Legal

PRIVACY POLICY

Last updated: April 2026 · Bands For Brothers CIC (Company No. SC834674)

Who we are

Bands For Brothers CIC ("we", "us") is a UK Community Interest Company (Company No. SC834674) registered in Scotland. We run this website and the #TalkToday movement. We are the data controller for any personal data processed via this site.

What we collect — and what we don't

We've designed this site to collect as little as possible.

Anonymous posts and replies (BrothersBoard, A Brother Said). We store the text you submit, the topic you choose, the date/time, and a random device ID generated in your browser. We do not ask for your name, email, phone number or location.
Device ID. A random UUID stored in your browser's local storage. It lets us prevent duplicate reactions and lets you delete your own content. It is not linked to your identity.
Reports. If you report a post we store which post was reported, the reason, the time, and your device ID — to prevent abuse of the reporting system.
Shop orders. If you buy a wristband, our checkout (Shopify) collects the name, address, email and payment details required to fulfil your order. Shopify is the data processor for that data — see their privacy policy.
Contact form. If you email us via the Contact page we keep your message and email address solely to reply.
Server logs. Standard request logs (IP, user agent, page visited) kept for up to 30 days for security and abuse prevention.

Lawful basis (UK GDPR)

Anonymous posts — legitimate interests (running a peer-support community) and your consent (you choose to post).
Orders — performance of a contract.
Contact replies — legitimate interests / consent.
Server logs — legitimate interests (security).

How long we keep things

Anonymous posts and replies are kept indefinitely unless you ask us to remove them or our moderators hide them. Order data is kept for 7 years (UK accounting requirements). Server logs are kept for up to 30 days.

Sharing

We do not sell your data. We use:

Supabase (database & hosting, EU region) — our processor for anonymous posts.
Shopify (e-commerce) — for orders.
Cloudflare (CDN/hosting) — to deliver the site.

Anonymous content you submit may be shared (with all identifying details removed) on our social media (e.g. Instagram) as part of the #TalkToday campaign.

Your rights under UK GDPR

You have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. Because BrothersBoard / Brother Said posts are anonymous, we may need extra information from you to identify your content (e.g. your device ID). Email us at hello@bandsforbrothers.co.uk to make a request.

You can complain to the UK Information Commissioner's Office: ico.org.uk.

Crisis support

This site is not a crisis service. If you or someone you know is at immediate risk, call 999 or Samaritans on 116 123 (free, 24/7).