Privacy Policy
Effective 5/20/25
Wicked Safety Training LLC (“we,” “our,” or “us”) values your privacy and is committed to safeguarding the personal information we collect from visitors and customers (“you” or “your”).
This Privacy Policy explains how we collect, use, share, and protect your personal information when you interact with our website, services (including JoinCPR), Stripe payment processing, Google Analytics Advertising Features, and SMS messaging via Dialpad. By using our services, you agree to the terms of this Privacy Policy.
1. Scope of This Privacy Policy
This policy applies to all data collected through:
- Our website and associated services
- Stripe payment systems
- Google Analytics Advertising Features
- JoinCPR and any other associated platforms
- SMS communications via Dialpad
We adhere to U.S. federal laws, including the CCPA and COPPA, as well as Massachusetts regulations under M.G.L. c. 93H and 201 CMR 17.00, ensuring the security and confidentiality of personal information.
2. Information We Collect
We collect the following personal information:
Personally Identifiable Information (PII):
Full name, email address, phone number, and mailing address
Payment Information:
Cardholder name, billing address, last four digits of payment cards, and transaction details processed securely via Stripe
Usage Data:
- IP addresses, browsing history, and usage patterns via Google Analytics using cookies and similar technologies
Device Information:
- Browser type, operating system, and device identifiers
SMS Communication Data (via Dialpad):
- Your mobile phone number
- Message content, date, and time of delivery or response
Sensitive Personal Data:
- We do not routinely collect sensitive data (e.g., health information, Social Security numbers). If such data is disclosed, it will be deleted immediately upon discovery.
Children’s Data:
- We do not intentionally collect data from individuals under 13 without parental consent, in compliance with COPPA. If we discover data from a child under 13 without verified consent, we will promptly delete it.
3. How We Collect Your Information
Directly:
When you fill out forms, register, purchase services, or opt-in to SMS communications.
Via Third Parties:
Through Stripe for payments, Google Analytics and Microsoft Clarity using cookies for tracking website activity.
Automatically:
Through cookies and tracking technologies as you interact with our website.
SMS Consent:
You must opt-in to receive SMS messages from us. We will never send marketing or transactional texts without your express consent.
Cookie Consent:
You may adjust cookie settings via your browser. Our website uses cookies for essential functionality and analytics.
4. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services, including JoinCPR
- Process secure payments via Stripe
- Communicate updates, confirmations, promotional materials, and SMS notifications (e.g., appointment reminders, service updates)
- Comply with legal obligations under Massachusetts and federal laws
- Enhance user experience and deliver targeted advertising using Google Analytics
5. Sharing and Disclosure of Information
We share your information only as described below:
- With Payment Processors: Stripe for secure payment processing
- With Analytics Providers: Google Analytics for tracking and insights (data is anonymized where possible)
- With SMS Providers: Dialpad for delivering SMS messages (we do not sell or share phone numbers for marketing without consent)
- Legal Compliance: To comply with subpoenas, legal processes, or regulatory requirements
- Service Providers: With contractors who assist in business operations, subject to confidentiality agreements
CCPA “Sale” of Data:
We do not sell personal data to third parties. Sharing data with Google Analytics for advertising purposes does not constitute a “sale” under CCPA. To opt out of Google’s data collection, use the Google Analytics Opt-out Browser Add-on.
6. Data Security
We comply with 201 CMR 17.00, implementing a comprehensive Written Information Security Program (WISP). Measures include:
- Encryption of personal data during transmission (e.g., HTTPS)
- Regular audits of system vulnerabilities
- Access control to limit data exposure
- Secure disposal of outdated personal data
Data Breach Notification:
In the event of a breach, we will notify affected users and authorities as required by M.G.L. c. 93H within 72 hours of discovery.
7. Payment Security with Stripe
Payment information is processed exclusively through Stripe, a PCI-DSS-compliant service provider. We do not store full credit card details on our servers.
8. Google Analytics Advertising Features
We use Google Analytics Advertising Features to collect demographic and interest data for advertising purposes. You may:
- Opt out via the Google Analytics Opt-out Browser Add-on
- Adjust ad personalization settings in your Google account
9. SMS Text Messaging Policy (Dialpad Compliance)
We use Dialpad to send SMS messages related to your account, including reminders, updates, and service notifications.
- Opt-In Required: You must explicitly opt in to receive SMS messages.
- Purpose: We will only send messages related to services you have requested or scheduled.
- Message Frequency: Varies based on services scheduled, but no more than 4 messages/month unless otherwise authorized.
- Opt-Out Option: You can opt out at any time by replying “STOP” to any message. You may also contact us directly.
- Data Use: Your phone number and any message content are used solely for communication between you and Wicked Safety Training and are not shared or sold.
- Carrier Disclaimer: Message and data rates may apply. Check with your wireless provider for details.
10. Your Rights
As a U.S. resident, you have the following rights:
- Access and Portability: Request a copy of your personal data
- Correction: Correct inaccurate or incomplete data
- Deletion: Request deletion of your data, subject to exceptions under law
- Opt-Out of Sale/Sharing: Submit a request not to have your data sold or shared
- Non-Discrimination: You will not face discrimination for exercising these rights
Response Timeframe:
We will respond to verified requests within 45 days (CCPA requirement).
Massachusetts Residents:
Additional rights under M.G.L. c. 93H and 201 CMR 17.00 may apply.
11. Data Retention
We retain personal information:
- For 3 years after account closure or as needed to fulfill legal obligations
- Secure disposal methods (e.g., shredding, digital wiping) are used for outdated data
12. Children’s Privacy
Our services are not directed to individuals under 13. We comply with COPPA and take steps to ensure children’s data is not collected without verified parental consent.
13. Changes to This Privacy Policy
We may update this policy periodically. Material changes will be communicated via email or a website notice. Updates will be posted with the effective date at the top.
14. Contact Information
To exercise your rights or ask questions, contact us at:
- Email: info@wickedsafetytraining.org
- Phone: 617-820-9862
- Mailing Address: 546 Main Street, Woburn, MA 01801
Disclaimer:
This privacy policy applies only to U.S. users and complies with applicable federal and Massachusetts laws.
