Our work  /  Charity web platform

TimeOut Recovery

A gambling-harm recovery service needed one website that behaved like three local services, took referrals safely, and could be run by non-technical staff in each region. We built it in Django and host it under a signed processor agreement.

Client
Double Impact Services
Sector
Gambling harm recovery, third sector
Type
Charity web platform
Status
Live, deploy on push
Timeline
April to August 2026, ongoing support
Links
timeoutrecovery.co.uk
TimeOut Recovery homepage: support for gambling recovery, one step at a time
3 regional micro-sites from one codebase
3 layers of invisible spam defence on the referral form
0 third-party cookies: self-hosted, cookie-free analytics
1 signed data processing agreement, with retention and sub-processor lists

The brief

Calm, local and safe to ask for help.

TimeOut supports people affected by gambling in Nottingham, Nottinghamshire and North Lincolnshire, and the professionals who refer to them. Each area has its own team, phone number, logo and colour, but the charity did not want three websites to maintain.

The people arriving on the site are often in a bad place. The brief was explicit: nothing shaming, nothing that feels like a form to be processed by, and never a captcha wall between someone and help.

The TimeOut referral form with the 'would you rather talk to someone' panel

Under the bonnet

Django, PostgreSQL, Cloudflare, and paperwork that matches.

Django 6 on PostgreSQL, media on Cloudflare R2, Turnstile for bot checks and self-hosted Umami analytics so no consent banner is needed for stats. HSTS, secure cookies and a www-to-apex redirect are in code, not in someone's memory.

Deployment is a push to GitHub. A webhook on our server pulls, runs Django's deploy checks and rolls back if they fail. A signed data processing agreement names Double Impact as controller and LMC Tech as processor, with a 14-day log retention and a sub-processor list.

  • Django 6
  • PostgreSQL
  • Cloudflare R2
  • Turnstile
  • CKEditor 5
  • Umami
  • Apache
  • GitHub deploy

What it shows

  • Multi-tenant thinking without multi-tenant cost: one codebase, three services.
  • Forms designed for vulnerable users, not for the convenience of the admin.
  • GDPR handled as a deliverable: DPA, retention, cookie policy, accessibility.
  • Non-technical staff publish their own content, safely scoped to their region.
Published Android app

LODORi

A meditation app that writes and voices a personalised session in about 25 seconds. React Native, FastAPI, subscriptions, ads, safety checks, and a public release on Google Play.

AI social media manager

Social Jen

Give it one idea, a product photo or a video and it drafts, schedules and publishes to nine social networks, writes graded Etsy listings and renders your 3D models. Nothing goes out until you approve it.

E-learning platform

LMC Training platform

Safeguarding, Prevent, drug and alcohol service induction, trauma-informed practice and more, with server-marked knowledge checks, verifiable certificates, employer dashboards and Stripe seat packs.

Next step

Running a service that needs a website staff can actually run? That is the kind of platform we build.

Start a Project