Privacy & Cookie Policy
How the Cyprus Medical Society UK looks after your information. Last updated 16 May 2026.
This policy explains what personal information the Cyprus Medical Society UK ("Cyprus Medical Society UK", "we", "us") collects when you create a membership account, how we use it, and the rights you have over it. We are the data controller for this information.
Information we collect
When you register and maintain a membership account, we collect:
- Account details — your email address and a password (stored encrypted; we never see it).
- Identity — title, first name and surname.
- Professional details — whether you are a medical student or doctor; for students, your medical school and year of study; for doctors, your specialty, grade, NHS trust or health board and GMC registration number.
- Profile details — city, graduation year, mentorship preference, a short bio, areas of interest, an optional professional link, and an optional profile photo.
- Preferences — whether you wish to appear in the member directory, show your email there, and whether you wish to receive our newsletter.
Why we use it, and our lawful basis
We use your information to administer your membership, operate the member directory, run mentorship and community activities, and — only if you opt in — send you our newsletter and updates. Our lawful basis is your consent, which you give at sign-up and can withdraw at any time, and our legitimate interest in running the society for its members.
The member directory
The directory is only visible to signed-in members. You are not listed unless you choose to be, and your email is only shown there if you separately opt in. You can change either setting, or remove yourself entirely, from your profile at any time. Your GMC number is never displayed in the directory.
Marketing
We only send the newsletter and promotional updates if you have opted in. You can opt out at any time from the Account & Security page or via the unsubscribe link in any email.
How and where we store your information
Your data is held in our membership database and file storage, and access is restricted and protected by row-level security so members can only see what they are entitled to. We keep your information for as long as you remain a member; if you delete your account, your profile data is removed.
We rely on a small number of trusted service providers (processors) to run the society:
- Supabase — our membership database, authentication and file storage.
- Vercel — hosting of this website.
- Resend — delivery of account and notification emails.
- Stripe — processing of donations (we never see or store your full card details).
These providers process data on our instructions and under appropriate safeguards. Data is held within the UK or European Economic Area, or under equivalent protections where a provider operates elsewhere.
A note on website content
Information on this website is provided for general information only and is not medical or professional advice. Member profiles and directory entries are supplied by members themselves. Please see our Disclaimer & Terms of Use for details.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- correct it — you can edit most of it directly on your profile;
- erase it — you can permanently delete your account and profile from the Account & Security page;
- restrict or object to certain processing, and request a copy of your data;
- withdraw consent at any time;
- complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We use only essential cookies needed to keep you signed in securely. We do not use advertising or third-party tracking cookies.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated to members, and the "last updated" date above will always reflect the current version.
Contact us
For any privacy question, or to exercise a right above, email info@cyprusmedicalsociety.org.uk.