This privacy statement was last updated on 9 March 2026 and applies to citizens and legal permanent residents of the United Kingdom.

In this privacy statement, we explain what we do with the data we obtain about you via https://abcvascular.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

1.1 Contact - Through phone, mail, email and/or webforms

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 36

1.2 Payments

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We retain this data upon termination of the service for the following number of months: 72

1.3 Registering an account

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We determine the retention period according to fixed objective criteria: For the life of the learner account and, after closure, only for as long as necessary to administer course access, certificates, support, disputes, and legal obligations. Records that are no longer required are deleted or anonymised.

1.4 Newsletters

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We determine the retention period according to fixed objective criteria: Until consent is withdrawn or after 36 months of inactivity. The marketing record is then deleted, except for the minimum suppression record needed to honour an unsubscribe request.

1.5 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data
• Social Media accounts

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We retain this data upon termination of the service for the following number of months: 36

1.6 Compiling and analyzing statistics for website improvement.

For this purpose we use the following data:

• IP Address
• Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
• Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

Upon termination of the service we retain this data for the following period: 14 months.

1.7 To be able to offer personalised products and services

For this purpose we use the following data:

• A first and last name
• Account name or alias
• An email address
• IP Address

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data upon termination of the service for the following number of months: 36

2. Sharing with other parties

We only share or disclose this data to processors for the following purposes:

Processors

Name: Kinsta
Country: United States (UK data centre)
Purpose: Managed website hosting, backups, performance and security
Name: Cloudflare
Country: United States
Purpose: Content delivery, DNS and website security
Name: Stripe / WooPayments
Country: United States
Purpose: Payment processing and fraud prevention
Name: PayPal
Country: United States
Purpose: Payment processing and fraud prevention
Name: Brevo
Country: France
Purpose: Delivery of service and transactional email messages required for accounts, purchases, course access, certificates, password resets, expiry notices and support
Name: Google Workspace
Country: United States
Purpose: Business email and learner support
Name: ActiveCampaign
Country: United States
Purpose: Optional marketing communications and marketing automation where consent has been given
Name: Google Analytics and Google Tag Manager
Country: United States
Purpose: Consent-based website analytics and tag management
Name: BL Digital
Country: Italy
Purpose: Website maintenance and technical support
Name: Meta Platforms (Facebook Pixel)
Country: United States / Ireland
Purpose: Consent-based advertising measurement and marketing attribution

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. 

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:

• Login Security
• DKIM, SPF, DMARC and other specific DNS settings
• (START)TLS / SSL / DANE Encryption
• Website Hardening/Security Features
• Security measures of hardware that contain, or process personal data.
• HTTP Strict Transport Security and related Security Headers and Browser Policies
• Vulnerability Detection

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Automated decision-making

We make decisions on the basis of automated processing with respect to matters that may have (significant) consequences for individuals. These are decisions taken by computer programmes or systems without human intervention.

We use limited, rule-based and statistical automation to: (i) decide whether to show or withhold marketing messages (email/SMS/WhatsApp) you’ve consented to, (ii) personalize on-site content and recommendations, (iii) trigger service reminders (e.g., course-completion, expiring coupons), (iv) run anonymous analytics and A/B tests, and (v) perform basic fraud/spam screening at checkout and in forms.

- Personalized Course Recommendations: Based on the courses a user has previously purchased, we may suggest additional courses at a discounted rate or highlight complementary topics to support their learning journey.

- Abandoned Cart Notifications: If a user has added a course to their cart but has not completed the purchase, we may send automated reminders or special offers to encourage completion of the transaction.

- Course Renewal Alerts: Since our courses provide access for a limited time (typically 12 months), we send reminders as the end date approaches, with options for renewal or updated offerings in related topics.

- Newsletter Content and Sales Offers: Based on a user’s purchasing history or course progress, we may tailor our newsletters to include specific promotions, updates, or content that aligns with their interests or needs.

-Targeted Ads (Google Ads and Meta): We use Google Ads and Meta (Facebook and Instagram) to reach users who have shown interest in our courses. This may involve retargeting ads based on previous visits to our site, interactions with our content, or interest in related topics. These ads are designed to keep users informed about relevant courses, special offers, and updates.

These automated processes are designed to add value to the user experience by delivering timely and relevant information. The logic behind these decisions is to cross-reference user activity, course completion status, and purchase history in order to provide personalized support, promotional offers, and reminders that align with the user’s interests and learning objectives.

10. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Information Commissioner's Office:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Jersey Office of The Information Commissioner
2nd Floor 5 Castle Street
St. Helier
Jersey
JE2 3BT

St Martin’s House
Le Bordage
St. Peter Port
Guernsey
GY1 1BR

11. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

12. Contact details

ABC Vascular
Centora Ltd Jury Farm, Ripley Lane, West Horsley, Surrey, England, KT24 6JT
United Kingdom
Website: https://abcvascular.com
Email: info@ex.comabcvascular.com

13. Data Requests

For the most frequently submitted requests, we also offer you the possibility to use our data request form

Name

Name

Email

Submit a request for access to the data we process about you.

Submit a request for deletion of the data if it is no longer relevant.

Submit a request to receive an export file of the data we process about you.

Annex

Course and learning records

When you create an account or enrol in a course, ABC Vascular processes the information needed to provide the training service. This may include your name, email address, account details, enrolments, course progress, quiz or assessment results, support correspondence and certificate records.

Authorised administrators and, where applicable, authorised group leaders can access the records needed to administer enrolments, learner support, completion and certification.

Orders and payments

ABC Vascular processes identity, billing, order and transaction information to provide purchased courses, prevent fraud, handle refunds or complaints and meet UK accounting obligations. Full payment-card details are processed by the selected payment provider and are not stored by ABC Vascular.

Accounting and transaction records are retained for six years from the end of the relevant company financial year, or longer where required by law or an HMRC compliance check.

Email communications, analytics and marketing technologies

Brevo transactional email. Brevo is used to send service messages required to operate your account and deliver purchased training, including order confirmations, password resets, course-access and expiry notices, certificate messages and support communications. These messages are not marketing and are not controlled by marketing-cookie consent.

ActiveCampaign marketing. ActiveCampaign is used for optional marketing emails and marketing automation only where the recipient has opted in or another valid permission applies. Consent can be withdrawn at any time. ActiveCampaign marketing tracking and related cookies are treated as optional marketing technologies.

Meta Pixel. Meta Pixel is used for advertising measurement and attribution only after marketing consent where consent is required. Rejecting or withdrawing marketing consent does not prevent purchases, account access, course delivery or essential transactional emails.

You can change your cookie choices at any time using the privacy settings control available on the website.