Privacy notice

Last updated 27 August 2026

Supporting Children with Diabetes ("SCD", "we", "us") provides phones, laptops and other practical items to families of children with Type 1 Diabetes who are in financial hardship. To do that we have to handle personal information about children, their families and the NHS staff who refer them.

This notice explains what we collect, why, who we share it with and what rights you have. We are the data controller for this information.

Who this notice covers

It applies to three groups of people:

• Children referred to us and their parents or guardians.
• NHS staff who make referrals - nurses, doctors, dietitians and social workers.
• Supporters who contact us or sign up to our newsletter.

What we collect, and why

When an NHS professional refers a child

The referral form asks for:

• the referrer's name, role, NHS trust, email address and phone number
• the child's name and date of birth
• the fact that the child has Type 1 Diabetes, and which glucose monitor they use
• the parent or guardian's name, phone number and email address
• the family's home address
• which means-tested benefits the family receives
• what is being asked for and why

We use this to decide whether we can help, to check the request is not a duplicate of an earlier one, and to get the item to the family.

Information about health, and about financial hardship

Information about a child's diabetes is special category data under the UK GDPR, and information about benefits reveals financial hardship. Both are handled with particular care.

Our lawful basis for processing personal data is legitimate interests (Article 6(1)(f)) - we cannot assess or fulfil a request without it. For health information we rely on Article 9(2)(d), which permits a not-for-profit body to process such data about people connected with its purposes, and on the explicit consent the family gives to their referrer before the form is submitted. The referrer confirms that consent has been obtained as part of the referral.

When you contact us or subscribe

We keep your name and email address so we can reply, or send the newsletter you asked for. You can unsubscribe at any time using the link in any email.

Who we share it with

We do not sell personal information, and we do not share it for marketing. We share only what is necessary, with:

• Our trustees, who review each referral.
• The person who dispatches items, who receives the delivery address and a contact phone number so the item can be posted. They are not given the family's financial or medical information.
• Our suppliers, who process data on our behalf under contract: monday.com (our application records), Slack (how trustees review referrals), Resend (email), and Vercel and Upstash (hosting and secure storage of the website).

Some of these suppliers are based outside the UK. Where information is transferred abroad it is protected by the safeguards required by UK data protection law, such as the International Data Transfer Agreement or UK Addendum.

We may also disclose information where the law requires it, or where there is a safeguarding concern about a child.

How long we keep it

• Referral records are kept for seven years after the application closes. We need them to check for duplicate applications, to answer questions from families and referrers, and to meet our accounting and reporting obligations as a charity.
• Referral form links expire after seven days and are deleted once used.
• Newsletter details are kept until you unsubscribe.

How we protect it

• The referral form can only be opened through a one-time link sent to a verified NHS email address.
• A family's address, contact details and benefits are never posted into our shared Slack channels. Trustees see them only by opening the individual record.
• Access to application records is limited to trustees.
• Information is encrypted in transit and at rest by our suppliers.

Your rights

You have the right to:

• ask for a copy of the information we hold about you
• have inaccurate information corrected
• ask us to delete information, where we no longer need it
• ask us to restrict how we use it
• object to our processing, including for direct marketing
• ask for your information in a portable format
• withdraw consent at any time, where we relied on it

A parent or guardian can exercise these rights on behalf of their child. To do any of this, email info@scdcharity.org. We will respond within one month.

Cookies

This website does not use advertising or tracking cookies, and does not profile visitors. We use only what is necessary for the site to work, such as keeping a referral form link valid while it is being completed.

Complaints

If you are unhappy with how we have handled your information, please tell us first at info@scdcharity.org so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

Changes to this notice

We will update this page if how we handle information changes, and the date at the top will change with it.

Back to the homepage