This page explains what happens to your information when you use the Disability Positive website. It sits alongside our main privacy notice, which explains who we are, the rights you have and how to contact us about your information. You can download the main notice from our privacy notices page.
When you send us a form
Our website has forms for enquiries, referrals, applications and bookings. When you send one, it goes by email to the team that deals with it. A copy is also kept on the website, so nothing is lost if an email goes astray. Only our staff can see it.
Some referral forms let you attach documents, such as an assessment or a support plan. These go to the team with the form and are stored with the copy on the website.
If you refer someone, we email you to say we have received it. That email does not repeat anything about the person you referred.
How long we keep it on the website
We delete these from the website automatically a year after they are sent:
- Arrangement of Care and Support Service Referral Form
- Bolton Council Brokerage Referral Form
- Referral form for commissioning of advocacy services
Copies of other forms stay on the website until our staff delete them.
Some older forms on the site, such as our contact form and membership application, are run by a separate forms system.
Emails in our team inboxes are kept in line with our main privacy notice.
Checking that forms come from a person
To stop automated spam, our forms use a check called Turnstile, provided by Cloudflare. It only starts once you begin filling in a form. It looks at technical details from your browser, such as your IP address and the type of browser you use, to tell people apart from automated programs. Usually you won’t notice it. Now and then it may ask you to tick a box.
Cloudflare use this information to protect our forms and to get better at spotting automated traffic. You can read how they handle it in the Turnstile privacy addendum.
Cookies and similar technologies
When you first visit, we ask whether you are happy for us to use cookies that the site does not need in order to work. Nothing in the measuring or marketing groups below runs until you say yes. If you say no, or don’t answer, the website still works and you won’t miss anything.
You can change your mind at any time using the Cookie settings link at the bottom of every page.
Some of what we store is not a cookie. Your accessibility settings and your place in the Inclusion Health Check are kept in your own browser. They never reach us and they don’t identify you.
Strictly necessary
These make the website work. They keep it fast, keep it secure, and remember the display settings you choose. They can't be switched off, and none of them identify you.
| Name | Set by | What it does | How long it lasts |
|---|---|---|---|
dp_a11y_size, dp_a11y_font, dp_a11y_contrast | This website | Remembers the text size, typeface and contrast you chose in the accessibility toolbar. | Until you clear your browser data |
dp_hc_progress, dp_hc_result | This website | Keeps your place in the Inclusion Health Check so a refresh does not lose your answers. | Until you close the tab |
dp_cookie_consent | This website | Remembers the choice you make here, so you are not asked on every page. | Until you clear your browser data |
_lscache_vary | LiteSpeed | Tells the server which version of a page to send you. | The browsing session |
__cf_bm | Cloudflare | Tells automated traffic apart from real visitors, which keeps the site up. | 30 minutes |
Measuring how the site is used
Tells us which pages people read and how they found us, so we know what is worth improving. Say no and we simply don't count your visit.
| Name | Set by | What it does | How long it lasts |
|---|---|---|---|
_ga, _ga_* | Google Analytics | Counts visits and shows which pages are read. Set only if you agree. | Up to 2 years |
Marketing and advertising
Used to understand whether our campaigns reached the right people. These are set by other companies and can follow you to other websites.
| Name | Set by | What it does | How long it lasts |
|---|---|---|---|
__hstc, __hssc, __hssrc, hubspotutk | HubSpot | Recognises returning visitors across our pages. Set only if you agree. | Up to 6 months |
_fbp, _fbc | Meta (Facebook and Instagram) | Shows us whether people who saw our adverts on Facebook or Instagram went on to visit the site or send an enquiry. If you use Facebook or Instagram in the same browser, Meta can link the visit to your account. Set only if you agree. | Up to 3 months |
Measuring visits
If you agree to cookies that measure how the site is used, Google Analytics counts your visit and the pages you read. We use it to see which pages are useful and which aren’t. We don’t use it to identify anyone.
Our adverts on Facebook and Instagram
We advertise some of our services on Facebook and Instagram. If you agree to marketing cookies, our website tells Meta, the company behind Facebook and Instagram, when you visit one of our pages. It also tells Meta when you send one of the enquiry forms on our advert pages. We never send what you wrote in the form.
This shows us whether our adverts reach people who go on to get in touch. If you use Facebook or Instagram in the same browser, Meta can link your visit to your account and may use it for its own advertising. Disability Positive and Meta are joint controllers for collecting this information and sending it to Meta. After that, Meta decides what happens to it, as explained in Meta’s privacy policy.
We don’t use this on our referral pages, our photo permission form or our search results.
If you say no to marketing cookies, none of this happens.
HubSpot
We use HubSpot to manage some of our contacts. If you agree to marketing cookies, HubSpot recognises when you come back to our website. Our self-service help pages at support.disabilitypositive.org also run on HubSpot and have their own cookie notice.
Videos
Some pages show videos from YouTube and Vimeo. They are set up so that YouTube does not set cookies until you press play, and Vimeo does not track you. Once you press play, the provider’s own privacy policy applies.
Our typeface
The website’s typeface, Maven Pro, is loaded from Google Fonts. To show it, your browser asks Google’s servers for the font, so Google receives your IP address. No cookie is set.
Accessibility tools
The text size, typeface and contrast you choose in our accessibility toolbar are remembered in your browser, so you don’t have to set them on every page.
If you use the Recite Me toolbar, it loads from Recite Me’s servers and remembers whether you left it switched on.
The Inclusion Health Check
Our Inclusion Health Check asks employers about how their organisation works and suggests services that might help. Your answers stay in your browser while you go through it. We only ask for contact details at the end, and only if you would like us to follow up. If you give them, we email you your results, let our business team know, and keep a copy on the website.
Becoming a member
When you apply for membership through our website, we create an account for you on the site so you can sign in. The account holds the details you give on the form.
Our service finder
Our service finder suggests services that might help, based on what you type. It works by matching your words against our own list of services, on our own website. What you type isn’t stored and isn’t sent to anyone else.
Who helps us run the website
These organisations work on our instructions. They can’t use your information for their own purposes, apart from where we have said so above.
- Our hosting company, which stores the website in the UK.
- Cloudflare, which delivers the website to you and protects it from attack.
- A content delivery network, which delivers our images.
- Brevo, which sends the emails the website sends.
- Google, for Google Analytics, if you agree to it.
We can tell you more about any of them if you ask.
Changes to this page
We update this page when the website changes. It was last updated on 7 October 2026.