Legal
Version 1.0 · Last updated 29 May 2026
SurgAtlas is a surgical education platform created and operated by Dr. Ali Heidari. For the purposes of data protection law, Dr. Ali Heidari is the data controller for personal data collected through the Platform. Contact: aliheydari92@gmail.com
We collect the following personal data when you use SurgAtlas:
We do not collect payment card data directly. Payments, if applicable, are processed by Stripe, which has its own privacy policy.
We use your data to provide, maintain, and improve the SurgAtlas service; send you account-related emails such as welcome emails and email verification; send optional weekly progress digests and exam reminders, which you can unsubscribe from at any time; generate personalised performance analytics and revision recommendations; ensure the security and integrity of the Platform; and comply with legal obligations. We do not use your data for advertising or sell it to third parties.
We process your personal data under the following lawful bases. Contract: processing necessary to provide the service you have signed up for. Legitimate interests: analytics to improve the Platform and security monitoring. Consent: sending optional marketing or digest emails, which you may withdraw at any time.
We share your data only with the following third-party service providers, strictly as necessary to operate the Platform:
All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it for longer. Anonymised, aggregated analytics data that cannot identify you may be retained indefinitely to improve the Platform.
Under UK GDPR, you have the following rights: the right to access a copy of the personal data we hold about you; the right to rectification of inaccurate data; the right to erasure of your personal data; the right to restriction of processing; the right to data portability; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time for processing based on consent.
To exercise any of these rights, contact us at aliheydari92@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
SurgAtlas uses a required authentication session cookie that keeps you logged in, and optional preference cookies that remember display settings such as font size. We do not use advertising or tracking cookies. You can manage cookies through your browser settings.
Some of our service providers, including Anthropic and Vercel, may process data outside the UK and EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office.
SurgAtlas is intended for medical professionals and students aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has registered on the Platform, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The date of the most recent revision appears at the top of this page.
Dr. Ali Heidari
SurgAtlas
aliheydari92@gmail.com