Privacy Policy
Last updated: October 2, 2026
The short version
On The Mark CPR collects what you type into a form on this site, and — if you book a class — the details needed to enroll you, certify you and issue your card. We never see your card number. We also measure how the website is used with Google Analytics. We do not sell your information to anyone.
What we collect
When you send us a request. Whatever you chose to put in the form — typically your name, your email address, your phone number if you give one, and your message.
When you book a class. The email address and name of whoever is paying, and for each seat the attendee's name and, if given, their email, phone number and employer. We also record that you confirmed you own the required American Heart Association manual and that you understand the rebooking fee.
When you attend. Whether you checked in and when, whether you passed the skills test and the written test, and — if you passed — the card issued to you and the date it expires. This is a training record about a named person, and it is the part of this policy worth reading twice.
Payment. Card payments are taken on a page hosted by Stripe, our payment provider, not on this site. We receive confirmation that a payment succeeded and the amount. We never see, handle or store your card number.
When you visit. Whether or not you fill in a form, we use Google Analytics to measure how the website is used: which pages are viewed, how long visits last, which site or search sent you here, the type of device and browser you used, and an approximate location worked out from your IP address. This measures the website, not you — it tells us a page was read, not who read it.
How we use it
What you send through a form is used to reply to you and to arrange the training you asked about. Booking details are used to enroll you, to contact you about your class — confirmations, reminders, a cancellation — and to run the class you paid for. Attendance and results are used to decide whether a card may be issued and to answer you or your employer later if you ask us to confirm your certification. The analytics are used to understand which parts of the site are useful and to improve it. We do not use any of it to advertise to you.
Who else sees it
We do not sell, rent or trade your information. Three others necessarily handle some of it: the providers who host this website and deliver its email, Stripe, which processes payments, and the American Heart Association. The AHA issues your eCard, so the details needed to issue it are shared with them — the card is theirs, not ours, and there is no way to certify you without it. Google processes the analytics described above, and never receives what you typed into a form or a booking. We may also disclose information if the law requires it.
Cookies
Booking a class uses a cookie to hold your seats until you pay. Separately, Google Analytics sets cookies in your browser to tell repeat visits from new ones. You can block or delete cookies in your browser's settings, and Google publishes a browser add-on that turns Google Analytics off on every site you visit. Blocking the analytics cookies will not affect your ability to use this website, to book a class or to contact us.
How long we keep it
Requests are kept as long as we need them to answer you and to keep a record of our dealings with you. Training records are kept for longer: your class, your attendance and your result are retained for at least as long as the card is valid, because the card is issued under a named instructor's own AHA credential and they have to be able to show who was taught and what they passed. Analytics data is kept on a rolling basis by Google and is not tied to your name.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email info@onthemarkcpr.com. Two limits, stated plainly: we cannot delete a payment record we are required to keep, and we cannot delete a certification record while the card issued from it is still valid — deleting it would mean we could no longer confirm your own certification if you asked us to.
Children
Bookings are made by adults. We do not knowingly collect information from children under 13. If you believe a child has sent us information, contact us and we will delete it.
Changes to this policy
If this policy changes, the revised version appears on this page with a new date at the top.
Contact us
Questions about this policy, or want us to delete something you sent us? Email info@onthemarkcpr.com.