In force from 7 August 2026.
AnatomyM8 and The Anatomy Purist are published by Vallace Digital Ltd, a company registered in England and Wales, company number 16925416, registered office 124 City Road, London EC1V 2NX. Vallace Digital Ltd is the data controller. You can reach us at support@anatomym8.com.
If you join the waitlist we store the email address you give us, the page you submitted it from, whether you ticked the optional marketing box, and the date. That is all. We do not ask for your name, your grade, your hospital or your specialty.
We use Vercel Web Analytics and Fathom Analytics to count visits. Both are cookieless, neither builds a profile of you or follows you across other sites, and that is why this site has no cookie banner. We see how many people read a page. We do not see who you are.
We also count how many people click through to the question bank, to the podcast, and to the platforms it is hosted on, and how many join the waiting list. These are counts of clicks and nothing more. They are not attached to a visitor, they cannot be traced back to one, and they are not linked to anything you answer in The Purist Q.
We record which episodes you told us you had heard, your two optional confidence ratings, which questions you were shown, the answer you chose for each, and how long each one took. We do not ask for your name, your email address or an account, and there is no way for us to contact you.
We also store a one way hash of your IP address and of your browser user agent. Neither can be turned back into an address or a browser. They exist so that one machine cannot create hundreds of sittings and distort the results, which would make the whole exercise worthless.
A sitting sets two cookies. One identifies your sitting so that closing the tab does not lose your place, and it expires after seven days. The other remembers the typeface, size, spacing and page colour you chose, and lasts a year. Neither is used for advertising or shared with anyone, and both exist only to deliver something you asked for, which is why they need no banner.
Answers may be used, in aggregate, in education, research and publication. Aggregate means figures such as how often a question was answered correctly by people who had heard the relevant episode compared with those who had not. Nothing published will describe an individual sitting.
The contact and error report form stores what you write, and your name and email address if you choose to give them. Both are optional and the form works without them. We also store a one-way hash of your IP address, which cannot be turned back into an IP address, and exists only to stop the form being used to send thousands of messages an hour.
If you report an error and tick the box asking to be credited, your name appears next to that entry in the public corrections log. Leave it unticked and the entry is published anonymously. You can ask us to remove your name from the log at any time, although the correction itself stays, because the point of the log is that entries are never taken down.
We hold your email on the basis of your consent under Article 6(1)(a) of the UK GDPR. Marketing email, if you opted in, is sent under your consent for the purposes of the Privacy and Electronic Communications Regulations. Analytics is carried out on the basis of our legitimate interest in knowing whether anyone is reading, balanced against a tool chosen specifically because it does not identify you. Messages sent through the form are handled on the basis of our legitimate interest in answering people who write to us and in correcting our own material.
Your email is stored with Supabase, our database provider, and sent through our email provider when the time comes. Both act on our instructions as processors. We do not sell your data, we do not share it with advertisers, and we do not pass it to anyone else.
Until you ask us to remove it, or until the waitlist has served its purpose and been closed. Every email we send carries a one click unsubscribe. Messages and error reports are kept for two years so that a correction can be traced back to what prompted it, and the rate limiting hashes are deleted after thirty days.
Purist Q answers are kept for as long as the research is running, because a study that deletes its own data cannot be checked by anybody afterwards. Since nothing in them carries your name or your email address, there is no request we could act on to find and remove a particular sitting.
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or withdraw consent at any time. Email support@anatomym8.com and we will act within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
If we change this policy we will change the date at the top and keep the previous version available on request.