Privacy Policy
Last updated: 17 December 2025
Who we are
BUDDS (Down Syndrome Integrated Care Pathway) is committed to protecting your privacy and ensuring the security of your personal information. This privacy policy explains how we collect, use, and protect your information when you visit our website.
Information we collect
Information you provide directly
When you use our contact form or interact with our services, we may collect:
- Your name and email address
- Your message or enquiry
- Any additional information you choose to provide
Information collected automatically
When you visit our website, we automatically collect certain information:
- Your IP address and general location (country/city level)
- Browser type and version
- Operating system
- Pages visited and time spent on our site
- Referring website
- Device information (screen size, device type)
How we use your information
We use the information we collect for the following purposes:
- To respond to your enquiries and provide support
- To improve our website and user experience
- To understand how our website is used
- To ensure our website functions properly
- To comply with legal obligations
Third-party services
We use the following third-party services that may collect information:
Legal basis for processing
We process your personal information under the following legal bases:
- Legitimate interests: To improve our website and provide better resources
- Consent: When you submit information through our contact form
- Legal obligation: Where required by law
Data sharing and disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations
- To protect our rights, property, or safety
- With service providers who help us operate our website (under strict confidentiality agreements)
Data security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Secure hosting infrastructure
Data retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy:
- Contact form submissions: 2 years or until resolved
- Analytics data: As specified by our third-party providers
- Website logs: 12 months for security purposes
Your rights
Under UK data protection law, you have the following rights:
- Right of access: Request a copy of your personal information
- Right to rectification: Correct inaccurate personal information
- Right to erasure: Request deletion of your personal information
- Right to restrict processing: Limit how we use your information
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Where processing is based on consent
To exercise any of these rights, please contact us.
International transfers
Some of our service providers may process your information outside the UK. When this occurs, we ensure appropriate safeguards are in place to protect your information, including:
- Adequacy decisions by the UK government
- Standard contractual clauses
- Certification schemes
Children's privacy
Our website is intended for general audiences and healthcare professionals. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. We will notify you of any significant changes by posting the updated policy on this page with a revised “Last updated” date.
Contact us
If you have any questions about this privacy policy or how we handle your personal information, please contact us:
Complaints
If you believe we have not handled your personal information in accordance with data protection law, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):