Privacy Policy

Who we are

This website is the official website of The THOMAS Project. We are a Charity, registered in the UK as the “FAMILY GUIDANCE AND COMMUNITY WELFARE” (Charity Number 1082423)

Our website address is:

The THOMAS Project
196H Walsall Wood Road
West Midlands

What personal data we collect and why we collect it


When visitors leave comments using the comments form on the site we collect the data shown on the forms, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: After approval of your comment,
your profile picture is visible to the public in the context of your comment.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

When visitors use the Contact Us form on the site we collect the data shown on the forms, along with meta information about the submissions, including the time stamp, the origin IP address, and the user agent (browser).

When you use the Contact Form, this information is sent to [email protected] and is also stored on our server using the Flamingo plugin. It is stored in order that we can read and reply to the messages you send, and is kept for as long as necessary to deal with your enquiry.

Additionally, we use Google reCAPTCHA techology to help fight spam. Our site has implemented the invisible reCAPTCHA technology and your use of the contact form is therefore subject to the Google’s Privacy Policy and Terms of Use.

We also use MailChimp to manage our mailing list. If you sign up to our mailing list, you are bound by MailChimp’s legal policies.


If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

We also use the following third-party services which also require the use of cookies to operate.

Cloudflare—Our website uses the Cloudflare caching and content delivery network to serve content to this site. This is integral to the functionality of the website, and the website will not function correctly without this technology. Cloudflare use cookies, including anonymous analytics cookies in order to provide this service. Your use of this site is therefore governed by Cloudflare’s cookie policy.

Google—We use Google services including Google reCAPTCHA, Google Maps APIs, Google Advertising Cookies, and Google Analytics. By using this site, you are bound by Google’s Privacy Policy and Terms of Use.

Automatic—This website is powered by WordPress, and supplemented by JetPack. This includes anonymous analytics cookies, anonymous spam blocking cookies, and caching and content delivery. Automatic Inc. is the parent company of WordPress and JetPack, and by using this site, you are bound by Automatic’s Cookie Policy and Privacy Policy.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


We use both Google and Jetpack for Analytics. These services may embed anonymised tracking cookies on your website which help us to understand how you found our site, what you did while you were here, and how you interacted with it. This is relatively anonymous and cannot be traced to you personally, but does include information like your broad geographic location, your web browser and operating system, and the technical
capabilities of the same. This helps us improve and refine our website, and ensure it is functional and relevant.

Most web browsers offer an option to disable analytics and marketing cookies, and you can find out how to do so here: Insites “Cookies and You”

If you disable Third Party, or All cookies, you may find that the website does not function properly. However, if you do not, you are bound by Google’s Privacy Policy and Terms of Use and Automatic’s Cookie Policy and Privacy Policy.

Who we share your data with

Aside from the third-party companies listed above, for the purposes listed above, your data is not sold to any third party for marketing purposes. At various times, in order to deliver our services and to comply with our legal obligations, we may be required to share select information with our partner organisations, or other selected third parties. You can find out a list of organisations we partner with here. While your agreement to this policy constitutes your consent to this, in addition, your information may also shared under either of the following lawful basis for processing your data.

1: Legal obligation
2: Legitimate interests

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

For all other information, your data is held for as long as is required for us to legitimately carry out the required tasks. This generally ranges from as short as the length of your visit, to as long as indefinitely, depending on the particular information stored. According to the general provisions of GDPR, individual pieces of personally identifiable information may assessed on a per case basis, and stored for only as long as is deemed necessary for the
purposes in which we store and process it.

Because of this fact, and the varied nature of our organisation, it would be impossible to detail each use case, and therefore, if you have any queries about the data we hold on you, and the reasons for our decision to hold it, please contact us.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

We cannot provide any anonymised data, such as tracking information, collected, as it is not personally identifiable to you, nor can this be erased by ourselves or third parties, but in most cases, you can reset your browser tracking ID, set a “Do Not Track” flag, and remove any cookies stored on your machine yourself.

Where we send your data

Visitor comments may be checked through the spam detection services described above.

Any information sent via our contact form is transmitted over the internet using industry standard mail relays. We use SendMail and Google mail relays for our mail services, but our communications with you may pass through any number of other services, depending on your email provider. Email is not a secure communication method, and while we take every care to safeguard your data, no private or confidential information should be sent via our contact form, or using our email addresses. Any information sent via email may leave the EU, and be processed on servers in any country in the world.

Our web server is located in the USA, and any and all data held on the server is subject to the Federal laws of the United States, and local laws of Nevada and California, where our servers are co-located. Any information held on our server may be subpoenaed by the federal or state governments where they are located, but would only be given out where a valid warrant is provided.

Anonymised data may also be shared with third party advertising and analytics companies, described above.

Our contact information

Any queries about your legal rights described in this policy should be addressed to us, in writing. This can be done either by postal, or electronic mail, however, we recommend that issues related specifically to online privacy should ideally be addressed by post.

Our physical mailing address is:
The THOMAS Project
196H Walsall Wood Road
West Midlands

For any other queries, you can email [email protected]

You may call us on 01922 452213 for general enquiries and advice, but for all data protection subject access requests, to request removal or amendment of any data we hold on you, or to discuss you legal rights with regards to privacy and the data we store, your request must ultimately be made in writing.