Effective date: September 8, 2026 ·  Last updated: October 30, 2026

Code One Training Solutions provides CPR, first aid and advanced life support training. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Information We Collect

Information you give us. Your name, email address, postal address and telephone number; the course you register for and the location and time you choose; your date of birth where a certifying body requires it; payment information, which is handled by our payment processor — we never store full card numbers; records of your training, assessments and certifications; and the content of your messages to us, including email, text and live chat.

Information collected automatically. Device, browser and usage information gathered through cookies and similar technologies when you use our website, including pages viewed, referring site and approximate location derived from IP address.

Information from your employer or sponsor. Where an organization enrolls you, we receive the roster information they supply, which is typically your name, email address and the course you are assigned.

Video from monitored locations. Video, and inferences drawn from it, where automated monitoring is in use. Audio is not recorded. Section 5 sets this out in full.

2. Sensitive Information

Some of what we hold may count as sensitive personal information under state privacy laws, including the Connecticut Data Privacy Act, the Colorado Privacy Act and the Virginia Consumer Data Protection Act. This includes date of birth, information about a learner we know to be a minor, and health-related information generated by safety monitoring during a skills session.

We collect the minimum needed, use it only for the purposes described in this policy, and obtain consent where the law requires it or rely on a recognized legal exception. Sensitive information is never shared with advertising partners, and never used for advertising or measurement of any kind.

3. How We Use Your Information

We use your information to deliver your course and verify your skills; to record attendance and issue certifications and eCards; to schedule, reschedule and remind you about appointments; to take payment and issue receipts; to monitor sessions for supervision and safety; to answer your questions and provide support; to prevent fraud and misuse; to meet our legal, accreditation and certifying-body obligations; and to improve our courses and our website.

We also use it for marketing — to tell you about courses, renewals and offers — where you have consented or where the law otherwise allows, and always with a way to opt out. Section 4 describes how this may involve advertising partners, and Section 10 how to opt out.

Identifiable recordings and the inferences drawn from them are never used to train artificial-intelligence or computer-vision models. Recordings of minors and of students are never used for model development of any kind.

4. Cookies, Analytics, and Advertising

Cookies. We use cookies and similar technologies to operate the site, remember your preferences, and measure and analyze traffic. You can control cookies through your browser settings; blocking them may stop parts of the site working.

Analytics. We use Google Analytics and Google Tag Manager to understand how the site is used. These set cookies and receive information about your visit, including pages viewed, approximate location derived from IP address, and device and browser details.

Advertising. We advertise our courses online, and to do that we share information with advertising and measurement partners — including Google (Google Ads), and any similar platform we use in future. This may involve:

• showing you our ads on other websites and apps after you have visited ours, including ads about a course you looked at but did not book;
• building audiences of people likely to be interested in our courses, and audiences that resemble our existing customers;
• measuring which ads led to a registration, so we know what to spend on.

What we share for advertising. Online identifiers — cookie and device identifiers, IP address — and your email address, which is supplied in a hashed (irreversibly scrambled) form so the platform can match you to an existing account without receiving the address itself.

What we never share for advertising.

• Your telephone number, including mobile numbers, text-message opt-in data and consent records. These are excluded entirely. See Section 6A.
• Sensitive information as described in Section 2, including date of birth and any health-related information.
• Your training, assessment or certification records, or the fact that you hold or need any particular certification.
• Any information about a learner we know to be under 18.
• Video recordings from monitored locations, or the inferences drawn from them.

Selling and sharing. We do not sell your personal information for money. Some state privacy laws define “sell” and “share” broadly enough that the advertising activity described above may count as a sale or as sharing for cross-context behavioral advertising. You can opt out at any time, and we will not treat you differently for doing so.

How to opt out. Use the Your Privacy Choices link in the footer of our website. It records your choice against your customer record, so it applies on every device and not only the browser you used. We also recognize and honor the Global Privacy Control (GPC) and other browser or device opt-out preference signals, as described in Section 13.

5. Video Monitoring, Recording, and AI-Assisted Analysis

Where and why. Cameras operate in remotely monitored skills rooms and in common areas. They support instructor supervision, verification that skills were performed, learner safety, and facility security. Cameras are visible, monitored areas are not private, and there are no cameras in restrooms.

Audio. Audio is connected only for a live call with a staff member and is never recorded. An audible chime sounds whenever audio or video is connected to the room.

Storage. Recordings are stored by our camera provider, Ring. Live session video is carried by LiveKit.

Automated analysis. Where enabled, AI-assisted tools derive presence in the room, session timing, whether skills were performed, safety events and facility conditions. These tools can make mistakes, which is why Section 11 requires a person to review any adverse result.

Biometrics. We do not capture or use facial, hand, fingerprint, retina, iris or voiceprint data, and we do not use any of it to identify you.

Human review. A certification decision that would go against you is reviewed by a qualified member of staff before it stands, and you may contest the result.

Consent. Recording is a condition of a monitored self-guided skills session. There is no non-recorded alternative for those sessions; if you would rather not be recorded, an instructor-led session is the alternative.

Advertising. Recordings and the inferences drawn from them are never shared with advertising partners, never used for advertising or measurement, and never used to train AI models.

6. How We Share Your Information

We do not sell your personal information for money. We share it only as follows.

Service providers. Companies that run parts of our business under contract — payment processing, email and text delivery, our learning platform, scheduling, camera recording and storage, and IT services. They may use your information only to perform those services for us, and for nothing else. They do not receive raw video recordings or the underlying AI inferences except where that is the service they provide.

Advertising and measurement partners. As described in Section 4, we share online identifiers and a hashed form of your email address with advertising platforms, including Google, so we can advertise our courses and measure whether those ads work. Telephone numbers are excluded from this category entirely — see Section 6A. So are sensitive information, certification records, information about minors, and video. You can opt out using the Your Privacy Choices link, and we will not treat you differently for doing so.

Employers and sponsoring organizations. Where an employer or school pays for your training, we tell them that you were assigned a course, whether you completed it, and when your certification expires. Section 7 sets out what they do and do not see.

Certifying bodies. The American Heart Association and similar organizations, so your certification can be issued and verified.

Legal and safety. Where we are required by law, to respond to valid legal process, to protect someone’s safety, or to establish or defend a legal claim. We do not provide recordings to law enforcement except in response to valid legal process or a genuine emergency.

Business transfers. If Code One is sold, merged or reorganized, your information may transfer with the business. We would tell you first, and this policy would continue to apply until you were given notice of any change.

6A. Text Messages (SMS) and Mobile Information

No mobile information is shared for marketing purposes. We do not sell, rent, or share mobile phone numbers, text messaging originator opt-in data, or consent records with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are excluded from every category of sharing described in Section 6 above. This exclusion applies in full to the advertising and measurement partners named in Sections 4 and 6. Your telephone number is never shared with an advertising platform, in any form, hashed or otherwise.

We share a mobile number with our messaging provider (Twilio) only to the extent required to deliver the messages you have asked for.

Service messages. If you register for a course, we may text you about that registration: confirmations, reminders, check-in links, instructor contact during a session, and certification or eCard delivery notices. These relate to a transaction you started.

Renewal reminder messages (marketing). We send these only to people who have expressly opted in, by checking the renewal-reminder box during registration or opting in on our website.

• Program: Code One certification renewal reminders.
• Sent from: (866) 558-4277.
• Message frequency: varies, approximately 4 messages around each renewal date.
• Cost: message and data rates may apply. Code One does not charge for these messages; your mobile carrier may.
• To stop: reply STOP to any message at any time. You will receive one confirmation and then no further marketing messages from that number.
• For help: reply HELP, email info@code1web.com, or call 860-786-1789.
• Consent is not a condition of purchase. Declining text messages does not affect your registration, your course, or your certification.

Opting out of renewal reminders does not stop service messages about a course you are registered for. To stop those as well, contact Customer Support. Message delivery depends on your mobile carrier and is not guaranteed.

7. Employer- and School-Sponsored Learners

Where an employer, school or other organization pays for your training, they are told which course you were assigned, whether you have started and completed the online portion, whether you attended your skills session, and when your certification expires. They do not see your payment details, your messages to us, or any video.

If you are a sponsored learner, the organization that enrolled you is responsible for the information it gives us about you, and its own privacy policy governs what it does with what we report back.

Sponsored learners are not excluded from the advertising described in Section 4, because we hold your email address as a customer in your own right. The Your Privacy Choices link works for you exactly as it does for anyone else, independently of your employer.

8. Data Retention

We keep training and certification records for as long as a certifying body requires and as long as is needed to verify a credential you hold — typically well beyond the two-year life of a card, because people ask us to confirm past training.

We keep registration, payment and correspondence records for as long as needed for the purpose they were collected for, and then for as long as tax, accounting and legal requirements demand.

Video recordings are kept for a limited period and then deleted automatically, unless a specific recording is retained for a safety or certification dispute.

Opt-out records are kept for as long as we hold your record. If you opt out of advertising, we keep enough information to honor that choice permanently. Deleting the record of your choice would mean losing the choice itself.

9. How We Protect Your Information; Breach Notice

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information: encryption in transit, access controls limiting staff access to what their role requires, logging of access to learner records, and regular backups held in encrypted storage.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal information, we will notify you and the relevant authorities within the time limits the law sets, and we will tell you what was affected and what we are doing about it.

10. Your Privacy Rights and Choices

Depending on where you live, you have the right to know what personal information we hold about you and to get a copy of it; to correct it; to delete it, subject to the records we must keep for certification and tax purposes; to opt out of the sale or sharing of personal information and of targeted advertising; to opt out of profiling that produces legal or similarly significant effects; and to appeal if we refuse a request. We will not discriminate against you for exercising any of these rights — your price, your course and your certification are unaffected.

Your Privacy Choices

The Your Privacy Choices link in the footer of every page is how you opt out of your information being shared with advertising partners.

• It records your choice against your customer record, not just the browser you are using, so it applies on every device and keeps working if you clear your cookies.
• It takes effect on our systems immediately, and we pass the opt-out to our advertising partners within 15 days.
• You do not need an account, and you do not need to be signed in. You need only the email address you gave us.
• The choice is permanent until you change it. We will not ask you to renew it.

Opting out of advertising does not stop course confirmations, reminders, certification notices or other messages about training you have registered for. To change those, see Section 6A for text messages, or use the unsubscribe link in any marketing email.

How to make any other request

Email info@code1web.com or call 860-786-1789. We will verify your identity before acting — usually by confirming details already on your record — and respond within 45 days, extending once by a further 45 days where the law allows and telling you if we do.

Authorized agents. You may use an authorized agent to opt out on your behalf. We may ask the agent for proof of their authority and may ask you to confirm it directly.

Appeals. If we refuse a request, our reply will tell you how to appeal and give you the contact details of your state’s Attorney General.

11. Automated Processing and Human Review

AI-assisted tools help us monitor sessions, as described in Section 5. They can make mistakes. No certification decision that goes against you is made by automated processing alone — a qualified member of staff reviews it first, and you may contest the result by emailing info@code1web.com.

We do not use automated processing to decide what you are charged, and we do not profile you in any way that produces a legal or similarly significant effect.

12. Children and Minors

Our courses are sold to adults. Where a minor is trained — for example in a school program — we collect only what is needed to deliver and certify the training, and we rely on the school or the parent or guardian for consent.

We do not knowingly share any information about a person we know to be under 18 with advertising partners, and we do not advertise to minors. If you believe we hold information about a child and should not, email info@code1web.com and we will delete it.

13. Do Not Track and Opt-Out Preference Signals

We honor the Global Privacy Control (GPC) and other recognized opt-out preference signals. When your browser or extension sends one, we treat it as an opt-out of sharing your information for advertising, for that browser, without you needing to do anything else.

A browser signal applies to that browser only. To opt out everywhere, use the Your Privacy Choices link in Section 10, which records the choice against your customer record.

Browsers also send a “Do Not Track” signal, for which there is still no agreed standard. We do not respond to it; we respond to GPC instead.

14. International Users

Code One operates in the United States and stores information there. If you use our services from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

15. Changes to This Policy

We update this policy as our practices change. The effective date at the top always shows the current version.

If we make a material change — including any change to what we share with advertising partners — we will say so prominently on our website before it takes effect. A new category of sharing never applies retroactively to information collected before it was disclosed, and an opt-out you have already made continues to apply.

16. Contact Us

Code One Training Solutions

• Email: info@code1web.com
• Phone: 860-786-1789
• Privacy requests: use the Your Privacy Choices link, or email the address above with “Privacy request” in the subject line.