Who is responsible for your information? Roach Cares Foundation, Registered Charity No. 1775, Barbados, decides how personal information submitted through this website is used. This notice applies to the general website contact form and related correspondence.
If you choose the optional “Email me a copy of my submission” checkbox, we use the email address you provide to send that requested copy. This does not subscribe you to marketing or programme updates.
What we collect
When you use the contact form, we receive your name, email address, optional organisation, reason for contact, message and contact-consent choice. Security services may also process limited technical information such as IP address, browser/device signals and request metadata to protect the form from abuse.
Please do not send medical histories, diagnoses, identity documents, payment details or other special-category/sensitive personal information. The “Share Your Story / How We Can Help?” option is for a general, non-sensitive message only. It is not an application, assessment request or service intake.
Why we use it and our legal basis
We use the information you submit to respond to your enquiry, manage the resulting correspondence and maintain necessary administrative records. The form asks for your clear consent to use the information for that purpose. Where applicable, we also rely on our legitimate interests in keeping the website and contact channel secure, preventing abuse and maintaining proportionate operational records. We do not use contact-form information for marketing unless a separate, specific opt-in is introduced later.
Sharing a story
Stories submitted through the contact form are treated as private correspondence. Submitting a story does not give Roach Cares Foundation permission to publish, quote, identify or otherwise publicise it. If we later wish to share a story publicly, we will seek separate, specific permission first.
Who may receive the information
Access is limited to authorised people who need it for Foundation work and approved service providers used to operate the website, security controls, form delivery and email. The website uses Cloudflare for website delivery and security. Cloudflare Turnstile is used for anti-spam verification when enabled. When contact-form delivery is active, approved enquiries are sent to the Foundation mailbox through the configured transactional email service, currently Resend. The Foundation does not sell personal information.
International processing
Website and email service providers may process information outside Barbados and, for some visitors, outside the European Economic Area or United Kingdom. Where GDPR or UK GDPR applies, the Foundation will use service providers with appropriate contractual data-protection terms and transfer safeguards and will keep the live provider setup under review.
How long we keep it
General website enquiries are normally reviewed for deletion within 12 months after the last substantive contact, unless the enquiry becomes part of an ongoing relationship or a longer period is reasonably required for legal, governance, safeguarding or administrative purposes. The website does not intentionally keep a duplicate database of completed form submissions. Provider delivery/security records may be retained under the approved provider terms and configured retention settings.
Security and data minimisation
We aim to collect only what is needed, keep access limited, use HTTPS and appropriate account security, avoid advertising tracking, and use privacy-conscious anti-spam controls. If unsolicited sensitive information is received, access should be restricted and it should not be forwarded unnecessarily; it will be handled under the Foundation's approved retention and privacy procedures.
Your privacy rights
Depending on the law that applies to you, you may have rights to request access, correction, deletion, restriction or portability of your personal information, or to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out lawfully and may affect our ability to continue the enquiry.
If GDPR or UK GDPR applies to you, you may also have the right to complain to the data-protection supervisory authority in the country where you live or work. Roach Cares Foundation does not use the website contact form for solely automated decisions or profiling.
Privacy questions
Use the website Contact route for a privacy question. Please do not include sensitive personal information in your initial request. The public Foundation email address is displayed only after the mailbox has passed the required launch checks.