This privacy statement was last updated on 8 October 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://abcvascular.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

1.1 Contact - Through phone, mail, email and/or webforms

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 36

1.2 Payments

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We determine the retention period according to fixed objective criteria: Order and payment data are retained for the time needed to perform the contract. Accounting records, invoices and related transaction evidence are retained for six years from the end of the company financial year to which they relate, and longer where required by law, an ongoing dispute or an HMRC compliance check.

1.3 Registering an account

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We determine the retention period according to fixed objective criteria: For the life of the learner account and, after closure, only for as long as necessary to administer course access, certificates, support, disputes, and legal obligations. Records that are no longer required are deleted or anonymised.

1.4 Newsletters

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We determine the retention period according to fixed objective criteria: Until consent is withdrawn or after 36 months of inactivity. The marketing record is then deleted, except for the minimum suppression record needed to honour an unsubscribe request.

1.5 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data
• Social Media accounts

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We determine the retention period according to fixed objective criteria: Support records are retained while needed to perform the customer contract and resolve the request. Only records necessary to establish, exercise or defend contractual claims are retained for the applicable limitation period: generally six years from the date the cause of action accrues for simple contracts in England and Wales. Records may be retained longer for an ongoing dispute or legal obligation; other records are deleted or anonymised when no longer needed.

1.6 Compiling and analyzing statistics for website improvement.

For this purpose we use the following data:

• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

Upon termination of the service we retain this data for the following period: 14 months.

1.7 To be able to offer personalised products and services

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 36

2. Sharing with other parties

We use the following providers for the stated purposes. Additional provider roles and business disclosures are explained below.

Service providers

Name: Kinsta
Country: United States (UK data centre)
Purpose: Managed website hosting, backups, performance and security
Name: Cloudflare
Country: United States
Purpose: Content delivery, DNS and website security
Name: Stripe / WooPayments
Country: United States
Purpose: Payment processing and fraud prevention
Name: PayPal
Country: United States
Purpose: Payment processing and fraud prevention
Name: Brevo
Country: France
Purpose: Delivery of service and transactional email messages required for accounts, purchases, course access, certificates, password resets, expiry notices and support
Name: Google Workspace
Country: United States
Purpose: Business email and learner support
Name: ActiveCampaign
Country: United States
Purpose: Operational course-service notifications (mandatory CME questionnaire reminders and certificate availability), and separately optional communications according to email preferences; existing unsubscribes and suppressions respected
Name: Google Analytics and Google Tag Manager
Country: United States
Purpose: Consent-based website analytics and tag management
Name: BL Digital
Country: Italy
Purpose: Website maintenance and technical support
Name: Meta Platforms (Facebook Pixel)
Country: United States / Ireland
Purpose: Consent-based advertising measurement and marketing attribution

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. 

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

We have concluded a data Processing Agreement with Google.

Google may not use the data for any other Google services.

The inclusion of full IP addresses is blocked by us.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Automated decision-making

We use automation for marketing communications and course administration as described below. You can contact us to request human review of an incorrect course or certificate record.

We use marketing email automation, including opt-in campaigns and relevant course reminders. Optional advertising technologies may support audience measurement and retargeting, subject to the applicable consent choices. Course administration uses rules to manage enrolments, access periods, progress and certificate availability. For accredited CME training, the system checks the required assessment and feedback-form completion before releasing a certificate. These operational checks are distinct from marketing preferences. Contact info@abcvascular.com to request human review of an incorrect course-completion record or a certificate-access issue.

10. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

11. Contact details

ABC VASCULAR LIMITED
Centora Ltd Jury Farm, Ripley Lane, West Horsley, Surrey, England, KT24 6JT
United Kingdom
Website: https://abcvascular.com
Email: info@ex.comabcvascular.com

12. Data Requests

For the most frequently submitted requests, we also offer you the possibility to use our data request form

Name

Name

Email

Submit a request for access to the data we process about you.

Submit a request for deletion of the data if it is no longer relevant.

Submit a request to receive an export file of the data we process about you.

Annex

Course and learning records

When you create an account or enrol in a course, ABC Vascular processes the information needed to provide the training service. This may include your name, email address, account details, enrolments, course progress, quiz or assessment results, support correspondence and certificate records.

Authorised administrators and, where applicable, authorised group leaders can access the records needed to administer enrolments, learner support, completion and certification.

Orders and payments

ABC Vascular processes identity, billing, order and transaction information to provide purchased courses, prevent fraud, handle refunds or complaints and meet UK accounting obligations. Full payment-card details are processed by the selected payment provider and are not stored by ABC Vascular.

Accounting and transaction records are retained for six years from the end of the relevant company financial year, or longer where required by law or an HMRC compliance check.

Email communications, analytics and marketing technologies

Brevo transactional email. Brevo is used to send service messages required to operate your account and deliver purchased training, including order confirmations, password resets, course-access and expiry notices, certificate messages and support communications. These messages are not marketing and are not controlled by marketing-cookie consent.

ActiveCampaign course-service notifications. ActiveCampaign is also used to send operational notifications related to your training: reminders to complete the mandatory CME evaluation questionnaire after an eligible course has been completed, and confirmation that your certificate is available. To manage these messages, we synchronise the contact details and course-service status needed for delivery, including the relevant course, completion and questionnaire-validation status, and notification history. These messages do not contain promotions, discounts or requests for reviews. They are separate from optional marketing subscriptions. Existing email unsubscribes, suppressions and delivery restrictions are respected; the system does not automatically resubscribe you to deliver a reminder. Email delivery is not guaranteed, and you can access the questionnaire and available certificates through your account without waiting for an email.

ActiveCampaign optional marketing. ActiveCampaign is used separately for optional promotions, scientific content and new-course announcements in accordance with your subscription preferences and applicable permissions. A certificate-related email containing a discount or a request for a review belongs to this optional marketing flow, not the operational CME reminders. You can manage your email preferences or unsubscribe using the links in these messages. A new purchase does not automatically override an earlier unsubscribe. Marketing tracking and related cookies remain optional and subject to the applicable cookie choices. Changing marketing preferences does not remove course access, questionnaire completion or certificate records, and does not disable the essential account and order messages sent by the website.

Meta Pixel. Meta Pixel is used for advertising measurement and attribution only after marketing consent where consent is required. Rejecting or withdrawing marketing consent does not prevent purchases, account access, course delivery or essential transactional emails.

You can change your cookie choices at any time using the privacy settings control available on the website.

CME evaluation and certificate requirements

For accredited CME training, completion of the learner feedback form and achievement of the required assessment pass mark are conditions for obtaining the certificate under UEMS-EACCME accreditation requirements. Certificate availability is checked by the course system using these completion conditions.

The feedback form includes your email address, account identifier, course identifier and submission date internally to record completion and administer certificate access. Feedback is therefore not anonymous within ABC Vascular. Feedback supplied to UEMS-EACCME for accreditation reporting is anonymised before disclosure. This required educational process is separate from optional marketing subscriptions and marketing-cookie consent. Please avoid including identifying personal information in free-text feedback.

If you believe the system has incorrectly recorded your completion or withheld access to a certificate, contact info@abcvascular.com so that the issue can be reviewed.

Provider roles and international processing

We use service providers for hosting, technical maintenance, email delivery and marketing. Payment and advertising providers may also process information for their own purposes under their privacy notices. In particular, Stripe processes certain payment, security and regulatory information as a controller; its role is not limited to processing on our instructions. See Stripe privacy information.

Where Microsoft Clarity is used with the applicable consent, Microsoft receives interaction and device data for analytics and may use it for Microsoft Advertising as described in the Microsoft Privacy Statement. Change optional tracking preferences using Your privacy choices.

Providers may process data outside the United Kingdom or European Economic Area. The safeguards required depend on the recipient and destination, including an applicable adequacy decision or approved contractual safeguards where required. Contact info@abcvascular.com for information about the recipient and safeguards applicable to your data.

Business disclosures and advertising choices

We disclose the information necessary to deliver accounts, courses, orders and communications to the relevant service providers. We do not sell contact lists. Advertising-related disclosures may constitute sharing or sale under particular US state privacy laws even where no money is paid. You can reject optional marketing cookies or contact info@abcvascular.com to exercise applicable opt-out rights.

AI assistance for communications and website support

AI-assisted tools help with email and newsletter templates, website design, technical troubleshooting and anonymised analytics. In these declared uses, names, surnames and email addresses are not provided to the tools. Material is reviewed and approved by a person before publication. Read our AI Governance notice for the safeguards and the distinction from ordinary course-system automation.