What we collect, and why.

Who we are

Footnote Health publishes this website at https://footnotehealth.com. For anything about your data, write toprivacy@footnotehealth.com.

What we collect

Three things.

• Your email address, if you subscribe. The newsletter runs on Kit, which stores your address along with the date you subscribed and whether you confirmed. Sign-up is double opt-in: nothing is sent until you click the link in the confirmation email. Running a mailing list also means Kit records standard delivery and engagement information, such as whether a message was delivered, opened, or a link clicked. Kit processes all of this on our behalf under their own privacy policy.
• Whatever you put in an email to us. We keep the correspondence so we can reply and so corrections have a record.
• Standard server logs. The site is hosted on Cloudflare Pages. Cloudflare records the usual request information, such as IP address, browser type and pages requested, and uses it to serve the site, secure it against abuse, and measure traffic for its own service. We do not use it to build profiles or identify individual readers.

What we don't do

We do not use advertising trackers or behavioral advertising tools. No ad networks, no advertising pixels or behavioral tracking tools on the website, no fingerprinting, no session recording, no data brokers, and no third-party analytics tool of our own.

Cloudflare and Kit do process limited technical and subscriber information in order to operate, secure, measure and provide their services. That is the baseline for any hosted website and mailing list. We do not use that information to build behavioral profiles of readers or sell personal data.

We also do not want health information about you. Please do not email us symptoms, diagnoses or test results. We cannot advise on them, and we would rather not hold them.

Cookies

The site does not use advertising or behavioral-tracking cookies of its own. Two service providers may use cookies or similar technologies. Kit's form JavaScript is enabled on the newsletter form, and may use cookies or similar identifiers needed to recognize a subscriber and attribute a sign-up. Cloudflare may use technical or security cookies where necessary to serve and protect the site.

Affiliate links

Some outbound links may be affiliate links, which means the destination site can tell that you arrived from here, usually through a tag in the URL or a cookie they set. That happens on their site under their privacy policy, not ours, and only if you click. See ouraffiliate disclosure.

Legal basis

Where the UK or EU GDPR applies, we rely on your consent for the newsletter, and on legitimate interest in running and securing the website for server logs. You can withdraw consent at any time by unsubscribing.

How long we keep things

Unsubscribing stops future sends. It does not by itself delete your subscriber record from Kit, which retains the profile and its history until it is removed. If you want the record deleted rather than just silenced, ask us and we will handle that as a separate deletion request. Correspondence is kept while it is useful for corrections and record-keeping. Server logs are kept for as long as Cloudflare retains them under their standard retention.

Your rights

Depending on where you live, you may have the right to see the personal data we hold about you, correct it, have it deleted, object to or restrict how it is used, and receive a copy in a portable format. Residents of California and several other US states have comparable rights, including the right not to be treated differently for exercising them. Emailprivacy@footnotehealth.com and we will action it. We do not sell personal information as those laws define it.

Who else touches your data

Two companies: Cloudflare, which hosts and serves the site, and Kit, which runs the newsletter. Both process data outside your country in some cases, including in the United States, and both publish their own terms for international transfers. Each of them may in turn rely on their own subprocessors, listed in their documentation. We may also disclose information where the law requires it. Beyond that, we do not share it.

Children

This site is not directed at children under 13 and we do not knowingly collect their personal data. If you believe a child has given us something, write to us and we will delete it.

Changes

We will update this page when our practices change and revise the date at the top. Changes that materially affect subscribers will also be mentioned in the newsletter.