Privacy

Privacy & cookies

This independent educational website is designed to collect as little personal information as possible. No advertising, behavioural tracking or analytics cookies are enabled by the site at launch.

Last reviewed 15 July 2026.

Who is responsible

Professor Alasdair MacLullich is the data controller for information sent directly through this independently maintained website. University and NHS affiliations are provided for identification; this is not an official University of Edinburgh or NHS Lothian website. Privacy enquiries can be sent to a.maclullich@ed.ac.uk.

Information processed

• Messages you choose to send. If you email a correction, suggestion or question, the email address, name and message content you provide are processed so the submission can be assessed and answered.
• Basic technical logs. The hosting provider may process IP address, browser/device information, requested pages, timestamps and security events to deliver, secure and troubleshoot the site.

Do not send confidential, special-category or patient-identifiable information. This website is not a clinical service.

Purpose and lawful basis

Correspondence is processed for the legitimate interests of maintaining an accurate educational resource and responding to contributors. Technical logs are processed for the legitimate interests of reliable delivery, fraud prevention and security. Information will not be used for marketing or sold.

Sharing, processors and transfers

Website hosting and security are provided through 10Web and its infrastructure providers. Email is handled through the University of Edinburgh email service. These providers process information only as needed to deliver their services and may operate infrastructure outside the UK; where relevant, their contractual safeguards apply. Information may also be disclosed where required by law or to protect the security of the service.

Retention

Feedback correspondence is kept only while it is needed to assess the submission, maintain an audit trail and respond, normally no longer than 24 months unless the exchange becomes part of a longer-running correction record. Hosting and security logs are kept according to the provider’s operational retention periods and are not used by this site for profiling.

Cookies

The published site does not intentionally set analytics, advertising or social-media cookies. WordPress, the host or security services may use strictly necessary cookies for administration, security or load balancing. Public pages do not require an account. If non-essential analytics or embedded services are added later, this notice and the consent controls will be updated before they are enabled.

Your rights

Depending on the circumstances, UK data-protection law gives you rights to access, correct or erase personal information, restrict or object to processing, and receive information about how it is used. To exercise a right, email the address above. You may also complain to the UK Information Commissioner’s Office.