This privacy statement was last changed on 9 March 2026, last checked on 9 March 2026, and applies to citizens and legal permanent residents of Canada.

In this privacy statement, we explain what we do with the data we obtain about you via https://abcvascular.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose and categories of data

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

1.1 Contact - Through phone, mail, email and/or webforms

The following categories of data are collected

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

Retention period

We retain this data upon termination of the service for the following number of months: 36

1.2 Payments

The following categories of data are collected

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

Retention period

We retain this data upon termination of the service for the following number of months: 72

1.3 Registering an account

The following categories of data are collected

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

Retention period

We determine the retention period according to fixed objective criteria: For the life of the learner account and, after closure, only for as long as necessary to administer course access, certificates, support, disputes, and legal obligations. Records that are no longer required are deleted or anonymised.

1.4 Newsletters

The following categories of data are collected

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

Retention period

We determine the retention period according to fixed objective criteria: Until consent is withdrawn or after 36 months of inactivity. The marketing record is then deleted, except for the minimum suppression record needed to honour an unsubscribe request.

1.5 To support services or products that a customer wants to buy or has purchased

The following categories of data are collected

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data
• Social Media accounts

Retention period

We retain this data upon termination of the service for the following number of months: 36

1.6 Compiling and analyzing statistics for website improvement.

The following categories of data are collected

• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

Retention period

Upon termination of the service we retain this data for the following period: 14 months.

1.7 To be able to offer personalised products and services

The following categories of data are collected

• A first and last name
• Account name or alias
• An email address
• IP Address

Retention period

We retain this data upon termination of the service for the following number of months: 36

2. Sharing with other parties

We only share or disclose this data to other recipients for the following purposes:

Purpose of the data transfer: Managed website hosting, backups, performance and security
Country or state in which this service provider is located: United States (UK data centre)
Purpose of the data transfer: Content delivery, DNS and website security
Country or state in which this service provider is located: United States
Purpose of the data transfer: Payment processing and fraud prevention
Country or state in which this service provider is located: United States
Purpose of the data transfer: Payment processing and fraud prevention
Country or state in which this service provider is located: United States
Purpose of the data transfer: Delivery of service and transactional email messages required for accounts, purchases, course access, certificates, password resets, expiry notices and support
Country or state in which this service provider is located: France
Purpose of the data transfer: Business email and learner support
Country or state in which this service provider is located: United States
Purpose of the data transfer: Optional marketing communications and marketing automation where consent has been given
Country or state in which this service provider is located: United States
Purpose of the data transfer: Consent-based website analytics and tag management
Country or state in which this service provider is located: United States
Purpose of the data transfer: Website maintenance and technical support
Country or state in which this service provider is located: Italy
Purpose of the data transfer: Consent-based advertising measurement and marketing attribution
Country or state in which this service provider is located: United States / Ireland

3. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

4. How we respond to Do Not Track signals & Global Privacy Control

Our website responds to and supports the Do Not Track (DNT) header request field. If you turn DNT on in your browser, those preferences are communicated to us in the HTTP request header, and we will not track your browsing behavior.

5. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy on our Cookie Policy (CA) webpage. 

6. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:

• Login Security
• DKIM, SPF, DMARC and other specific DNS settings
• (START)TLS / SSL / DANE Encryption
• Website Hardening/Security Features
• Security measures of hardware that contain, or process personal data.
• HTTP Strict Transport Security and related Security Headers and Browser Policies
• Vulnerability Detection

7. Third party websites

This privacy statement does not apply to third party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

8. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

9. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person. We shall provide the requested information only upon receipt of a verifiable consumer request. You can contact us by using the information below.

9.1 You have the following rights with respect to your personal data

1. You may submit a request for access to the data we process about you.
2. You may request an overview, in a commonly used format, of the data we process about you.
3. You may request correction or deletion of the data if it is incorrect or not or no longer relevant. Where appropriate, the amended information shall be transmitted to third parties having access to the information in question.
4. You have the right to withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. You will be informed of the implications of such withdrawal.
5. You have the right to address a challenge concerning non-compliance with PIPEDA to our organisation and, if the issue is not resolved, to the Office of the Privacy Commissioner of Canada.
6. We shall give access to personal information in an alternative format to an individual with a sensory disability who has a right of access to personal information under PIPEDA and who requests that it be transmitted in the alternative format if (a) a version of the information already exists in that format; or (b) its conversion into that format is reasonable and necessary in order for the individual to be able to exercise rights.

10. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

11. Contact details

ABC Vascular
Centora Ltd Jury Farm, Ripley Lane, West Horsley, Surrey, England, KT24 6JT
United Kingdom
Website: https://abcvascular.com
Email: info@ex.comabcvascular.com

12. Data Requests

For the most frequently submitted requests, we also offer you the possibility to use our data request form

Name

Name

Email

Submit a request for access to the data we process about you.

Submit a request for deletion of the data if it is no longer relevant.

Submit a request to receive an export file of the data we process about you.

We have appointed a contact person for the organisation's policies and practices and to whom complaints or inquiries can be forwarded:
ABC Vascular
Centora Ltd Jury Farm, Ripley Lane, West Horsley, Surrey, England, KT24 6JT

Annex

Course and learning records

When you create an account or enrol in a course, ABC Vascular processes the information needed to provide the training service. This may include your name, email address, account details, enrolments, course progress, quiz or assessment results, support correspondence and certificate records.

Authorised administrators and, where applicable, authorised group leaders can access the records needed to administer enrolments, learner support, completion and certification.

Orders and payments

ABC Vascular processes identity, billing, order and transaction information to provide purchased courses, prevent fraud, handle refunds or complaints and meet UK accounting obligations. Full payment-card details are processed by the selected payment provider and are not stored by ABC Vascular.

Accounting and transaction records are retained for six years from the end of the relevant company financial year, or longer where required by law or an HMRC compliance check.

Email communications, analytics and marketing technologies

Brevo transactional email. Brevo is used to send service messages required to operate your account and deliver purchased training, including order confirmations, password resets, course-access and expiry notices, certificate messages and support communications. These messages are not marketing and are not controlled by marketing-cookie consent.

ActiveCampaign marketing. ActiveCampaign is used for optional marketing emails and marketing automation only where the recipient has opted in or another valid permission applies. Consent can be withdrawn at any time. ActiveCampaign marketing tracking and related cookies are treated as optional marketing technologies.

Meta Pixel. Meta Pixel is used for advertising measurement and attribution only after marketing consent where consent is required. Rejecting or withdrawing marketing consent does not prevent purchases, account access, course delivery or essential transactional emails.

You can change your cookie choices at any time using the privacy settings control available on the website.