We use necessary cookies to run this site. With your consent we also measure visits to improve the directory. You can change your choice at any time. Cookie Policy
How SurgiFacts.com handles personal information when you visit the website, contact us or submit a listing.
Last updated: October 29, 2026
1. Who we are
SurgiFacts.com is an independent information and discovery platform for the medical instrument industry. It publishes surgical instrument guides, a directory of manufacturers and suppliers, medical exhibitions, a Medical AI company directory, information on medical device certifications, an FAQ hub, and blog articles and resources, and it accepts listing submissions from companies and organizers. SurgiFacts.com does not manufacture, sell, supply or export medical products. Questions about this policy: info@surgifacts.com.
2. Scope
This policy covers visitors to the website, people who contact us, people who sign up for email updates, and people who submit information about a company, product, Medical AI company or exhibition, product images, a paid listing inquiry, a request to find a manufacturer, a profile claim, a correction or a removal request.
3. Information we collect
When you browse
Like any website, our hosting provider processes technical data such as your IP address, browser type, the pages requested and the time of the request, to deliver the website and keep it secure.
Only if you accept analytics in our cookie settings, your browser sends anonymous events to our own server, for example a view of a company or instrument page, a click to a company’s official website, or the display of a labelled featured placement. With the same consent, the words you enter in the site search and the fact that a form was submitted are also counted. All of this is added to daily totals. We do not use cookies for this measurement, do not store IP addresses with these totals and do not build visitor profiles. Without your consent, none of this is recorded. Please do not type personal information into the search box.
When you contact us or submit a form
Every form is stored as a private record in our administration area and sent by email to our team. What we collect depends on the form:
All request forms: your name, email address, the type of request, your message and your confirmation that we may store and review the information. Company or organization, country, phone number and a website address are asked for only when the request needs them.
Listing requests (company, product, Medical AI or exhibition): the business details you choose to send, such as business type, product categories, specialties, markets, certifications as held by the company, the official website, social media links, event name, dates and city.
Image submissions: the images or logos you upload (JPG, PNG or WebP) or link to, and your confirmation that you own them or are authorized by the rights holder.
Paid listing inquiries: company name, contact person, business email, company website, and optionally country, business type and message, plus the placements you are interested in. An inquiry does not book or buy anything, and no payment is taken on the website.
“Looking for a Manufacturer?” requests: your name and business email, optionally your company and country, the product or instrument you need, and optional details such as application, specifications, preferred manufacturing location and estimated quantity, plus your acknowledgement of how the service works.
Claims, corrections and removals: the listing concerned and, if you give it, your role at the company.
Security and spam protection
To limit spam, each form contains a hidden field and checks how quickly it was completed. The number of submissions from your connection is counted for one hour under a one-way hash of your IP address; after five submissions in an hour, further submissions are refused. The newsletter form uses the same kind of hourly limit.
If a submission fails, the values you entered (not uploaded files) are kept for up to 15 minutes so that you do not have to type them again.
We do not currently use a CAPTCHA service on our forms.
On the administrator sign-in page, failed sign-in attempts are counted per IP address for 15 minutes to block password guessing. Failed sign-ins, lockouts and administrator sign-ins are written to a security log with the time, the username entered and the IP address. The log keeps only the most recent 500 events. Visitors who do not use the sign-in page are not recorded.
Business information in the directory
Company profiles contain business information that companies publish themselves, for example on their official websites, or send to us. This can include business email addresses and phone numbers published by the company. We do not publish private individuals’ personal contact details unless a company publishes them as its business contact.
4. Email updates (newsletter)
You can sign up for email updates in the website footer. Sign-up uses a double opt-in:
When you enter your email address and tick the consent box (it is never pre-ticked), we store your email address, the date and time and the wording of your consent, the address of the page where you signed up, and a non-reversible keyed hash of your IP address that we use to prevent abuse.
We then send a confirmation email. You are subscribed only after you click the confirmation link; the link expires after 7 days. Unconfirmed sign-ups receive no updates.
Every email update contains an unsubscribe link. You can also email info@surgifacts.com. After you unsubscribe we send no further updates; we keep a record of the unsubscribe so that we can respect your choice.
The sign-up form does not reveal whether an email address is already on the list.
No other form subscribes you to email updates.
5. How we use information
To reply to you and to review listing, image, paid listing, claim, correction, removal and manufacturer requests.
To create and maintain listings, only after review. Nothing you submit is published automatically.
To send email updates to people who have confirmed their subscription.
To keep the website secure and to prevent spam and abuse.
With your consent, to understand how the website is used so that we can improve it.
We do not sell personal information and we do not use it for advertising. When you ask us to help find a manufacturer, we may describe your requirement to relevant companies; we share your contact details only if you agree.
6. Legal bases
Where data protection law requires a legal basis, we rely on your consent (analytics, email updates and the consent box in our forms), on steps you ask us to take (handling your request or inquiry), and on our legitimate interests in running an accurate, secure business directory and in protecting the website against abuse.
7. Service providers and third parties
Hosting: our hosting provider stores the website and its database, including form submissions and the subscriber list.
Email delivery: form notifications to our team, newsletter confirmation emails and email updates are sent through our email (SMTP) provider, which processes the email addresses and message content needed to deliver them.
Google Translate: if you choose a language other than English in the language selector, your browser loads Google Translate, and Google processes the page content and technical data such as your IP address. Nothing is sent to Google Translate unless you choose a language.
Fonts: fonts are served from our own server. We do not load Google Fonts or other external font services.
External websites: company, exhibition, regulator and source links lead to independent websites with their own privacy practices. We are not responsible for them.
Legal requirements: we may disclose information where the law requires it.
We do not use advertising networks or advertising cookies, and Google Analytics is not in use. If we add either, we will update this policy and the cookie settings before they run, and they will run only with your consent where the law requires it.
8. International transfers
Our service providers, including Google when you use the language selector, may process information in countries other than your own.
9. Cookies and analytics
We use necessary cookies and, only with your consent, analytics. See the Cookie Policy for each cookie and its duration. You can change or withdraw your choice at any time with “Cookie settings” in the footer.
10. Retention
Form submissions and uploaded files: kept in a restricted administration area for as long as we need them to handle your request and any follow-up, then deleted. They are not deleted automatically.
Newsletter records: kept while you are subscribed; after you unsubscribe we keep the record of your consent and unsubscribe so that we can respect your choice. You can ask us to delete it.
Spam and sign-in counters: one hour for form and sign-up submissions and 15 minutes for failed sign-ins.
Security log: the most recent 500 events; older events are overwritten.
Analytics: daily totals that do not identify individuals.
Published business information: kept while a listing is active, or until a valid correction or removal request.
11. Security
Submissions and subscriber records are stored in a restricted administration area and are not published automatically. Sign-in attempts are rate-limited and the website sends security headers. No method of transmission or storage is completely secure, but we take reasonable measures to protect information.
12. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict its use, to receive a copy of it, to withdraw consent at any time, and to complain to a data protection authority. To exercise your rights, email info@surgifacts.com. You can unsubscribe from email updates with the link in every email, and change your cookie choice with “Cookie settings” in the footer. Companies can ask us to correct or remove their listing at any time.
13. Children
SurgiFacts.com is a business information platform and is not intended for children. We do not knowingly collect information from children.
