Privacy Policy
Last updated: July 31, 2026
1. Introduction
Down Together is an educational website dedicated to providing verified information about Down Syndrome for families, educators, and professionals. This privacy policy explains how we collect, use, and protect your personal data.
Data Controller: Down Together
Contact Email: [email protected]
2. Data We Collect
2.1 Data collected automatically
When you visit our site, we automatically collect:
- Device information: Browser type, operating system, IP address
- Navigation information: Pages visited, time on site, links clicked
- Location information: Country and region (based on IP)
- Cookies and similar technologies: Identifiers to remember preferences
2.2 Data you provide voluntarily
If you choose to interact with us:
- Newsletter subscription: Your email address
- Contact forms: Name, email, message
- Comments: Name and comment content
2.3 Data we do NOT collect
- ❌ We do not collect personal health or medical information
- ❌ We do not collect biometric data
- ❌ We do not specifically collect data about minors
- ❌ We do not sell your data to third parties
3. Legal Basis for Processing
We process your data under the following legal bases:
- Consent: For Google Analytics and Cloudflare Insights (only with your consent)
- Legitimate interest: To improve our service and security
- Legal obligation: To comply with data protection laws
4. Cookies and Tracking Technologies
4.1 Types of cookies we use
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
cookie-consent | Essential | Remember your cookie decision | 1 year |
_ga | Analytics | Google Analytics (consent only) | 2 years |
__cfruid | Security | Cloudflare (essential protection) | Session |
theme | Preference | Remember light/dark mode | 1 year |
4.2 Managing cookies
You can:
- Accept or reject cookies in the consent banner
- Change settings at any time
- Use your browser’s controls to block cookies
- Opt out of Google Analytics
5. Third-Party Services
5.1 Google Analytics 4
- Purpose: Measure site traffic and user behavior
- Data shared: Anonymous user ID, pages visited, session duration
- Privacy: Google processes data under their own terms
- Opt-out: You can opt out in the consent banner
5.2 Cloudflare
- Purpose: Secure site delivery, DDoS protection
- Data shared: IP address, HTTP request information
- Privacy: Cloudflare is a data processor under GDPR
5.3 Google Fonts
- Purpose: Serve typeface fonts
- Data shared: IP address (standard HTTP)
- Privacy: Google does not use data for profiling
6. User Rights (GDPR/CCPA)
6.1 Your rights under GDPR (applies to EU users)
You have the right to:
- Access: Know what data we have about you
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data (“right to be forgotten”)
- Restriction: Limit how we use your data
- Portability: Receive your data in readable format
- Objection: Object to certain uses of your data
6.2 Your rights under CCPA (applies to California residents)
- Right to know what data is collected
- Right to delete personal data
- Right to opt out of data sales
- Right to non-discrimination
6.3 How to exercise your rights
To exercise any of these rights, contact:
Email: [email protected]
Subject: “GDPR/CCPA Rights Request”
We will respond within 30 days.
7. Data Security
7.1 Security measures
- ✅ HTTPS encrypted connection (SSL/TLS)
- ✅ Security headers implemented
- ✅ Content Security Policy activated
- ✅ Protection against XSS and CSRF attacks
- ✅ Limited data access
7.2 Data retention
- Analytics data: 26-month automatic retention (Google Analytics)
- Newsletter: Until you unsubscribe
- Comments: Indefinitely (or until deletion requested)
- Server logs: Maximum 30 days
8. Minors
- This site is NOT directed at minors under 16 years old
- We do not intentionally collect data from minors
- If we discover we collected a minor’s data, we will delete it immediately
- Parents/guardians can contact us to request deletion
9. Changes to This Policy
We may update this policy occasionally. Significant changes will be announced on the site. Your continued use of the site constitutes acceptance of changes.
Change history:
- July 31, 2026: Initial version
10. Contact
If you have questions about this privacy policy:
Down Together
Email: [email protected]
Website: https://downtogether.org
11. Supervisory Authorities
If you believe your privacy has been violated, you can file a complaint with:
-
Spain: Spanish Data Protection Authority (AEPD)
https://www.aepd.es -
Mexico: National Institute of Transparency, Access to Information and Data Protection (INAI)
https://www.inai.org.mx -
Argentina: Public Information Access Agency (AAIP)
https://www.argentina.gob.ar/aaip -
EU General: Your local data protection authority
This privacy policy is also available in Español