Privacy policy
Short, because we collect very little. Most families who use this site live in the European Union, so this policy follows the GDPR; it applies to everyone.
Who is responsible
This website is provided by Leo's Light | Cure SPG52, a family-run fundraiser in the United States (leoslight.org), and is maintained by parent volunteers. For anything in this policy, write to [email protected]. We are the data controller for the information described below.
No cookies, no tracking
This site sets no cookies and uses no advertising or tracking technology. Your colour-theme choice (light or dark) is kept in your own browser's local storage and never leaves your device.
We use Cloudflare Web Analytics to count visits. It is cookieless, does not fingerprint devices and does not track you across sites; it reports aggregate page views, referrers and rough country, nothing that identifies you.
Hosting
The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address and request details to deliver pages and protect the site from abuse, under its own privacy policy. Logs are not used by us to identify visitors.
The contact and join forms
When you send a message through the contact or join form, we receive what you typed: your name, email address, country (if given), your connection to SPG52, and your message. It is sent as an email to the parent volunteers who run the site, through Cloudflare's email service (the same company that hosts the site), acting as our processor. It is not stored in a database on this website.
- Purpose: to answer you, and for the join form, to invite you to the caregivers' group.
- Legal basis: your consent, given by ticking the box on the form (GDPR article 6(1)(a)). You can withdraw it at any time by asking us to delete your message.
- Retention: we keep messages as long as needed to answer and, for group members, to administer the group. Ask and we delete.
- Sharing: with no one outside the volunteers who run this site and the group administrators, except as required by law.
- Transfers: the volunteers are in the United States and the European Union. By sending the form you accept that your message is read there.
Please do not put a child's medical details in the forms. They are not needed to join the group.
Children's data
This site names no child and publishes no child's photo, story or diagnosis. The map shows only a country and an age band for children whose families have come forward in the caregivers' group; families can ask at any time for their child to be removed. Any future photo is published only with written consent from a parent or guardian for that specific child and use, which can be withdrawn at any time (photo consent).
Donations
Donations are not processed on this website. The US path goes to the Rare Village Foundation's giving platform and the direct path to the Universitat Autònoma de Barcelona's crowdfunding page; each handles your payment and personal data under its own privacy policy, which is linked on those pages.
Your rights
Under the GDPR and similar laws you can ask for access to the personal data we hold about you, correction, deletion, restriction, portability, and to withdraw consent. Email [email protected]. If you are in the European Union and are not satisfied with our answer, you can complain to your national data protection authority.
Changes
If this policy changes, the date at the top changes with it and the change is noted on the updates page.