Privacy Notice

How The BEmet Project handles your personal information.

This notice describes how The BEmet Project handles personal information collected through bemet.co.uk. It does not cover any separate therapeutic relationship a visitor may engage in with a practitioner. That relationship has its own contract and privacy policy, provided directly when the work begins.

The data controller for personal information processed through this site is Caroline Cowley, trading as Caroline Cowley Counselling. This is in line with the UK General Data Protection Regulation and the Data Protection Act 2018. Questions about this notice can be sent through the Contact page.

Visiting the site

bemet.co.uk is hosted on Cloudflare Workers. The BEmet Project does not collect any personal data when someone visits the site. There are no analytics tools, advertising tags, or third-party trackers.

Cloudflare, the hosting provider, processes standard internet log information, such as IP address, browser type, and page requested, for security and operational purposes. This is not used to identify individual visitors and is not shared with anyone else. The site uses full SSL encryption. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

Cloudflare may set a short-lived operational cookie (typically named __cf_bm) to distinguish humans from bots. It contains no personal information and is not used for tracking. The BEmet Project does not set any cookies of its own.

Fonts are served from bemet.co.uk directly. No external font providers are used.

Downloadable resources

Guides and resources are delivered directly to the visitor's device via Cloudflare. The BEmet Project does not record who downloads what.

Getting in touch

Enquiries reach The BEmet Project through the contact form on the Contact page, or by email to hello@carolinecowley.uk. Either way, messages are delivered to a private Google Workspace inbox secured by two-factor authentication. Google's privacy policy is available at policies.google.com/privacy.

When the contact form is used, three things happen. First, the submission is checked by Cloudflare Turnstile, a spam-prevention service that briefly processes technical information about the browser and IP address to confirm the sender is human. Second, the form's contents (name, email address, chosen topic, and message) are sent as an email to the inbox above. Third, a short automatic acknowledgement is emailed to the sender. Nothing entered into the form is stored on the website itself or in any database; the form exists only to deliver the message.

How personal information is used

When someone gets in touch, their message, name, and email address are received in the inbox above. The legal basis for processing this personal information is consent, given by sending the message. It is used only to respond to the enquiry and any follow-up.

Messages that touch on personal mental health are treated as sensitive personal data and handled confidentially.

Once an enquiry is resolved, related emails are deleted or retained only as long as reasonably needed for follow-up. Deletion can be requested at any time through the Contact page.

Data security

Messages are delivered over encrypted channels to a Google Workspace inbox, secured by two-factor authentication and accessed only on password-protected devices.

Your rights

Anyone whose personal information has been processed by The BEmet Project has the right to request deletion, restrict processing, object to use, or request a copy of personal information held. More information is available at ico.org.uk/your-data-matters.

Formal complaints about data handling can be made to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes to this notice

This notice is kept under regular review and updated whenever something material changes.

Last updated: 25 July 2026.