Privacy

Privacy & cookies

This independent educational website is designed to collect as little personal information as possible. Limited Google Analytics is used only for service statistics and improvement; advertising and personalisation features are disabled, and visitors can turn analytics off.

Last reviewed 27 July 2026.

Who is responsible

Professor Alasdair MacLullich is the data controller for information sent directly through this independently maintained website. University and NHS affiliations are provided for identification; this is not an official University of Edinburgh or NHS Lothian website. Privacy enquiries can be sent to a.maclullich@ed.ac.uk.

Information processed

• Messages you choose to send. If you email a correction, suggestion or question, the email address, name and message content you provide are processed so the submission can be assessed and answered.
• Basic technical logs. The hosting provider may process IP address, browser/device information, requested pages, timestamps and security events to deliver, secure and troubleshoot the site.
• Limited aggregate usage information. Unless you turn analytics off, Google Analytics receives page views and limited broad actions such as use of a filter, whether a directory search returned results and the role of an external resource link. The site does not send the words typed into directory search, patient information or email content.

Do not send confidential, special-category or patient-identifiable information. This website is not a clinical service.

Purpose and lawful basis

Correspondence is processed for the legitimate interests of maintaining an accurate educational resource and responding to contributors. Technical logs are processed for the legitimate interests of reliable delivery, fraud prevention and security. Limited analytics relies on the statistical purposes exception in the Privacy and Electronic Communications Regulations and the legitimate interest in understanding and improving this free public-information service. You can object free of charge and turn it off at any time. Information will not be sold or used by this site for advertising.

Sharing, processors and transfers

Website hosting and security are provided through 10Web and its infrastructure providers. Limited analytics is provided by Google solely to understand and improve this site. Email is handled through the University of Edinburgh email service. These providers may operate infrastructure outside the UK; their applicable contractual and transfer safeguards govern their processing. Information may also be disclosed where required by law or to protect the security of the service.

Retention

Feedback correspondence is kept only while it is needed to assess the submission, maintain an audit trail and respond, normally no longer than 24 months unless the exchange becomes part of a longer-running correction record. Hosting, security and analytics data are retained according to the relevant provider and account settings. They are not used by this site to build individual clinical profiles.

Cookies

Limited analytics is on when a page loads unless you object. The site stores the choice in the browser under dt_consent. Google Analytics may set cookies beginning _ga, limited by this site to 90 days. If analytics is turned off, those cookies are removed and Google Analytics is not loaded on later pages. WordPress, 10Web or security services may still use storage that is strictly necessary for administration, security or load balancing. Public pages do not require an account.

Free-text directory searches are not retained in the page address and are removed from the location reported with an analytics page view. The custom search event records only a broad query-length band and whether the search returned any profiles.

Change my cookie choice

You can also delete or block cookies in the browser. See the Information Commissioner’s guidance on cookies and Google’s information about Analytics data safeguards.

Your rights

Depending on the circumstances, UK data-protection law gives you rights to access, correct or erase personal information, restrict or object to processing, and receive information about how it is used. To exercise a right, email the address above. You may also complain to the UK Information Commissioner’s Office.