This notice explains what personal information the CardioMetabolic Health Foundation collects through cardiometabolic.foundation, why, and what your rights are. The short version: the website sets no cookies and runs no tracking, and we only hold information you choose to send us.
Who we are
The CardioMetabolic Health Foundation (“CarMeF”, “we”, “us”) is a charity registered with the Charity Commission for England and Wales, registration number 1216451. We are the data controller for personal information collected through this website.
For any privacy question or request, email collaborate@cardiometabolic.foundation.
We are registered with the Information Commissioner’s Office (ICO) as a data controller, registration number ZB836042.
What information we collect
When you visit the website. Like any website, our pages are delivered to your browser over the internet. To do this, our hosting provider and font provider automatically receive technical information such as your IP address, browser type and the page requested. We do not use this to identify you, and we do not see it ourselves.
When you contact us. If you email us or use the contact form, we receive your name, email address, and anything you include in your message, such as your job title, organisation or the reason you are getting in touch.
What we do not do. The website does not use cookies, analytics, advertising trackers or social media pixels. We do not ask for, and do not want to receive, information about your health through this website or by email. Please do not send us personal medical details; we are not able to give individual medical advice.
How we use it, and our lawful basis
Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for each use of your information.
| What we do | Information used | Lawful basis |
|---|
| Deliver the website securely and protect it from abuse | IP address, browser and request details | Legitimate interests: running a working, secure website |
| Reply to your email and discuss collaboration, partnership or support | Name, email, message content | Legitimate interests: responding to people who contact us |
| Keep a record of correspondence with partners and supporters | Name, email, organisation, message history | Legitimate interests: managing the charity’s relationships |
| Meet legal or regulatory obligations, e.g. to the Charity Commission | Correspondence where required | Legal obligation |
We will not add you to a mailing list or send you marketing without your consent. We never sell your information.
Who we share it with
We use a small number of service providers who process information on our behalf:
| Provider | Why | What they receive |
|---|
| Cloudflare, Inc. | Hosts and delivers the website, and protects it from attacks | Technical data from your visit (IP address, browser, pages requested) |
| Google (Google Fonts) | Supplies the typefaces the website displays | Your IP address and browser details when the fonts load |
| Web3Forms | Delivers messages sent through the website’s contact form to our inbox | Your name, email address and message |
| Our email providers | Host our email account | Emails you send us and our replies |
Some of these providers may process information outside the UK, including in the United States. Where that happens, the transfer is protected by safeguards recognised under UK law, such as the UK–US Data Bridge or the UK International Data Transfer Addendum.
We do not share your information with anyone else unless the law requires it, or you have asked us to put you in touch with a partner.
How long we keep it
- Website visit data: kept by Cloudflare and Google under their own short retention periods; we do not store it.
- Emails and correspondence: kept for up to 6 years after our last contact, then deleted.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- object to, or ask us to restrict, how we use it
- ask us to transfer it to you or another organisation
To use any of these rights, email collaborate@cardiometabolic.foundation. We will respond within one month and there is no charge.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this notice
We will update this notice if the way we handle information changes, for example if we add a newsletter sign-up or website analytics. The date below shows when it was last updated.
Last updated: 18 October 2026