Privacy Policy

Queen of Hearts CPR ("we," "us," "our") respects your privacy. This policy explains what information this website (the "Site") collects, how we use it, and the choices you have. The short version: we collect only what you choose to send us to book a class, we use it to respond to you, and we never sell your information.

1. Information you give us

When you submit the booking form, call, text, or email us, you may share:

• Your name, email address, and phone number
• The class you're interested in, whether it's for an individual or a group, and a preferred date
• Anything else you include in your message

When you request a class, two things happen with that information:

• It is emailed to our business address so we can reply to you. Email delivery is handled by Resend, and if that is unavailable we fall back to a form-processing service (Formspree) or your own email app. Whichever route is used, your submission passes through that provider subject to its own privacy policy.
• If you selected one of our listed class dates, your name, email address, phone number, and any note you added are saved to our class roster so we know who is coming. That roster is stored in a database hosted by Supabase and is visible only to us, behind a password.

We do not take card or payment details on this Site, and we never sell your information.

2. Information collected automatically

We do not run advertising trackers and the Site does not set its own cookies. Like most websites, however, some technical data is processed automatically by the services that make the Site work:

• Hosting, our hosting provider (Vercel) may log standard technical information such as IP address, browser type, and pages requested, for security and operations.
• Fonts, the Site loads fonts from Google Fonts; that service receives standard technical request data (such as your IP address) when your browser fetches those files.
• Abuse prevention, when you submit the booking form or sign in to our staff page, we record the IP address and a timestamp so we can limit automated spam and repeated failed sign-in attempts. These records are kept for one day and then deleted automatically. They are not used for advertising or analytics.

3. How we use your information

• To respond to your booking request or question and schedule your class
• To keep basic records of classes and attendees (including certification records)
• To operate, secure, and improve the Site

We do not sell, rent, or trade your personal information. We do not use your information for third-party marketing, and we will not add you to a mailing list without asking you first.

4. When we share information

We share personal information only:

• With service providers who help operate the Site, limited to what they need to do their job. Today those are Vercel (hosting), Supabase (database that holds the class roster), Resend (email delivery), and Google Fonts (typefaces);
• With a certifying organization, if and as required to issue your certification card;
• If required by law, court order, or to protect safety or legal rights.

5. Data retention

We keep booking correspondence and class records only as long as reasonably needed for scheduling, certification, tax, and record-keeping purposes, then delete them. Class rosters are kept after the class so we can confirm who was certified and when their card expires. Abuse-prevention records (IP address and timestamp) are deleted automatically after one day. You can ask us to remove you from a roster at any time.

6. Your choices and rights

• You can contact us anytime to ask what information we hold about you, to correct it, or to request deletion (subject to records we must keep by law).
• Texting and calling are optional, you can always email instead.
• If you ask us to stop contacting you, we will.

7. Children's privacy

The Site is intended for adults. We do not knowingly collect personal information online from children under 13. Minors may attend classes only with a parent or guardian's involvement and consent; any information about a minor participant should be provided by the parent or guardian.

8. Security

We use reasonable measures to protect your information, including serving the Site over HTTPS. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the current version. Material changes will be posted on this page.

10. Contact us

Privacy questions or requests: queenofhearts.cpr23@gmail.com · 352-535-5301 · Queen of Hearts CPR, Chiefland, FL 32626.