Privacy Policy

1. Introduction

This Privacy Policy explains how Butler County CPR ("Butler County CPR," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit our website, register for a class, or contact us (the "Services").

Voluntary use. Use of our website and Services is voluntary. You decide what information to provide, and you do so at your own discretion. Information that you submit is stored and retained on our systems and on our service providers' infrastructure (including cloud hosting and backups) so that we can provide the Services, and it may remain on those servers and in backups as described in Section 4 (Retention). By using the Services, you acknowledge and accept how information is collected, stored, shared, and retained as described in this Policy.

2. Information we collect

Personal information you provide — your name, email address, phone number, mailing address, and details you enter when booking a class, joining a group or private training, completing a form or quiz, or contacting us.

Training and certification information — the classes you register for, attendance and completion status, quiz responses, and certification records (including certification card details and expiration dates).

Payment information — limited billing details used for class registration. Payments are processed by our payment processor; we do not store full payment-card numbers.

Technical and usage data — IP address, browser/device information, pages visited, and timestamps, collected through analytics tools and needed to operate and secure the site.

Providing personal information is voluntary; however, certain services such as certification or class registration may not be available without it.

3. How we use information

We use personal information to provide and administer classes and certifications; to process registrations and payments; to submit certification records to authorized credentialing bodies such as the American Heart Association (AHA); to send transactional messages (confirmations, reminders, certificate and cert-expiry notices) and, where permitted, other communications you have not opted out of; to provide support; to improve the Services; and to meet our legal and training-standards obligations. We do not sell your personal information for money. We may, however, share it with third parties in order to operate the Services, as described in Section 4. You may opt out of marketing communications at any time using the unsubscribe link in any message.

4. How we share information

We share information with third parties strictly to run, secure, and improve the Services and our business — for example, to issue and verify certifications, process payments, deliver email, protect our forms from spam, assist with grading, and measure how our site is used (site metrics). We do not share your information just to share it, and we do not sell it. The third parties we use include, but are not limited to, credentialing bodies such as the American Heart Association (AHA), Google (analytics and reCAPTCHA), payment processors such as Square, our email-delivery provider, and our AI provider used to help grade quizzes, along with our cloud-hosting and similar providers. We share only what is reasonably necessary for the purpose and require these recipients to act as our service providers under terms that limit their use of your information.

Some analytics technologies (for example, Google Analytics) may set cookies and be treated as a "sale" or "sharing" under certain state privacy laws, even though we do not sell your information for money. If you prefer not to allow analytics cookies, you can block or clear cookies in your browser at any time.

We may also use de-identified or aggregated information (which does not identify any individual) to operate and improve the Services, and we may disclose information when required by law or to protect rights, safety, and property. Third-party recipients maintain their own privacy practices, which govern how they handle information once received.

5. Data retention

We retain each category of personal information for as long as reasonably necessary for the purposes described in this Policy, and no longer than is reasonably necessary. Where we cannot state an exact period in advance, we determine how long to keep information using these criteria: (a) the life of your relationship with us; (b) legal, tax, insurance, and training-standards record-keeping obligations; (c) the need to establish, exercise, or defend legal claims; and (d) the nature and sensitivity of the information.

Training and certification records. Course rosters, attendance, waivers, and certification records may be subject to training-organization, insurance, and regulatory record-keeping requirements (for example, American Heart Association course-record standards). We retain these records for the duration required by those obligations — which may extend for an extended period after a class — and we delete, de-identify, or securely archive them once the applicable obligation no longer applies.

6. Children's and minors' information

Butler County CPR welcomes minors in age-appropriate training programs. Our website is not directed to children, and we do not knowingly collect personal information directly from children under 13 online. For any participant under 18, registration must be authorized by a parent, guardian, school, employer, or organization. In those cases, the information about a minor is provided to us by the registering adult or organization, who is responsible for obtaining any consent required by law before providing it. We do not sell minors' information or use it for targeted advertising. A parent or guardian may request access to, correction of, or deletion of a minor's information by contacting us. Records pertaining to minors are retained and deleted under the same standards outlined in Section 5.

7. How we protect information — and what we cannot promise

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including HTTPS/TLS encryption in transit, encryption of sensitive data at rest, and access controls, and we review and update these measures over time.

However, no method of transmission over the Internet and no method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot and do not guarantee its absolute security, and we do not promise that information will never be accessed, disclosed, altered, lost, or destroyed by a breach of our safeguards. Even organizations with vast security resources experience breaches; you provide information at your own risk. If we become aware of a data breach involving personal information, we will notify affected individuals and, where applicable, the Pennsylvania Attorney General's Office in accordance with state data-breach laws.

8. Your choices and rights

You can unsubscribe from marketing email at any time using the link in any such message. Depending on where you live, you may have rights to access, correct, or delete your personal information. Requests to delete may be declined where retention is required to maintain accurate certification history, comply with AHA or audit policies, satisfy legal or regulatory obligations, or defend against potential claims. To exercise a right or manage your preferences, contact us; we may verify your identity first, and we will respond as required by law. Data is processed and stored in the United States.

9. Cookies and analytics

We use a small number of essential cookies needed for the site to work, and privacy-respecting measurement that may include third-party analytics such as Google Analytics. We do not use analytics to sell your personal information or for cross-site advertising. You can block or clear cookies in your browser at any time; some non-essential measurement won't occur if you do.

10. Changes to this Policy

This Privacy Policy is a living document and is always subject to future revision and update. We reserve the right to change, add to, or remove any part of it at any time, in our sole discretion. We will post the updated Policy with a new "last updated" date, and your continued use of the Services after an update takes effect means you accept the updated Policy, so please review it periodically.

11. Governing law

This Privacy Policy and any disputes arising from it are governed by the laws of the Commonwealth of Pennsylvania, without regard to its conflict-of-laws provisions. See our Terms of Service for venue.

12. Contact us

Questions or privacy requests? Contact us, or reach us at:

Butler County CPR
PO Box 105
Prospect, PA 16052
Email: class@butlercpr.com
Phone: (724) 200-3099