Last updated: 5 October 2026

The Global Osteoporosis Foundation ("GOF", "we", "us", registered charity no. 1194121) is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are and how to contact us

The Global Osteoporosis Foundation is the data controller for the personal information processed through www.thesticksandstones.org.

• Email: info@thesticksandstones.org
• Registered charity address: Global Osteoporosis Foundation, 10239445, England and Wales.

2. Information we collect and why

A. Health Questionnaire ("Test Yourself")

When you complete our online bone health questionnaire:

• Special category (health) data: We process your responses (such as age, fracture history, and lifestyle factors) solely to calculate and display your personalized bone health awareness score.
• Lawful basis: Explicit consent (Article 6(1)(a) and Article 9(2)(a) UK GDPR), which you provide before starting the questionnaire.
• Email address: Providing your email address is entirely optional. It is requested after results are generated so you can receive a copy of your summary.

B. Website usage and cookies

We use essential cookies to keep form sessions working properly, and analytics cookies (such as Google Analytics 4) to understand how our website is used. Non-essential analytics cookies are only set if you explicitly grant consent through our cookie banner. See our Cookie Policy for details.

3. How long we keep your data

Questionnaire responses submitted without an email address are processed during your browser session and not retained against your identity. If you opt in to receive your results by email, we retain your email address and result summary in accordance with our retention policy or until you request deletion.

4. Sharing your information

We do not sell, rent, or trade your personal or health data. We only share information with secure service providers (such as website hosting and email delivery services) acting strictly on our instructions under data processing agreements.

5. Your legal rights

Under UK data protection law, you have rights including:

• Access: The right to request copies of your personal data.
• Rectification: The right to ask us to correct inaccurate data.
• Erasure: The right to ask us to delete your personal data.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@thesticksandstones.org.

6. How to complain

If you have concerns about our use of your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint/
• Helpline: 0303 123 1113