Last updated: September 2026 | Next review: September 2027
This page explains how DigiBete looks after your information when you visit our website. We want you to feel safe, informed, and in control.
If anything here is confusing, you can ask a parent, carer, or teacher to help — or contact us and we'll explain.
1) Best interests of the child
Your safety and wellbeing come first.
When we design and run our website, we always think about what is best for children and young people. We only use information in ways that are fair, safe, and appropriate. We take safety and safeguarding very seriously and you can read our Safeguarding Policy by clicking here.
2) Data Protection Impact Assessments (DPIAs)
Before we introduce new features or technology, we check:
· Could this affect children's privacy?
· Is it safe?
· How can we reduce risks?
This is called a Data Protection Impact Assessment, and it helps us protect you if something we change in our technology could be a risk to you.
3) Age-appropriate application
Our website is for a wide audience, including young people and families.
We design content and privacy information so it is:
· Easy to understand
· Suitable for different ages
· Supportive for children managing diabetes
4) Transparency (being open and honest)
We explain clearly:
· What information we collect
· Why we collect it
· How we use it
· Who we share it with
We do this using simple language so children and families can understand.
If something changes, we update this page so you know what's happening.
5) Detrimental use of data
We will never use your information in ways that could harm you.
For example, we do not:
· Use your data to pressure you
· Exploit your health condition
· Use information in ways that are unfair or upsetting
6) Policies and community standards
We follow strict privacy and safeguarding rules, including:
· UK GDPR
· ICO Children's Code
· NHS information governance best practice
All staff and partners must follow these standards.
Anyone who works with DigiBete must understand how to keep children's information safe.
7) Default settings (high privacy by default)
When you use our website:
· Privacy settings are automatically set to high protection
· We only collect the minimum data needed
· Analytics cookies are off unless you say yes
This helps keep you safe without you needing to change anything.
8) Data minimisation
We only collect information that we really need.
Because our website has:
· No logins
· No accounts
We usually only collect:
· Your name and email (if you contact us)
· Your message
· Basic website usage data (like pages visited)
We ask you not to send health information through website forms. If you are invited to use a DigiBete care-plan or clinic service by your healthcare team or school, separate privacy notices will explain how health and care information is used within those services.
9) Data sharing
We do not sell your information.
We only share data when necessary, such as with:
· Website hosting providers
· IT and security services
· Analytics providers (if you consent)
All suppliers must protect your data.
Where children or families use DigiBete care-plan or clinic services, information may also be shared with healthcare professionals, schools, and authorised carers involved in supporting diabetes care.
If you live in England and use the DigiBete App, we also send some information about your diabetes care to NHS England every month, to help run and check a service called the National Diabetes Self-Management Digital Service. DigiBete only sends this because NHS England has asked us to — NHS England is in charge of this information once they have it. You can find out more in our Fair Processing Notice.
10) Geolocation (location data)
Our public website does not track your precise location.
We may see general location information (like country) from your IP address to help with:
· Security
· Website performance
This is not used to track you personally.
11) Parental controls
Parents and carers can:
· Help children understand privacy choices
· Manage cookie consent
· Contact us about data rights
We welcome involvement from trusted adults supporting young users.
12) Profiling
We do not profile children on our website.
This means we do not:
· Analyse behaviour to predict personal traits
· Build marketing profiles
· Target children with advertising
Google Analytics (if accepted) is used only to understand website use in general — not individuals.
13) Nudge techniques
We do not use design tricks to push you into sharing data.
· Pressure you to accept cookies
· Make “Accept” easier than “Reject”
· Use guilt or rewards to influence choices
Your decisions are respected.
14) Connected toys and devices
Our public website does not connect to smart devices or toys.
If you use the DigiBete mobile app or medical devices, those are covered by separate privacy notices provided through healthcare services.
15) Online tools (rights and controls)
You have rights over your information.
You (or your parent/carer) can ask us to:
· Show what data we hold
· Correct information
· Delete data (where possible)
· Stop certain uses
· Withdraw cookie consent
Parents and carers may also receive invitations to participate in secure care-plan workflows managed by NHS healthcare organisations using DigiBete systems.
If NHS England has information about you through the App, as explained in Section 9, they are in charge of it and can tell you about your choices for it — including something called the ‘national data opt-out’. You can find out more at nhs.uk/your-nhs-data-matters.
Contact us anytime:
Website: https://www.digibete.org/contact-us/
Email: hello@digibete.org
You can also complain to the UK Information Commissioner's Office (ICO) if you're unhappy — Website: https://www.ico.org.uk, Telephone: 0303 123 1113.
Cookies (child-friendly explanation)
Cookies are small files saved on your device.
We use:
· Necessary cookies → keep the website working
· Analytics cookies → help us improve the site (only if you say yes)
You can change your choice anytime using Cookie Settings.
Keeping your information safe
We protect your data by:
· Using secure systems
· Encrypting the website (HTTPS)
· Monitoring for security threats
If something goes wrong, we act quickly and inform people if required.
How long we keep data
We only keep information as long as needed:
· Enquiries → up to 24 months
· Security logs → up to 12 months
· Analytics → up to 14 months (usually grouped data)
Contact details
DigiBete (Data Controller)
Platform, 3rd Floor Tech Hub
New Station Street
Leeds, LS1 4JB
Data Protection Officer: John Hughes
Email: john@digibete.org
DigiBete, September 2026