This privacy statement was last updated on 8 October 2026 and applies to citizens and legal permanent residents of the United Kingdom.

In this privacy statement, we explain what we do with the data we obtain about you via https://abcvascular.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

1.1 Contact - Through phone, mail, email and/or webforms

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 36

1.2 Payments

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We determine the retention period according to fixed objective criteria: Order and payment data are retained for the time needed to perform the contract. Accounting records, invoices and related transaction evidence are retained for six years from the end of the company financial year to which they relate, and longer where required by law, an ongoing dispute or an HMRC compliance check.

1.3 Registering an account

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We determine the retention period according to fixed objective criteria: For the life of the learner account and, after closure, only for as long as necessary to administer course access, certificates, support, disputes, and legal obligations. Records that are no longer required are deleted or anonymised.

1.4 Newsletters

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We determine the retention period according to fixed objective criteria: Until consent is withdrawn or after 36 months of inactivity. The marketing record is then deleted, except for the minimum suppression record needed to honour an unsubscribe request.

1.5 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data
• Social Media accounts

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We determine the retention period according to fixed objective criteria: Support records are retained while needed to perform the customer contract and resolve the request. Only records necessary to establish, exercise or defend contractual claims are retained for the applicable limitation period: generally six years from the date the cause of action accrues for simple contracts in England and Wales. Records may be retained longer for an ongoing dispute or legal obligation; other records are deleted or anonymised when no longer needed.

1.6 Compiling and analyzing statistics for website improvement.

For this purpose we use the following data:

• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

Upon termination of the service we retain this data for the following period: 14 months.

1.7 To be able to offer personalised products and services

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 36

2. Sharing with other parties

We use the following providers for the stated purposes. Additional provider roles and business disclosures are explained below.

Service providers

Name: Kinsta
Country: United States (UK data centre)
Purpose: Managed website hosting, backups, performance and security
Name: Cloudflare
Country: United States
Purpose: Content delivery, DNS and website security
Name: Stripe / WooPayments
Country: United States
Purpose: Payment processing and fraud prevention
Name: PayPal
Country: United States
Purpose: Payment processing and fraud prevention
Name: Brevo
Country: France
Purpose: Delivery of service and transactional email messages required for accounts, purchases, course access, certificates, password resets, expiry notices and support
Name: Google Workspace
Country: United States
Purpose: Business email and learner support
Name: ActiveCampaign
Country: United States
Purpose: Optional marketing communications and marketing automation where consent has been given
Name: Google Analytics and Google Tag Manager
Country: United States
Purpose: Consent-based website analytics and tag management
Name: BL Digital
Country: Italy
Purpose: Website maintenance and technical support
Name: Meta Platforms (Facebook Pixel)
Country: United States / Ireland
Purpose: Consent-based advertising measurement and marketing attribution

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. 

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

We have concluded a data processing agreement with Google.

Google may not use the data for any other Google services.

The inclusion of full IP addresses is blocked by us.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Automated decision-making

We make decisions on the basis of automated processing with respect to matters that may have (significant) consequences for individuals. These are decisions taken by computer programmes or systems without human intervention.

We use marketing email automation, including opt-in campaigns and relevant course reminders. Optional advertising technologies may support audience measurement and retargeting, subject to the applicable consent choices. Course administration uses rules to manage enrolments, access periods, progress and certificate availability. For accredited CME training, the system checks the required assessment and feedback-form completion before releasing a certificate. These operational checks are distinct from marketing preferences. Contact info@abcvascular.com to request human review of an incorrect course-completion record or a certificate-access issue.

10. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Information Commissioner's Office:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Jersey Office of The Information Commissioner
2nd Floor 5 Castle Street
St. Helier
Jersey
JE2 3BT

St Martin’s House
Le Bordage
St. Peter Port
Guernsey
GY1 1BR

11. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

12. Contact details

ABC VASCULAR LIMITED
Centora Ltd Jury Farm, Ripley Lane, West Horsley, Surrey, England, KT24 6JT
United Kingdom
Website: https://abcvascular.com
Email: info@ex.comabcvascular.com

13. Data Requests

For the most frequently submitted requests, we also offer you the possibility to use our data request form

Name

Name

Email

Submit a request for access to the data we process about you.

Submit a request for deletion of the data if it is no longer relevant.

Submit a request to receive an export file of the data we process about you.

Annex

Course and learning records

When you create an account or enrol in a course, ABC Vascular processes the information needed to provide the training service. This may include your name, email address, account details, enrolments, course progress, quiz or assessment results, support correspondence and certificate records.

Authorised administrators and, where applicable, authorised group leaders can access the records needed to administer enrolments, learner support, completion and certification.

Orders and payments

ABC Vascular processes identity, billing, order and transaction information to provide purchased courses, prevent fraud, handle refunds or complaints and meet UK accounting obligations. Full payment-card details are processed by the selected payment provider and are not stored by ABC Vascular.

Accounting and transaction records are retained for six years from the end of the relevant company financial year, or longer where required by law or an HMRC compliance check.

Email communications, analytics and marketing technologies

Brevo transactional email. Brevo is used to send service messages required to operate your account and deliver purchased training, including order confirmations, password resets, course-access and expiry notices, certificate messages and support communications. These messages are not marketing and are not controlled by marketing-cookie consent.

ActiveCampaign marketing. ActiveCampaign is used for optional marketing emails and marketing automation only where the recipient has opted in or another valid permission applies. Consent can be withdrawn at any time. ActiveCampaign marketing tracking and related cookies are treated as optional marketing technologies.

Meta Pixel. Meta Pixel is used for advertising measurement and attribution only after marketing consent where consent is required. Rejecting or withdrawing marketing consent does not prevent purchases, account access, course delivery or essential transactional emails.

You can change your cookie choices at any time using the privacy settings control available on the website.

CME evaluation and certificate requirements

For accredited CME training, completion of the learner feedback form and achievement of the required assessment pass mark are conditions for obtaining the certificate under UEMS-EACCME accreditation requirements. Certificate availability is checked by the course system using these completion conditions.

The feedback form includes your email address, account identifier, course identifier and submission date internally to record completion and administer certificate access. Feedback is therefore not anonymous within ABC Vascular. Feedback supplied to UEMS-EACCME for accreditation reporting is anonymised before disclosure. This required educational process is separate from optional marketing subscriptions and marketing-cookie consent. Please avoid including identifying personal information in free-text feedback.

If you believe the system has incorrectly recorded your completion or withheld access to a certificate, contact info@abcvascular.com so that the issue can be reviewed.

Provider roles and international processing

We use service providers for hosting, technical maintenance, email delivery and marketing. Payment and advertising providers may also process information for their own purposes under their privacy notices. In particular, Stripe processes certain payment, security and regulatory information as a controller; its role is not limited to processing on our instructions. See Stripe privacy information.

Where Microsoft Clarity is used with the applicable consent, Microsoft receives interaction and device data for analytics and may use it for Microsoft Advertising as described in the Microsoft Privacy Statement. Change optional tracking preferences using Your privacy choices.

Providers may process data outside the United Kingdom or European Economic Area. The safeguards required depend on the recipient and destination, including an applicable adequacy decision or approved contractual safeguards where required. Contact info@abcvascular.com for information about the recipient and safeguards applicable to your data.

Business disclosures and advertising choices

We disclose the information necessary to deliver accounts, courses, orders and communications to the relevant service providers. We do not sell contact lists. Advertising-related disclosures may constitute sharing or sale under particular US state privacy laws even where no money is paid. You can reject optional marketing cookies or contact info@abcvascular.com to exercise applicable opt-out rights.

AI assistance for communications and website support

AI-assisted tools help with email and newsletter templates, website design, technical troubleshooting and anonymised analytics. In these declared uses, names, surnames and email addresses are not provided to the tools. Material is reviewed and approved by a person before publication. Read our AI Governance notice for the safeguards and the distinction from ordinary course-system automation.