Last reviewed: 9 September 2026.
Who is responsible
Dr N Aziz, publisher and editor of SAS Doctors Review, is the data controller for personal information sent directly to the publication. Privacy requests can be sent to editor@sasdoctors.com.
Browser-only learning records
If a reader permits optional browser storage, learning progress, knowledge-check scores and entries they explicitly choose to save remain in local storage in that browser profile. They do not follow the reader to another browser or device, and the website operator cannot view or recover them. Readers can decline this storage and still use the content and assessments. Choosing “essential only” removes the optional SAS Doctors Review records listed in the cookie and browser-storage notice.
Purpose, legal basis and your choice
Aggregate statistics are used solely to improve and maintain the publication. Optional statistics are off until the reader gives consent in privacy settings. Consent is the basis for the optional statistical activity and can be withdrawn at any time. Necessary hosting and security processing is separate and relies on legitimate interests in delivering and protecting the service. Clear information is provided and every reader can object free of charge by selecting essential only or turning off anonymous statistics in cookie settings. The site continues to work after an objection.
Email and editorial correspondence
If you email the publication, Microsoft 365 processes your email address, message, technical delivery information and any attachments you choose to send. This information is used to respond, assess corrections or contributions, and maintain necessary editorial records. The usual lawful basis is legitimate interests in operating an independent professional publication. A legal obligation, contract or consent may apply in a particular context.
Routine enquiries are normally deleted within 12 months after resolution. Records needed to document a correction, publication decision, permission, rights agreement, complaint or dispute may be retained for up to six years where necessary and proportionate.
Sharing and international processing
Information may be processed by providers used for email, hosting, security and technical operation, and disclosed where required by law or necessary to establish, exercise or defend legal rights. It is not sold. Providers may process information outside the UK using applicable contractual and legal safeguards.
Your rights
Depending on the circumstances, you may have rights to access, correct or erase personal information, restrict processing, object to processing, or receive portable information. These rights are not absolute. Email editor@sasdoctors.com to make a request. You may also complain to the Information Commissioner’s Office ↗.
Corrections and source checks
Read the corrections and review information for material corrections and the distinction between publication, update, effective and substantive source-check dates.
Protected editorial access and security records
The editorial area uses ChatGPT sign-in and a server-side allowlist. When a signed-in account that is not authorised attempts to open the editorial desk, the site records the date, requested editorial route, a shortened cryptographic account reference and a masked email address. It does not store the attempted password, IP address or browser history. These records are used only to protect the publication, are visible only to authorised editors and are removed after 13 months. The lawful basis is legitimate interests in securing the service.
Email verification for handbook downloads
Reading is open access. To download a complete book, request a one-time code by email. Name is optional and is used only in that email. Resend processes the email delivery; Cloudflare Turnstile checks the request for abuse. We store keyed hashes for rate limiting and codes, and an anonymous download grant, not a reader profile or a mailing list. A necessary Secure, HttpOnly cookie gives this browser access for 24 hours. Codes expire after 10 minutes and have five attempts. Expired verification, grant and rate-limit records are removed on subsequent code requests. The email delivery provider and hosting provider may retain operational and security logs under their policies. We do not retain your name or email in the reader database. Download verification does not create an account or enable access to staff areas. Clear this site’s cookies after using a shared computer. For privacy questions contact editor@sasdoctors.com.
Statistics, service monitoring and security
Optional statistics use a 24-hour cookie and daily protected browser identifiers to estimate browser-days, alongside aggregate page and feature use. Essential security and service records cover verification, download file responses and Christine outcomes, costs and limited protected identifiers. The authenticated site owner alone can access the reports. We do not routinely save chat transcripts, raw questions, readable email addresses or raw IP addresses in these reporting tables. Security detail is retained for 30 days, AI outcomes and feedback for 40 days, owner audit for 90 days and aggregate trends for 397 days. Housekeeping is activity-driven, with an owner cleanup control. For the purposes, choices, lawful basis and retention details, read /privacy/monitoring.