Privacy policy
We collect as little as we can: what you choose to send us, and, once accounts launch, what you need to take part in the community. No advertising or analytics trackers.
Who we are
Bayabaya is a family-run website: a father's story about life with his autistic son, and a community where parents and caregivers can support each other. In this policy, "we" means the person who runs Bayabaya.
Owner to confirm: The legal name and a postal or business contact address of the person or organisation responsible for the site (the "data controller").
You can contact us about privacy using the contact form.
What we collect and why
Contact form: your name, email address and message. We use them only to read and answer your message. The message is emailed to our inbox; the website itself does not keep a copy.
Community accounts (when they launch): your email address, a display name, and your password, which WordPress stores only in scrambled (hashed) form. We use these to run your account, show your display name next to what you post, and send account emails such as verification and password reset.
What you post: discussions, replies and blog comments are public once a moderator approves them, and may appear in search engines. Your email address is never shown.
Reports: if you report a post, we keep the report so we can review it. The person reported is not told who reported them.
Technical information: like almost every website, our hosting providers automatically record basic request information (such as IP address, browser type and time) to keep the site running and secure.
Owner to confirm: The lawful basis you rely on for each of the above (for example: legitimate interests for answering messages; contract for running accounts).
What we don't do
- No advertising, and no advertising or social-media tracking.
- No analytics tools that build profiles of visitors.
- We don't sell or share your information for marketing.
- We don't load fonts or other files from third-party sites when you browse: they are served from our own site.
Who handles your information for us
The website is served by Vercel and the content system (WordPress) is hosted by Hostinger. Email is delivered through our email provider. They process information only to provide these services.
Owner to confirm: Confirm the hosting regions, the email provider, and the safeguards for any transfer outside the UK (for example, Vercel may process requests in the United States).
How long we keep it
Owner to confirm: How long contact emails stay in the inbox; how long accounts and their content are kept after someone leaves; how long reports and moderation records are kept; and the hosting log periods.
If you close your account, some public posts may stay visible with your name removed, so that conversations still make sense. You can ask us to remove specific content.
Children
Community accounts are for adults. Bayabaya is about children, so we ask everyone to avoid posting names, schools, addresses or anything else that could identify a child, and moderators may edit or remove posts that do.
Your rights
Under UK data protection law you can ask for a copy of your information, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict its use. Use the contact form and we will respond within one month.
If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes to this policy
We'll update this page when what we do changes (for example, when community accounts launch) and change the date at the top.