What we collect, and what we do not.
Short version. If you join the monthly email we store your address and, if you tell us, your stage of training. Nothing else. There are no accounts, no cookies, no advertising, and nothing is sold or shared for marketing. You can leave at any time and the record goes with you.
Who is responsible
SurgeryM8 is the data controller for this site. For anything on this page, including a request to see or delete your data, write to hello@surgerym8.com.
What we collect
Your email address, when you enter it in the newsletter form. This is the only personal data the site asks for.
Your stage of training, if you choose to tell us. It is optional, it is used to send you the part of the email that applies to you rather than all of it, and leaving it blank changes nothing except that you get the general version.
Your IP address, briefly. When you submit the form it is passed to Cloudflare Turnstile as part of checking that you are a person rather than a script. We do not store it and it is not attached to your email address.
We do not ask for your name, your hospital, your deanery, your GMC number, or anything about your training beyond the optional stage.
Why we are allowed to hold it
You gave it to us to receive a specific thing, described on the form: one email a month. That consent is the lawful basis, it covers that one purpose, and withdrawing it is a single click in any email we send.
Where it goes
Your address is stored with Resend, the service that sends the email. The hub keeps no list of its own and has no database of subscribers. Delete your record in Resend and it is gone everywhere.
The site itself runs on Vercel, which keeps short-lived server logs in the ordinary course of running a website. The bot check is Cloudflare Turnstile. Both Resend and Vercel are based in the United States, so your address is processed outside the UK under the safeguards those companies publish.
Analytics, and why there is no cookie banner
We use Fathom and Vercel Web Analytics to count visits. Neither sets a cookie, neither builds a profile, and neither can identify you. That is the whole reason this site has no consent banner: there is nothing to consent to.
How long we keep it
Until you unsubscribe, or until you ask us to delete it. We are not interested in holding addresses of people who no longer want the email, and a list padded with those is worse than a smaller honest one.
What you can ask for
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we are using it, or withdraw your consent. Email hello@surgerym8.com and we will do it. There is no form to fill in and no reason you need to give.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office. We would rather you told us first so we can put it right, but you do not have to.
Children
This site is for medical students and doctors. It is not aimed at anyone under 16 and we do not knowingly collect their data.
The other M8 sites
AnatomyM8, SkillsM8, PortfolioM8 and SimulationM8 are separate sites. Signing up here does not sign you up there, and this page covers surgerym8.com only. Each of those sites has its own privacy information.
Changes
If what we collect changes, this page changes with it rather than afterwards. Last updated 16 August 2026.