may be eligible for support and report back on how campaign donations are being used.

The law firm has its own data protection and safeguarding procedures in place. They are bound by legal professional privilege and confidentiality obligations.

You can choose not to share your account. You can sign the petition and receive campaign updates without providing a detailed account.

How long we keep your Personal Data?

Petition signers and email list(s)
Retained for 12 months after the campaign concludes. You can request deletion at any time by emailing us.
Donors
Retained for 6 years (required for tax, audit, and anti-money laundering purposes). You can request anonymisation after this period.
First-hand accounts shared with law firm
Retained by the law firm according to their data privacy policy. You can request deletion from our records; the law firm retains their own copy.
First-hand accounts used in campaign materials
Where this has not been published and you change your mind, we will delete all footage and recordings of you. Once the material has been made public, we will be unable to delete the data contained should you ask us to delete it. We will delete any raw footage we may still hold and should it be possible, we will remove digital media from the locations we control.
WhatsApp community
Retained for 12 months after you leave the group. You can request deletion at any time. We are unable to delete any data another member has copied.
Journalists and Suppliers
Retained for 12 months after the campaign concludes. This information may be retained for longer by the organisation responsible for the campaign (please refer to that organisation's privacy notice for further information).

Cookies

As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies to enhance your experience of our website.

Our website uses cookies for collecting user information which may include IP address, operating system, and browser information. We use persistent cookies to track returning visitors. They expire after 12 months and enable us to compare website traffic from month to month.

Cookies are text files, which identify a user's computer to our servers. Cookies in themselves do not identify the individual user, just the computer used.

You can manage and delete cookies through your web browser. Most common browsers allow you to manage cookie settings through their settings or preferences menus.

You can also prevent your data from being used by Google Analytics by using the Google Opt-out Browser Add-on.

Your data protection rights

You have the following rights in respect of your personal data:

  • Right of access — You have the right to ask us for copies of your personal information.
  • Right to rectification — You have the right to ask us to rectify personal information you think is inaccurate or incomplete.
  • Right to erasure — You have the right to ask us to erase your personal information in certain circumstances.
  • Right to restriction of processing — You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Right to object to processing — You have the right to object to the processing of your personal information in certain circumstances including where we are processing your data based on consent.
  • Right to data portability — You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. To exercise your rights contact us at: contact@saiacampaign.com

Security of Your Data

We take the protection of your information extremely seriously. We use a combination of physical, technical, operational, and administrative safeguards to prevent unauthorised access, use, or disclosure of your personal data, as required by law and in line with recognised industry best practice. Your information is protected by:

  • Secure storage on encrypted servers
  • Password-protected access restricted to authorised staff
  • Encrypted payment processing for donations
  • Regular security reviews

However, no system is 100% secure. We cannot guarantee absolute security, but we implement industry-standard protections.

How to Complain

If you have concerns about how we use your data:

Contact us first at contact@saiacampaign.com — we'll do our best to resolve it.

Contact the ICO if you remain unhappy:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk

Contact Us

For questions about this privacy notice or how we handle your data:

Email: contact@saiacampaign.com
Campaign: Stop AI Abuse (SAIA)

Changes to This Privacy Notice

We may update this notice from time to time. We will post changes on this page with an updated revision date. Significant changes will be communicated to you via email.

Last updated: May 2026