Skip to content

Legal

Privacy policy

Last updated: 3 September 2026

This privacy policy explains how Dr Suraj Gogoi (“I”, “me”, “my”) collects, uses and looks after personal information when you visit surajgogoi.com, take an educational quiz, buy an educational digital guide, or join the email list for updates about new guides.

It is written for a UK audience and is intended to reflect UK data protection law (including the UK GDPR and the Data Protection Act 2018) in plain language. It is not a substitute for formal legal advice.

1. Who is responsible for your data

For this website and for educational product sales made through it, the controller is Dr Suraj Gogoi, operating as an independent psychiatrist and educator in the United Kingdom.

If you need to contact me about privacy, email hello@surajgogoi.com, or use the support address shown on your order receipt after a purchase.

Clinical care – if you receive it from me or another clinician elsewhere – is a separate relationship. This policy covers the educational website and digital product storefront only.

2. What this website is (and is not)

SurajGogoi.com publishes and sells educational digital guides, hosts a free educational quiz, and offers an optional email list for educational updates. It does not provide clinical care, diagnosis, prescribing or personal medical advice through the website.

When you buy a guide, checkout and payment are completed on a third-party platform. Fulfilment of the download is also handled through that provider’s systems. The provider’s name appears on the payment page and receipt (currently SamCart).

3. Personal information I may collect

The information depends on how you use the site:

  • Lead / email signup forms: your email address; your name if you choose to provide it; and a record that you consented to receive educational updates.
  • Educational quiz (Involve.me): answers you give in the quiz; your email address and any other details you submit there; and a record that you asked for the follow-up emails. Involve.me collects this on my behalf when you use the embedded quiz.
  • Purchases: the checkout provider and its payment processors collect the details needed to take payment and deliver your download (for example name, email, billing information and payment card details processed by the payment provider). I may receive order confirmation details such as your name, email address, product purchased, order date and amount.
  • Support messages: whatever you choose to send when you contact me about a download, refund query or other site issue.
  • Technical and security data: standard server and security logs collected by the hosting provider (Kinsta) – for example IP address, browser type, approximate location derived from IP, pages requested, date and time, and similar diagnostic data.
  • Cookies and similar technologies: see the separate Cookie policy. Essential cookies may be needed for security and basic operation. Non-essential tools (for example analytics) will only be used with an appropriate consent mechanism if and when they are enabled.

4. Why I use personal information

  • To provide the website and keep it secure.
  • To fulfil digital products you buy and to help if delivery fails.
  • To operate the educational quiz and send the follow-up emails you opted into through Involve.me.
  • To operate the educational email list you opted into, and to honour unsubscribe requests.
  • To respond to enquiries and resolve disputes.
  • To keep accounting, tax and consumer-law records.
  • To understand how the site is used at a high level (only if analytics are later enabled with consent where required).

5. Legal bases (UK GDPR)

Depending on the activity, I rely on one or more of the following:

  • Contract – taking steps at your request and fulfilling a purchase.
  • Consent – for optional marketing / educational email where consent is required, and for non-essential cookies if used.
  • Legitimate interests – for example site security, preventing abuse, basic administration, and improving the educational storefront in ways that do not override your interests.
  • Legal obligation – for example retaining records required for tax or consumer law.

6. Who I share information with

I use service providers (processors or independent controllers, depending on the service) only as needed to run the site and sell educational products. Typical categories include:

  • Website hosting (Kinsta).
  • WordPress plugins used for forms or site features (for example WP Forms, if configured).
  • A quiz and email-automation provider (currently Involve.me) for the embedded educational quiz and its follow-up emails.
  • A third-party checkout and fulfilment provider (currently SamCart) and the payment processors it uses.
  • Email delivery tools if used to send list updates or transactional messages.

I do not sell your personal data. I do not use your educational-list email to sell clinical appointments through this site.

7. International transfers

Some providers may process data outside the United Kingdom. Where that happens, UK data protection law requires appropriate safeguards (for example the UK International Data Transfer Agreement / Addendum, or other approved mechanisms). Ask me if you want more detail about a specific provider.

8. How long I keep information

  • Quiz follow-up list: while you remain subscribed through Involve.me, and for a short period after you unsubscribe so suppression can be honoured.
  • Email list: while you remain subscribed, and for a short period after you unsubscribe so I can honour suppression and avoid re-adding you by mistake.
  • Purchase and fulfilment records: as long as needed for tax, accounting, consumer law and legitimate dispute handling.
  • Support correspondence: for a reasonable period after the issue is closed.
  • Server logs: according to the host’s retention practices and security needs.

9. Your rights

Under UK GDPR you may have rights to access, correct, erase, restrict or object to certain processing, and to data portability in some cases. Where processing is based on consent, you can withdraw consent at any time (for example by unsubscribing from educational emails). Withdrawal does not affect processing already carried out lawfully.

You can also complain to the Information Commissioner’s Office (ICO). Details are on the ICO website.

10. Children

Educational products on this site are aimed at adults. Do not submit personal data about children through the lead form or checkout.

11. Security

I use reputable hosting and payment providers and take reasonable technical and organisational steps to protect personal information. No online system is completely secure; please use a strong unique password for any accounts you control and keep download links private.

12. Changes to this policy

I may update this policy when the site, products or legal requirements change. The “last updated” date at the top will change when material updates are published. Significant changes may also be highlighted on the site or by email where appropriate.

13. Contact

For privacy requests related to this website or educational product purchases, email hello@surajgogoi.com or use the support channel on your order receipt.