Privacy notice

You do not have to give your name, email address or phone number to make a report. If you choose not to, we will not know who you are.

If you do share contact details, we keep them confidential and only use them to follow up with you. You can ask us to delete them later, but this may make it harder to investigate your report.

We collect what you type into the report form: a description of your concern, the category you choose, the country or office it relates to, and any files you attach. We also collect any messages you send when following up on a report.

We do not collect your IP address, browser type, device information, location or any other technical details about your visit. We do not use cookies for tracking or analytics.

Your report is stored in a secure database with strong access controls. It is encrypted in transit and at rest. Access is limited to authorised case handlers who need it to do their job.

When you submit a report we create a unique reference number and a passphrase. We do not store the passphrase itself. Instead, we store a one-way fingerprint so we can check it when you return, without anyone being able to read it back.

Only trained staff involved in receiving, assessing or investigating the report can see it. Their access is recorded and reviewed. If there is a conflict of interest, the case is assigned to someone else.

We do not share your report with the person it is about, your manager or anyone outside the investigation team unless we are required to by law or it is necessary to protect someone from serious harm.

We keep reports for as long as necessary to complete the investigation and meet our legal and policy obligations. After that, personal details are removed so the case can be kept for statistics and oversight without identifying anyone.

If a legal hold is placed on a case, it cannot be deleted or altered until the hold is lifted.

If you gave us your identity, you can ask to see, correct or delete the personal information we hold about you. Because anonymous reports are designed to hide your identity, we may not be able to link a later request to an anonymous report.

To make a request, contact the data protection officer or privacy team using the details below. Please include your report reference if you have it.

We use access controls, audit logging and encryption to protect reports. Every action taken on a case is recorded in a tamper-evident log.

If you are worried someone may see you visiting this site, use a private browsing window and a device you trust. You can also click the 'Leave this site' button at any time.

If you have questions about this notice or how Safe Voice handles your information, contact the privacy or data protection team.