Privacy Policy
This website is run by the Justice AI Unit, part of the Ministry of Justice (MOJ). It is primarily an informational service: most pages can be read without giving us any personal data, and we do not use advertising or social-media tracking.
There are three places where the site handles data about you: an optional mailing-list sign-up for the Women in AI network, website analytics, which are on unless you turn them off, and the like button on the blog. All three are explained below.
The Women in AI Mailing List
If you choose to sign up to the Women in AI mailing list, we ask for your name, job title and email address, and for your confirmation that you are happy to be contacted. We collect this information only when you submit the form, and our lawful basis for processing it is your consent.
We use these details for one purpose: to contact you about the Women in AI network, including events, workshops and updates. We will not use them for anything else, and we will not sell them or share them with third parties for marketing. Your details are sent to and stored by the Justice AI Unit’s own service, which is hosted on Microsoft Azure.
You can withdraw your consent and ask to be removed from the list at any time. We keep your details only until you ask to be removed, and then we delete them. To unsubscribe, or to correct or delete your details, email the Justice AI Unit at ai@justice.gov.uk.
Cookies and Website Analytics
Unless you turn it off, the site collects statistics about how it is used, with an analytics service called PostHog. The first time you visit, a banner tells you this and lets you turn analytics off straight away. There are no advertising or social-tracking cookies. Our Cookie Policy lists everything the site stores in your browser. This section explains how we handle the personal data involved in analytics.
Who is responsible
The Ministry of Justice is the controller for this data. You can contact us about it at ai@justice.gov.uk. You can contact the Ministry of Justice’s Data Protection Officer at dataprotection@justice.gov.uk.
Why we use it
We use analytics to produce statistics about how the site is used, such as which pages are read, how people find them and how quickly they load, so that we can improve the site. We use the data only in aggregate. We do not use it to identify you or to make decisions about you, and there is no automated decision-making or profiling.
Our lawful basis
Our lawful basis for analytics is that the processing is necessary for a task carried out in the public interest (UK GDPR Article 6(1)(e)), which includes the exercise of a function of a government department (Data Protection Act 2018, section 8(d)). The function here is running and improving the Ministry of Justice’s public information about its work on artificial intelligence. We do not rely on your consent or on legitimate interests for analytics.
The law on cookies and similar technologies (the Privacy and Electronic Communications Regulations 2003, Schedule A1, paragraph 5) allows a website to store and read information in your browser to produce statistics like these without asking for consent first, as long as it explains this clearly and gives you a simple, free way to object.
You do not have to let us collect analytics. It is not a legal or contractual requirement, and turning it off does not change how the site works for you.
What we collect
- the pages you view, without anything after a ‘?’ or ‘#’ in the address except campaign tags
- how long you spend on each page and how far down you scroll
- the main address of the website you came from, if any
- which navigation, links and controls you click
- which part of the AI Action Plan Explorer you are viewing, such as which action you open
- in the AI Action Plan Explorer, the stage filter you choose, what you search for (with anything that looks like an email address, postcode, phone or other long number, or National Insurance number removed first) and how many actions match, and which case studies you open
- your browser, operating system, device type, screen size, language and time zone
- how quickly pages load
- your approximate location (country, region or city), which PostHog works out from your IP address. PostHog does not keep your IP address
- a random identifier, kept in your browser’s session storage, that links the pages you view in the same tab. It stays the same for as long as the tab is open, including if your browser reopens the tab after a restart, and is removed when you close the tab
Who receives it
PostHog, Inc. processes the data for us as our processor. It may use the data only on our instructions and only to provide its service to us. PostHog uses other companies (sub-processors) to provide that service, such as Amazon Web Services, which hosts PostHog’s EU cloud; PostHog lists them at posthog.com/subprocessors. We do not share the data with anyone else.
Where it is stored
The data is stored in the EU, on PostHog’s EU cloud in Germany. PostHog, Inc. is based in the United States and may access the data from there. That transfer is covered by the UK Extension to the EU-US Data Privacy Framework (the Data Protection (Adequacy) (United States of America) Regulations 2023), with the UK Addendum to the EU standard contractual clauses as a fallback.
How long we keep it
PostHog keeps event records for up to seven years; we use them only in aggregate. The random identifier in your browser is removed when you close the tab. How long your cookie choice and other browser storage last is set out in the Cookie Policy.
Your Right to Object
You have the right to object to our use of your personal data for analytics (UK GDPR Article 21). You do not need to give a reason, it is free, and you can do it at any time. To object, select Turn off analytics on the cookie banner, or open (also at the bottom of every page) and turn Analytics off. If you have not made a choice and your browser sends a Global Privacy Control signal, we treat that as an objection; a choice you make on the banner or in Cookie settings takes priority over the signal.
When you object, PostHog stops straight away, in every tab you have open on this site, and its identifier is removed from your browser. Nothing you do after that is collected or sent. Your choice is saved in the browser you used, so if you use another browser or device, or clear this site’s cookies and storage, you will need to turn analytics off again. You can turn it back on at any time from Cookie settings.
Blog Likes
Each blog post has a “like” button. Liking or unliking a post sends only the post’s public category and page address to our like-count service, with no cookies and no identifier. Remembering your own likes uses a small, strictly necessary flag in your browser so the count cannot be inflated by refreshing the page. The like button does not identify you.
Technical Information
As with any website, when your browser contacts our pages and services (including the sign-up and like-count services and, unless you turn analytics off, the analytics service) standard technical information such as your IP address is processed so we can deliver the service and keep it secure. We do not use this information to identify or track individual visitors. The website is hosted on the Ministry of Justice’s Cloud Platform, which runs on Amazon Web Services, and the sign-up and like-count services are hosted on Microsoft Azure.
External Links
If you follow links to external services, job boards, social platforms or email addresses, those destinations process your data under their own privacy terms and retention policies.
Your Rights
The Ministry of Justice is the data controller for this website. You have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to ask us to restrict how we use it, to object to how we use it, and to withdraw any consent you have given. To exercise these rights, or to ask how we handle your data, email the Justice AI Unit at ai@justice.gov.uk.
Analytics records are linked only to a random identifier that your browser removes when you close the tab, so we are usually unable to tell which records relate to you.
How the Ministry of Justice handles personal data, including how to write to its Data Protection Officer, is set out in the MOJ Personal Information Charter (opens in a new tab). If you are unhappy with how we have handled your data, you can also complain to the Information Commissioner’s Office (ICO) (opens in a new tab).
Ministry of Justice on GOV.UK (opens in a new tab)
If this service begins collecting further personal data, this notice will be updated before the change is released. This page was last updated on 11 October 2026.
