Privacy Policy

PRIVACY POLICY

This Privacy Policy describes how Youth CPR collects, uses, stores, and protects personal information provided by Participants and their parents or guardians. By participating in any Program Activity or providing personal information to Youth CPR, you consent to the practices described in this Privacy Policy.

1.  INFORMATION WE COLLECT

1.1  Information You Provide

Youth CPR may collect the following types of personal information from Participants or their parents/guardians:

  • Full name;
  • Age and/or date of birth;
  • School or institution of enrollment;
  • Grade level or academic year;
  • Email address (Participant and/or parent/guardian);
  • Phone number (Participant and/or parent/guardian);
  • Emergency contact information;
  • Health-related disclosures voluntarily provided (e.g., relevant medical conditions, allergies);
  • Signed consent forms and waivers;
  • Attendance and participation records.

1.2  Automatically Collected Information

If Youth CPR operates any website, online registration platform, or digital communication tools, we may automatically collect limited technical information such as IP addresses, browser type, and page interaction data through standard web technologies. This information is used solely for operational and security purposes.

1.3  Media and Visual Content

As described in the Terms and Conditions, Youth CPR may collect photographs or video recordings of Program Activities in which Participants may appear.

2.  HOW WE USE YOUR INFORMATION

Youth CPR uses personal information only for the following legitimate non-profit educational purposes:

  • Registering and confirming Participant enrollment in Program Activities;
  • Communicating with Participants and/or their parents/guardians about Program Activities, scheduling, and updates;
  • Maintaining attendance and participation records;
  • Responding to health-related needs or emergencies during Program Activities;
  • Fulfilling parental consent requirements for minor Participants;
  • Documenting organizational activities for grant applications, reporting, or non-profit compliance purposes;
  • Improving the quality and effectiveness of Program Activities;
  • Producing promotional, educational, or informational materials (only with appropriate consent for media).

Youth CPR will NOT use personal information for commercial marketing, advertising, or any purpose unrelated to its educational non-profit mission.

3.  SHARING AND DISCLOSURE OF INFORMATION

Youth CPR does not sell, rent, trade, or otherwise transfer personal information to outside parties. Personal information may be shared only in the following limited circumstances:

  • With volunteers, co-instructors, or organizational members of Youth CPR who require the information to facilitate Program Activities;
  • With venue operators or partner organizations to the minimum extent necessary for hosting Program Activities;
  • With school administration or faculty where Youth CPR operates on school premises, as required by school policy;
  • With parents or legal guardians of minor Participants;
  • When required by law, court order, or lawful governmental request;
  • When necessary to protect the safety or health of any individual.

In all cases, Youth CPR will endeavor to share the minimum amount of personal information necessary for the stated purpose.

4.  PROTECTION OF MINORS

Youth CPR is committed to protecting the privacy and safety of minors. We adhere to the following practices:

  • We do not knowingly collect personal information from individuals under the age of 13 without verifiable parental consent, in compliance with the Children’s Online Privacy Protection Act (COPPA) and applicable law;
  • For Participants between the ages of 13 and 17, we require written parental or guardian consent prior to collecting or processing personal information;
  • We do not publicly post, publish, or display personally identifying information about minor Participants without explicit parental or guardian consent;
  • Media containing identifiable images of minors will not be used without documented parental or guardian consent;
  • Any personal information collected from or about minors will be used exclusively for purposes directly related to their participation in Program Activities.

Parents or guardians who believe their child’s information has been collected without proper consent should contact Youth CPR immediately to request removal.

5.  DATA RETENTION

Youth CPR retains personal information only for as long as necessary to fulfill the purposes for which it was collected, including for compliance with legal, organizational, or reporting obligations. Typical retention periods are as follows:

  • Registration and consent forms: Retained for a minimum of three (3) years following the relevant Program Activity for liability and compliance purposes;
  • Attendance records: Retained for a minimum of three (3) years;
  • Health disclosures: Retained only for the duration of the relevant Program Activity and promptly and securely destroyed thereafter, unless otherwise required by law;
  • Media (photographs/video): Retained for so long as they are actively used for organizational purposes, subject to withdrawal of consent.

Upon expiration of retention periods, personal information will be securely deleted or destroyed.

6.  DATA SECURITY

Youth CPR takes reasonable and appropriate measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Restricting access to personal information to authorized Youth CPR members and volunteers on a need-to-know basis;
  • Storing physical records in secure, access-controlled locations;
  • Using password-protected and access-controlled digital storage for electronic records;
  • Promptly addressing any identified security vulnerabilities.

No method of data storage or transmission is completely secure. While Youth CPR strives to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to affect Participants, Youth CPR will notify affected individuals as promptly as practicable and in accordance with applicable law.

7.  YOUR RIGHTS REGARDING YOUR INFORMATION

Subject to applicable law, Participants (or their parents/guardians) may have the following rights with respect to their personal information:

  • The right to access and review the personal information Youth CPR holds about them;
  • The right to request correction of inaccurate or incomplete personal information;
  • The right to request deletion of personal information, subject to Youth CPR’s legal retention obligations;
  • The right to withdraw consent for the use of media in which they appear;
  • The right to opt out of non-essential communications.

To exercise any of these rights, please contact Youth CPR using the contact information provided at the end of this document. Youth CPR will respond to all requests within a reasonable time and in accordance with applicable law.

8.  COOKIES AND ONLINE PLATFORMS

If Youth CPR uses a website, registration platform, or social media presence, such platforms may use cookies, tracking pixels, or similar technologies in accordance with their own privacy policies. Youth CPR encourages Participants and parents/guardians to review the privacy policies of any third-party platforms used in connection with registration or communication. Youth CPR does not control the data practices of third-party platforms.

9.  CHANGES TO THIS PRIVACY POLICY

Youth CPR reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to Participants (and parents/guardians of minor Participants) by reasonable means prior to the change taking effect. Continued participation in Program Activities following any modification constitutes acceptance of the revised Privacy Policy.

ACKNOWLEDGMENT AND CONSENT FORM

By signing below, the Participant (and, if the Participant is under 18 years of age, their parent or legal guardian) acknowledges that they have read, understood, and agreed to the Terms and Conditions and Privacy Policy of Youth CPR in their entirety.

The undersigned further acknowledges that:

  • Youth CPR provides educational instruction only and does not confer official CPR/AED/First Aid certification;
  • Participation involves voluntary assumption of risks as described in the Terms;
  • Personal information will be handled in accordance with the Privacy Policy;
  • For minor Participants, the parent or legal guardian has provided knowing and voluntary consent to participation and to the collection of information as described above.

Last Updated: April 28, 2026

This policy is designed to comply with the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and other emerging state privacy laws across the USA.

1. Information We Collect (By Category)

  • Identifiers: Name, alias, email address, IP address.
  • Protected Classifications: Age (to ensure compliance with COPPA).
  • Education Information: Course progress and quiz scores.

2. State-Specific Privacy Rights

  • California Residents (CCPA/CPRA): You have the right to request the categories of data collected, the right to delete personal information, and the right to “Opt-Out” of any data “sale.” Note: We do not sell your data.
  • Nevada Residents: We comply with SB-220—you may submit a verified request to ensure no future sale of your data.
  • Virginia, Colorado, Connecticut, and Utah Residents: We provide the same rights of access, correction, and deletion as required by your respective state’s comprehensive privacy laws.

3. Children’s Online Privacy (COPPA – All States)

Youth CPR is a platform for teens.

  • We do not knowingly collect personal information from children under 13 without verifiable parental consent.
  • In accordance with the Children’s Online Privacy Protection Act, any parent can request the deletion of their child’s data by contacting our support team.

4. Data Sharing & Third Parties

We do not share your data with third parties for marketing. We only share data with:

  • Service Providers: (e.g., website hosting, email delivery) strictly to operate the site.
  • Law Enforcement: Only when required by a valid state or federal subpoena.

5. “Do Not Track” (DNT) Signals

California law requires us to let you know how we respond to web browser DNT signals. Currently, there is no industry standard, so we do not monitor or take action with respect to these signals.

6. Contact Information for Data Requests

To exercise your state-specific rights (Access, Deletion, Correction), please use our Contact Us portal: