Privacy Policy
Carolina Resuscitation Academy, LLC
carolinaresuscitationacademy.com
Effective Date: October 16, 2026
Last Updated: October 16, 2026
1. Introduction
Carolina Resuscitation Academy, LLC ("we," "us," "our," or "the Academy") is a professional training organization providing CPR, AED, first aid, and resuscitation training courses to individuals, healthcare professionals, and organizations throughout the Carolinas and beyond. We are committed to protecting the privacy and security of your personal information.
This Privacy Policy describes how we collect, use, share, and protect the personal information you provide to us when you visit our website at carolinaresuscitationacademy.com, register for our courses, communicate with us, or otherwise interact with our services (collectively, the "Services").
By using our Services or submitting your personal information to us, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with these terms, please discontinue use of our website and Services.
This policy applies to all personal information collected by Carolina Resuscitation Academy, LLC, whether collected online or offline, including through our website, registration forms, telephone inquiries, email communications, and in-person interactions at training events.
2. Information We Collect
We collect various categories of information depending on how you interact with us. The types of information we may collect include:
A. Personal Identification Information

Full name
Email address
Phone number
Mailing or billing address
Date of birth — collected where required by certifying organizations (such as the American Heart Association) for the purpose of generating and maintaining accurate certification records

B. Payment Information
When you pay for a course or service, payment transactions are processed securely through third-party payment processors. We do not store, process, or retain full credit card numbers, debit card numbers, or bank account information on our own servers. We may retain limited transaction records (e.g., payment confirmation numbers, amounts, and dates) for accounting and legal compliance purposes.
C. Course Registration and Certification Data

Courses enrolled in and dates of registration
Course completion dates and results
Certification numbers and types (e.g., BLS, CPR/AED, First Aid)
Certification issue dates and expiration dates
Instructor information associated with your training

D. Health and Medical Information
We do not routinely collect health or medical information. However, if you voluntarily disclose health-related information to us for the purpose of requesting a reasonable accommodation in a course or training session (e.g., a physical limitation that affects participation), we will collect and use that information solely to facilitate appropriate accommodations. Such information is treated with the highest level of confidentiality.
E. Communications
We collect and retain the content of emails, messages, contact form submissions, and other communications you send to us. This includes inquiries, feedback, complaints, and any correspondence related to your enrollment or certification.
F. Website Usage Data

IP address and approximate geographic location derived therefrom
Browser type, version, and operating system
Pages visited and content viewed on our website
Time and duration of your visit
Referring URLs (the page from which you navigated to our site)
Clickstream data and navigation paths through our website

G. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect certain information automatically when you visit our website. Please refer to Section 6 of this Privacy Policy for detailed information about our use of cookies.
3. How We Collect Information
We collect information through the following means:
A. Directly from You
You provide information directly to us when you:

Complete a course registration or enrollment form (online or paper)
Create or update an account on our website
Contact us via our website's contact form, email, or telephone
Request information about courses, schedules, or certifications
Participate in surveys, promotions, or feedback requests
Attend a course or training session in person

B. Automatically Through Our Website
When you visit our website, certain information is collected automatically through:

Cookies and similar browser-based tracking technologies
Web analytics services (such as Google Analytics)
Server log files that record technical information about website requests

C. From Third Parties
We may receive information about you from third parties in limited circumstances, including:

Payment processors — to confirm and reconcile payment transactions
Certifying bodies — such as the American Heart Association, which may provide or verify certification-related data associated with course completions
Employers or organizations — that register employees or members for our courses on their behalf
Referral sources — including healthcare systems, schools, or community organizations that refer individuals to our training programs

4. How We Use Your Information
We use the personal information we collect for the following purposes:

Process course registrations and payments: To enroll you in requested courses, confirm registration, and process associated payments securely.
Issue and manage certifications: To generate CPR, AED, first aid, and resuscitation certification cards and records, and to submit required information to certifying bodies such as the American Heart Association.
Send course reminders and scheduling communications: To notify you of upcoming course dates, location details, preparation requirements, and scheduling changes.
Send certification renewal notices: To notify you when your certification is approaching its expiration date so you may take timely action to renew.
Respond to inquiries and provide customer support: To answer your questions, address concerns, and assist you with all aspects of your experience with the Academy.
Improve our website and services: To analyze how our website is used, identify trends, diagnose technical problems, and enhance the overall user experience.
Comply with legal and regulatory obligations: To maintain records as required by applicable law, certifying organizations, and regulatory authorities.
Send marketing communications: To inform you of new courses, special offers, and updates relevant to your training interests. You may opt out of marketing communications at any time as described in Section 11.
Maintain accurate certification records: To fulfill our obligations to certifying bodies, which may require that we retain accurate training and certification data for defined periods.
Safety and fraud prevention: To protect against fraudulent activity, unauthorized access, and other harmful conduct.

5. Legal Basis for Processing
For individuals in jurisdictions that require a legal basis for processing personal information (including, but not limited to, states with comprehensive consumer privacy laws), we process your personal information under the following legal bases:

Performance of a contract: Processing is necessary to fulfill a contract with you — for example, to register you for a course and issue your certification upon completion.
Legitimate interests: Processing is necessary for our legitimate business interests, such as improving our services, communicating relevant course information, maintaining business records, and ensuring website security, provided those interests do not override your fundamental rights and freedoms.
Legal obligation: Processing is necessary to comply with applicable laws and regulations, including record-keeping obligations imposed by certifying bodies.
Consent: Where required by law, we will obtain your consent before processing certain categories of information, such as health-related information or marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Cookies and Tracking Technologies
A. What Are Cookies?
Cookies are small text files that are stored on your device (computer, smartphone, or tablet) when you visit a website. They allow the website to recognize your device and remember certain information about your visit, such as your preferences or session status. Cookies are widely used to make websites work efficiently and to provide reporting information to website operators.
B. Types of Cookies We Use

Essential / Functional Cookies: These cookies are strictly necessary for the operation of our website. They enable core features such as security, session management, and access to secure areas of the site. Without these cookies, the website cannot function properly, and they cannot be disabled.
Analytical / Performance Cookies: These cookies collect anonymous information about how visitors use our website — such as which pages are visited most often and whether error messages are received. This information is used to improve our website. These cookies do not collect information that identifies individual visitors.
Marketing / Advertising Cookies: These cookies are used to deliver relevant advertisements and promotional content. They track your browsing activity across websites and help us measure the effectiveness of advertising campaigns. These cookies are set by us or by trusted third-party advertising partners.

C. Third-Party Cookies
We may permit third-party service providers, such as Google Analytics, to place cookies on our website to help us understand how visitors interact with our content. These third-party providers have their own privacy policies governing the use of such cookies. We encourage you to review those policies directly. For Google Analytics, you may opt out by visiting: tools.google.com/dlpage/gaoptout.
D. Managing and Opting Out of Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. Common browser cookie management options are available through your browser's help menu or settings panel. You may also opt out of certain interest-based advertising through industry opt-out programs.
7. How We Share Your Information
We do not sell your personal information to third parties. We do not rent or trade your personal information for commercial purposes. We may share your information only in the following limited circumstances:

Certifying bodies: We share the information required by certifying organizations — such as the American Heart Association — to issue, register, and validate your CPR, AED, or first aid certification. This may include your name, date of birth, completion date, and course type.
Payment processors: We share information necessary to process your payment with our authorized third-party payment processors. These processors are contractually bound to use your information solely for payment processing purposes and to maintain appropriate security standards.
Information technology and hosting providers: We engage service providers who assist us in operating our website and managing our data. These vendors are required to handle your information in accordance with our instructions and this Privacy Policy.
Legal authorities: We may disclose your personal information if required to do so by law, court order, subpoena, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our legal rights, prevent fraud, or ensure the safety of our staff, customers, or the public.
Business transfers: If Carolina Resuscitation Academy, LLC undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
With your consent: We may share your information with additional third parties when you have given us explicit consent to do so.

8. Data Retention
We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our general retention practices are as follows:

Certification records: We retain course registration and certification records for a minimum of three (3) years from the date of certification issuance, or for such longer period as may be required by the applicable certifying organization (e.g., the American Heart Association) or applicable law.
Payment records: Financial and payment-related records are retained for a minimum of seven (7) years, or as otherwise required by applicable tax and accounting laws and regulations.
Marketing and communications data: If you have opted in to marketing communications, we retain your contact information for this purpose until you opt out or request deletion.
Website usage logs: Server logs and website analytics data are retained for up to twelve (12) months, after which they are deleted or anonymized.
General correspondence: Emails and other correspondence are retained for a period reasonably necessary to address the subject matter of the communication and any related follow-up.

When information is no longer required, we will securely delete or anonymize it in accordance with our data destruction procedures.
9. Data Security
Carolina Resuscitation Academy, LLC takes the security of your personal information seriously. We implement industry-standard technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

SSL/TLS encryption for data transmitted between your browser and our website
Secure server environments with access controls and authentication requirements
Role-based access controls limiting access to personal information to authorized personnel who need it to perform their job functions
Regular security reviews of our information systems and practices

While we take every reasonable precaution to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your information. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.
If you have reason to believe that your interaction with us is no longer secure, or if you suspect unauthorized use of your account or personal information, please contact us immediately at [email protected] or by calling 704-280-2212.
10. Children's Privacy
Carolina Resuscitation Academy, LLC does not knowingly collect personal information from children under the age of thirteen (13) without verifiable parental or guardian consent. Our Services are generally directed toward adults, healthcare professionals, and older adolescents receiving training under the supervision of an educational institution or employer.

Children under age 13: We will not knowingly enroll or collect personal information from a child under age 13 without documented parental or legal guardian consent. If we discover that we have inadvertently collected such information without consent, we will promptly delete it.
Minors ages 13–17: Individuals under the age of 18 may enroll in our courses with the consent of a parent or legal guardian. By submitting enrollment information on behalf of a minor, a parent or guardian confirms they have authority to provide that consent and agree to the terms of this Privacy Policy on the minor's behalf.
Parental rights: Parents and legal guardians may contact us at any time to review, correct, or request deletion of personal information collected from or about their minor child. Please contact us using the information provided in Section 14.

11. Your Rights and Choices
All users have the following general rights regarding their personal information:

Right to Access: You may request a copy of the personal information we hold about you.
Right to Correction: You may request that we correct inaccurate or incomplete personal information.
Right to Deletion: You may request that we delete your personal information, subject to our legal retention obligations (e.g., certification records required by certifying bodies).
Right to Data Portability: You may request your personal data in a portable, readily usable format.
Right to Opt Out of Marketing: You may opt out of receiving promotional communications from us at any time by clicking "unsubscribe" in any marketing email or contacting us directly.
Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.

North Carolina Residents
If you are a resident of North Carolina, you have additional rights under the North Carolina Consumer Privacy Act (effective January 1, 2026), including:

The right to know what personal data we collect and how it is used.
The right to access, correct, and delete your personal data.
The right to obtain a copy of your data in a portable format.
The right to opt out of the processing of your personal data for purposes of targeted advertising or the sale of personal data.
The right to non-discrimination — we will not deny services, charge different prices, or provide a different level of service because you exercised any of these rights.

Enforcement of the North Carolina Consumer Privacy Act is handled exclusively by the North Carolina Attorney General. There is no private right of action under this law. We will respond to verified requests within 45 days, with a possible 45-day extension for complex or high-volume requests.
New York State Residents
If you are a resident of New York State, you have protections under the New York SHIELD Act (N.Y. Gen. Bus. Law §§ 899-aa, 899-bb), which requires us to:

Maintain reasonable administrative, technical, and physical data security safeguards to protect your personal information.
Notify you within 30 days in the event of a data breach that affects your private information.

As of March 21, 2025, "private information" under the SHIELD Act includes medical history, health conditions, treatments, diagnoses, and health insurance information. We are committed to safeguarding any such information you share with us.
Note: New York does not yet have a broad consumer privacy law granting rights such as access or deletion (a New York Privacy Act is pending in the legislature). We nonetheless honor the general rights described at the top of this section for all users regardless of state.
How to Exercise Your Rights
To submit a privacy request, contact us at:

Email: [email protected] (use subject line: "Privacy Request")
Phone: 704-280-2212

We will verify your identity before processing any request and respond within 45 days. We reserve the right to deny requests that we cannot verify or that conflict with our legal obligations.
12. Third-Party Links
Our website may contain links to third-party websites, resources, or services that are not owned or controlled by Carolina Resuscitation Academy, LLC. These links may include, for example, links to certifying organizations, partner training programs, healthcare associations, or payment portals.
We are not responsible for the privacy practices, content, or security of any third-party websites. This Privacy Policy applies solely to information collected by us through our own website and Services. We strongly encourage you to review the privacy policies of any third-party websites you visit before providing any personal information to them.
The inclusion of a link to a third-party website does not constitute our endorsement of that website, its content, or its data handling practices.
13. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable law, or the nature of our Services. When we make changes, we will:

Post the revised Privacy Policy on our website at carolinaresuscitationacademy.com with an updated "Last Updated" date at the top of the document
For material changes that significantly affect how we handle your personal information, provide advance notice via email to registered users or a prominent notice on our website prior to the change taking effect

Your continued use of our website or Services following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, please discontinue use of our Services and contact us to request deletion of your information where applicable.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using any of the following methods:

Business Name: Carolina Resuscitation Academy, LLC
Website: carolinaresuscitationacademy.com
Email: [email protected]
Phone: 704-280-2212

For all privacy-related requests — including requests to access, correct, delete, or restrict processing of your personal information — please email us at [email protected] with the subject line "Privacy Request" so that we can route your inquiry to the appropriate team member promptly.
We are committed to addressing all privacy-related inquiries in a timely, transparent, and respectful manner. We will acknowledge receipt of your request and respond substantively within thirty (30) days.
Disclaimer: This Privacy Policy was last reviewed by Carolina Resuscitation Academy, LLC on October 16, 2026. This document is provided for informational purposes and does not constitute legal advice. We recommend consulting a qualified attorney to ensure compliance with all applicable federal, state, and local laws, including but not limited to the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and any other privacy regulations applicable to your jurisdiction.

Full name

Email address

Phone number

Mailing or billing address

Date of birth — collected where required by certifying organizations (such as the American Heart Association) for the purpose of generating and maintaining accurate certification records

Courses enrolled in and dates of registration

Course completion dates and results

Certification numbers and types (e.g., BLS, CPR/AED, First Aid)

Certification issue dates and expiration dates

Instructor information associated with your training

IP address and approximate geographic location derived therefrom

Browser type, version, and operating system

Pages visited and content viewed on our website

Time and duration of your visit

Referring URLs (the page from which you navigated to our site)

Clickstream data and navigation paths through our website

Complete a course registration or enrollment form (online or paper)

Create or update an account on our website

Contact us via our website's contact form, email, or telephone

Request information about courses, schedules, or certifications

Participate in surveys, promotions, or feedback requests

Attend a course or training session in person

B. Automatically Through Our Website When you visit our website, certain information is collected automatically through:

Cookies and similar browser-based tracking technologies

Web analytics services (such as Google Analytics)

Server log files that record technical information about website requests

C. From Third Parties We may receive information about you from third parties in limited circumstances, including:

Payment processors — to confirm and reconcile payment transactions

Certifying bodies — such as the American Heart Association, which may provide or verify certification-related data associated with course completions

Employers or organizations — that register employees or members for our courses on their behalf

Referral sources — including healthcare systems, schools, or community organizations that refer individuals to our training programs

4. How We Use Your Information We use the personal information we collect for the following purposes:

Process course registrations and payments: To enroll you in requested courses, confirm registration, and process associated payments securely.

Issue and manage certifications: To generate CPR, AED, first aid, and resuscitation certification cards and records, and to submit required information to certifying bodies such as the American Heart Association.

Send course reminders and scheduling communications: To notify you of upcoming course dates, location details, preparation requirements, and scheduling changes.

Send certification renewal notices: To notify you when your certification is approaching its expiration date so you may take timely action to renew.

Respond to inquiries and provide customer support: To answer your questions, address concerns, and assist you with all aspects of your experience with the Academy.

Improve our website and services: To analyze how our website is used, identify trends, diagnose technical problems, and enhance the overall user experience.

Comply with legal and regulatory obligations: To maintain records as required by applicable law, certifying organizations, and regulatory authorities.

Send marketing communications: To inform you of new courses, special offers, and updates relevant to your training interests. You may opt out of marketing communications at any time as described in Section 11.

Maintain accurate certification records: To fulfill our obligations to certifying bodies, which may require that we retain accurate training and certification data for defined periods.

Safety and fraud prevention: To protect against fraudulent activity, unauthorized access, and other harmful conduct.

5. Legal Basis for Processing For individuals in jurisdictions that require a legal basis for processing personal information (including, but not limited to, states with comprehensive consumer privacy laws), we process your personal information under the following legal bases:

Performance of a contract: Processing is necessary to fulfill a contract with you — for example, to register you for a course and issue your certification upon completion.

Legitimate interests: Processing is necessary for our legitimate business interests, such as improving our services, communicating relevant course information, maintaining business records, and ensuring website security, provided those interests do not override your fundamental rights and freedoms.

Legal obligation: Processing is necessary to comply with applicable laws and regulations, including record-keeping obligations imposed by certifying bodies.

Consent: Where required by law, we will obtain your consent before processing certain categories of information, such as health-related information or marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Essential / Functional Cookies: These cookies are strictly necessary for the operation of our website. They enable core features such as security, session management, and access to secure areas of the site. Without these cookies, the website cannot function properly, and they cannot be disabled.

Certifying bodies: We share the information required by certifying organizations — such as the American Heart Association — to issue, register, and validate your CPR, AED, or first aid certification. This may include your name, date of birth, completion date, and course type.

Payment processors: We share information necessary to process your payment with our authorized third-party payment processors. These processors are contractually bound to use your information solely for payment processing purposes and to maintain appropriate security standards.

Information technology and hosting providers: We engage service providers who assist us in operating our website and managing our data. These vendors are required to handle your information in accordance with our instructions and this Privacy Policy.

With your consent: We may share your information with additional third parties when you have given us explicit consent to do so.

8. Data Retention We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our general retention practices are as follows:

Certification records: We retain course registration and certification records for a minimum of three (3) years from the date of certification issuance, or for such longer period as may be required by the applicable certifying organization (e.g., the American Heart Association) or applicable law.

Payment records: Financial and payment-related records are retained for a minimum of seven (7) years, or as otherwise required by applicable tax and accounting laws and regulations.

Marketing and communications data: If you have opted in to marketing communications, we retain your contact information for this purpose until you opt out or request deletion.

Website usage logs: Server logs and website analytics data are retained for up to twelve (12) months, after which they are deleted or anonymized.

General correspondence: Emails and other correspondence are retained for a period reasonably necessary to address the subject matter of the communication and any related follow-up.

SSL/TLS encryption for data transmitted between your browser and our website

Secure server environments with access controls and authentication requirements

Role-based access controls limiting access to personal information to authorized personnel who need it to perform their job functions

Regular security reviews of our information systems and practices

Children under age 13: We will not knowingly enroll or collect personal information from a child under age 13 without documented parental or legal guardian consent. If we discover that we have inadvertently collected such information without consent, we will promptly delete it.

Parental rights: Parents and legal guardians may contact us at any time to review, correct, or request deletion of personal information collected from or about their minor child. Please contact us using the information provided in Section 14.

11. Your Rights and Choices All users have the following general rights regarding their personal information:

Right to Access: You may request a copy of the personal information we hold about you.

Right to Correction: You may request that we correct inaccurate or incomplete personal information.

Right to Deletion: You may request that we delete your personal information, subject to our legal retention obligations (e.g., certification records required by certifying bodies).

Right to Data Portability: You may request your personal data in a portable, readily usable format.

Right to Opt Out of Marketing: You may opt out of receiving promotional communications from us at any time by clicking "unsubscribe" in any marketing email or contacting us directly.

Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.

North Carolina Residents If you are a resident of North Carolina, you have additional rights under the North Carolina Consumer Privacy Act (effective January 1, 2026), including:

The right to know what personal data we collect and how it is used.

The right to access, correct, and delete your personal data.

The right to obtain a copy of your data in a portable format.

The right to opt out of the processing of your personal data for purposes of targeted advertising or the sale of personal data.

The right to non-discrimination — we will not deny services, charge different prices, or provide a different level of service because you exercised any of these rights.

Maintain reasonable administrative, technical, and physical data security safeguards to protect your personal information.

Notify you within 30 days in the event of a data breach that affects your private information.

Email: [email protected] (use subject line: "Privacy Request")

B. Automatically Through Our Website
When you visit our website, certain information is collected automatically through:

C. From Third Parties
We may receive information about you from third parties in limited circumstances, including:

4. How We Use Your Information
We use the personal information we collect for the following purposes:

5. Legal Basis for Processing
For individuals in jurisdictions that require a legal basis for processing personal information (including, but not limited to, states with comprehensive consumer privacy laws), we process your personal information under the following legal bases:

8. Data Retention
We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our general retention practices are as follows:

11. Your Rights and Choices
All users have the following general rights regarding their personal information:

North Carolina Residents
If you are a resident of North Carolina, you have additional rights under the North Carolina Consumer Privacy Act (effective January 1, 2026), including: