Who we are
This website is the official website of The THOMAS Project. We are a Charity, registered in the UK as the “FAMILY GUIDANCE AND COMMUNITY WELFARE” (Charity Number 1082423)
Our website address is: https://thethomasproject.co.uk.
The THOMAS Project
196H Walsall Wood Road
What personal data we collect and why we collect it
When visitors leave comments using the comments form on the site we collect the data shown on the forms, and also the visitor’s IP address and browser user agent string to help spam detection.
your profile picture is visible to the public in the context of your comment.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
When visitors use the Contact Us form on the site we collect the data shown on the forms, along with meta information about the submissions, including the time stamp, the origin IP address, and the user agent (browser).
When you use the Contact Form, this information is sent to [email protected] and is also stored on our server using the Flamingo plugin. It is stored in order that we can read and reply to the messages you send, and is kept for as long as necessary to deal with your enquiry.
We also use MailChimp to manage our mailing list. If you sign up to our mailing list, you are bound by MailChimp’s legal policies.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
We use both Google and Jetpack for Analytics. These services may embed anonymised tracking cookies on your website which help us to understand how you found our site, what you did while you were here, and how you interacted with it. This is relatively anonymous and cannot be traced to you personally, but does include information like your broad geographic location, your web browser and operating system, and the technical
capabilities of the same. This helps us improve and refine our website, and ensure it is functional and relevant.
Most web browsers offer an option to disable analytics and marketing cookies, and you can find out how to do so here: Insites “Cookies and You”
Who we share your data with
Aside from the third-party companies listed above, for the purposes listed above, your data is not sold to any third party for marketing purposes. At various times, in order to deliver our services and to comply with our legal obligations, we may be required to share select information with our partner organisations, or other selected third parties. You can find out a list of organisations we partner with here. While your agreement to this policy constitutes your consent to this, in addition, your information may also shared under either of the following lawful basis for processing your data.
1: Legal obligation
2: Legitimate interests
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
For all other information, your data is held for as long as is required for us to legitimately carry out the required tasks. This generally ranges from as short as the length of your visit, to as long as indefinitely, depending on the particular information stored. According to the general provisions of GDPR, individual pieces of personally identifiable information may assessed on a per case basis, and stored for only as long as is deemed necessary for the
purposes in which we store and process it.
Because of this fact, and the varied nature of our organisation, it would be impossible to detail each use case, and therefore, if you have any queries about the data we hold on you, and the reasons for our decision to hold it, please contact us.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
We cannot provide any anonymised data, such as tracking information, collected, as it is not personally identifiable to you, nor can this be erased by ourselves or third parties, but in most cases, you can reset your browser tracking ID, set a “Do Not Track” flag, and remove any cookies stored on your machine yourself.
Where we send your data
Visitor comments may be checked through the spam detection services described above.
Any information sent via our contact form is transmitted over the internet using industry standard mail relays. We use SendMail and Google mail relays for our mail services, but our communications with you may pass through any number of other services, depending on your email provider. Email is not a secure communication method, and while we take every care to safeguard your data, no private or confidential information should be sent via our contact form, or using our email addresses. Any information sent via email may leave the EU, and be processed on servers in any country in the world.
Our web server is located in the USA, and any and all data held on the server is subject to the Federal laws of the United States, and local laws of Nevada and California, where our servers are co-located. Any information held on our server may be subpoenaed by the federal or state governments where they are located, but would only be given out where a valid warrant is provided.
Anonymised data may also be shared with third party advertising and analytics companies, described above.
Our contact information
Any queries about your legal rights described in this policy should be addressed to us, in writing. This can be done either by postal, or electronic mail, however, we recommend that issues related specifically to online privacy should ideally be addressed by post.
Our physical mailing address is:
The THOMAS Project
196H Walsall Wood Road
For any other queries, you can email [email protected]
You may call us on 01922 452213 for general enquiries and advice, but for all data protection subject access requests, to request removal or amendment of any data we hold on you, or to discuss you legal rights with regards to privacy and the data we store, your request must ultimately be made in writing.