Privacy policy

Last updated: 20 September 2026

1. Data controller

SuturaLab, tax ID [NIF pendiente], registered at [Domicilio pendiente]. Data-protection contact: hola@suturalab.com.

2. Data we process

Account data: name, email address, hashed password and preferred language.
Learning data: enrolments, lessons viewed and completed, test attempts with answers and scores, and issued certificates (name, course, score and date).
Community participation: the messages you post and your display name next to them.
Study assistant: a record of each query (date, lesson or question, language and volume of text) to control usage and cost.
Technical data: strictly necessary session and language cookies and, only if you accept, an aggregated count of page views.

We do not process users’ health data and we never ask for patient data. Do not post identifiable clinical information in the community.

3. Purposes and legal bases

Providing the service (account, course access, progress, certificates): performance of the contract, Article 6(1)(b) GDPR.
Handling payments for the paid levels: performance of the contract and legal accounting and tax obligations, Articles 6(1)(b) and 6(1)(c).
Moderating the community and keeping the service secure: legitimate interest, Article 6(1)(f).
Study assistant and its usage limits: performance of the contract and legitimate interest in preventing abuse.
Audience measurement and any non-essential cookie: your consent, Article 6(1)(a), which you may withdraw at any time.

4. Retention periods

Account and learning data are kept while the account is active. If you delete it, data are erased within 30 days at most, except the record of issued certificates, kept in pseudonymised form as proof of the training delivered, and invoicing records, kept for six years as required by law. Community posts may remain without your name so that threads stay readable. Aggregated metrics do not identify you.

5. Recipients and processors

We do not sell your data or share it for commercial purposes. The following process data on our behalf under a processing agreement: the hosting and database provider, the transactional email provider, and the language-model provider behind the study assistant, which receives the text of your query and the lesson content, never your name or email. Some providers may process data outside the European Economic Area under the safeguards of Article 46 GDPR (standard contractual clauses).

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated decisions, by writing to hola@suturalab.com from your account address. We answer within one month. You can withdraw cookie consent at any time from the cookie policy. If you believe your request was not handled properly, you may complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority in your country.

7. Security

Passwords are stored using key derivation (PBKDF2) and never in plain text. The site is always served over an encrypted connection and database access is restricted. We apply technical and organisational measures appropriate to the risk.

8. Minors

The service is aimed at professionals and students aged 16 or over. We do not knowingly create accounts for anyone younger.

Important notice. This document is a certificate of completion issued by SuturaLab after finishing an online course and passing its final exam. It is not an official healthcare accreditation: it is not an academic qualification, it does not authorise professional practice, it carries no continuing-education credits (CME/CPD) and it does not replace the supervised in-person training required by each country’s regulations. The techniques described must be practised only within the holder’s own scope of practice and under the supervision their institution requires.