Privacy Policy

Effective Date: April 1, 2026  |  Last Updated: April 1, 2026

1. Introduction

Crisis Zone Consulting LLC ("Company," "we," "our," or "us") operates the CPR Course Manager platform accessible at cpr.czcsuite.com (the "Platform"). This Privacy Policy describes how we collect, use, disclose, and safeguard personal information submitted through the Platform, including course registration forms and instructor accounts.

By using the Platform or submitting a course registration, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms herein, please do not use the Platform or submit your personal information.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a CPR course or create an instructor account, we may collect:

• Full name
• Email address
• Phone number (optional)
• Mailing address (optional)
• Course enrollment information (course name, date, location)
• CPR card issuance and expiration dates
• Express consent preferences for marketing communications

2.2 Information Collected Automatically

When you access the Platform, we may automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited and timestamps

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Course Administration: To process your course registration, maintain enrollment records, and issue CPR certification documentation.
• Communications: To send transactional emails, including registration confirmations and course-related notices.
• Card Expiry Reminders: If you have expressly opted in, to send you email reminders when your CPR certification card is approaching its expiration date.
• Instructor Account Management: To create and maintain instructor accounts and facilitate course management.
• Legal Compliance: To comply with applicable laws and regulations, including recordkeeping obligations associated with CPR certification programs.
• Platform Security and Integrity: To detect and prevent fraud, abuse, or unauthorized access to the Platform.

We will not use your personal information for any purpose materially different from those described above without obtaining your prior consent.

4. Email Communications and Opt-In Consent

We send two categories of email communications:

4.1 Transactional Emails — These are sent automatically in connection with a specific action you have taken, such as submitting a course registration. Transactional emails include registration confirmations and account-related notices. These emails do not require affirmative opt-in consent and are sent as a necessary part of administering the service.

4.2 Card Expiry Reminder Emails — These are informational reminder emails notifying you that your CPR certification card is approaching expiration. These emails are only sent if you have expressly opted in by checking the consent box on the course registration form. You may withdraw your consent at any time by contacting us at joe@crisiszoneconsulting.com.

We do not send unsolicited commercial email ("spam"). All reminder communications comply with the CAN-SPAM Act of 2003.

5. Disclosure of Your Information

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their independent marketing purposes. We may disclose your information in the following limited circumstances:

• Service Providers: We use third-party service providers to operate the Platform, including database hosting (Supabase), email delivery (Resend), and server infrastructure (Render). These providers access personal information solely to perform services on our behalf and are contractually obligated to maintain confidentiality.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change by updating this Privacy Policy.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. CPR certification records may be retained for a period consistent with applicable professional and regulatory standards. Upon written request, we will delete or anonymize your personal information, subject to any legal retention obligations.

7. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, and secure third-party infrastructure. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Platform is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, please contact us and we will take steps to delete such information.

9. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Right of Access: The right to request a copy of the personal information we hold about you.
• Right of Correction: The right to request correction of inaccurate or incomplete personal information.
• Right of Deletion: The right to request deletion of your personal information, subject to applicable legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time.
• Right to Object: The right to object to processing of your personal information for certain purposes.

To exercise any of these rights, please contact us at joe@crisiszoneconsulting.com. We will respond to all verifiable requests within thirty (30) days.

10. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of the Platform after such changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Crisis Zone Consulting LLC
• Email: joe@crisiszoneconsulting.com
• Website: cpr.czcsuite.com