Privacy Policy — HLEBEN CPR
HLEBEN CPR — For the Love of Life

Privacy Policy

Effective Date: May 1, 2026 Last Updated: May 1, 2026
Your privacy matters to us. This Privacy Policy explains what personal information HLEBEN CPR collects, how we use it, and the choices you have regarding your data. By using our services, you agree to the practices described below.
01

Overview

HLEBEN CPR ("we," "us," or "our") is a CPR, AED, First Aid, and BLS training company based in Randolph, Massachusetts. We are committed to protecting the privacy of our clients, participants, and anyone who interacts with our business.

This Privacy Policy applies to information collected through our website, booking systems, email correspondence, phone interactions, in-person training sessions, and any other service touchpoint. It does not apply to third-party websites or services we may link to.


02

Information We Collect

Information You Provide Directly

Category Examples
Contact Information Full name, phone number, email address, mailing address
Organizational Information Business name, title/role, organization type
Booking & Course Information Course type, preferred dates, group size, location
Payment Information Billing details processed via third-party payment processors; we do not store full card numbers
Health Information Physical limitations or conditions disclosed voluntarily prior to training
Certification Records Name, course completed, date of certification, expiration date

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including IP address, browser type, pages visited, time on site, referring website, and device type.

Information from Third Parties

We may receive information about you from third parties, such as when an employer or organization registers you for a training course, or through referrals from partner organizations.


03

How We Use Your Information

HLEBEN CPR uses your information to:

  • Deliver Services: Schedule, confirm, and conduct CPR/AED, First Aid, and BLS training sessions
  • Issue Certification: Maintain records of course completion and certification
  • Communicate: Respond to inquiries, send confirmations, reminders, and follow-ups
  • Process Payment: Handle course fees, invoices, and receipts
  • Ensure Safety: Accommodate disclosed physical limitations during training
  • Marketing: Send information about courses, renewal reminders, and promotions (with your consent where required)
  • Improve Services: Analyze usage and enhance our training programs
  • Legal Compliance: Comply with applicable laws and legal processes
We do not sell your personal information. HLEBEN CPR does not sell, rent, or trade your personal data to third parties for their marketing purposes.

04

Sharing of Information

With Service Providers

We work with trusted third-party service providers (payment processors, scheduling platforms, email providers, cloud storage) who are contractually obligated to keep your information confidential and may only use it to perform services on our behalf.

With Employers or Organizations

If your employer, school, church, or other organization has arranged and paid for your training, we may share your certification status and completion records with that organization, as they are a party to the service agreement.

For Legal Compliance

We may disclose your information if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of HLEBEN CPR, our clients, or others.

Business Transfers

In the event that HLEBEN CPR is sold, merged, or undergoes a change of ownership, your personal information may be transferred to the successor entity under the same privacy protections described in this policy.


05

Data Retention

HLEBEN CPR retains your personal information for as long as necessary to fulfill the purposes described in this policy:

  • Certification records — minimum five (5) years for verification purposes
  • Billing and payment records — minimum seven (7) years for tax and accounting purposes
  • Marketing communications — until you opt out or request deletion
  • General contact and booking information — up to three (3) years after your last interaction

After the applicable retention period, your data will be securely deleted or anonymized.


06

Data Security

HLEBEN CPR takes reasonable and appropriate technical and organizational measures to protect your personal information, including secure storage with access controls, encrypted payment processing, limited data access on a need-to-know basis, and regular review of our data handling practices.

Please note: No method of transmission or storage over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

07

Your Rights & Choices

You have the following rights regarding your personal information:

Access

Request a copy of the personal information we hold about you.

Correction

Request correction of any inaccurate or incomplete information.

Deletion

Request deletion of your personal data, subject to legal retention obligations.

Opt-Out

Unsubscribe from marketing communications at any time.

Portability

Request your data in a structured, machine-readable format where applicable.

Restriction

Request that we limit how we process your data in certain circumstances.

To exercise any of these rights, please contact us using the information in Section 12. We will respond within thirty (30) days and may need to verify your identity before fulfilling certain requests.

Marketing Opt-Out

You may opt out of marketing emails by clicking "unsubscribe" in any email we send, or by contacting us directly. You may still receive transactional messages related to your bookings or certifications.


08

Children's Privacy

HLEBEN CPR does not knowingly collect personal information from children under the age of thirteen (13) without parental or guardian consent. Where minors participate in training (such as school group programs), we collect information only through the enrolling institution or parent/guardian. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.


09

Cookies & Tracking Technologies

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze site usage. We may use essential cookies (required for site function), analytics cookies (to understand visitor behavior, e.g. Google Analytics), and preference cookies (to remember your settings).

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.


10

Third-Party Links

Our website or communications may contain links to third-party websites, social media platforms, or payment portals. HLEBEN CPR is not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.


11

Updates to This Policy

HLEBEN CPR may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you by email or prominent notice on our website. Your continued use of our services after any changes constitutes acceptance of the updated policy.


12

Contact Us

Questions, concerns, or privacy requests? We're here to help:

HLEBEN CPR — Privacy Inquiries Randolph, Massachusetts
Serving the South Shore & surrounding communities
Email: [email protected]
We aim to respond to all privacy-related inquiries within 30 days.