Privacy Policy
Legal Policies
Golden Hour Education is committed to conducting its medical training business in compliance with all relevant laws and regulations. The following sections outline our key policies and terms for students and website users. By using our services, you agree to these policies as detailed below.
Privacy Policy
Golden Hour Education (“we,” “us,” or “our”) respects your privacy and is dedicated to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, how we share it, and your rights (including under HIPAA and the California Consumer Privacy Act) regarding your data.​​
Information We Collect
We collect personal information necessary to provide our training services and operate our website. This may include:
-
Identifiers: Name, contact information (email, phone, postal address), and account login details .
-
Training Records: Enrollment details, course progress, exam scores, and certification outcomes (e.g., course completion status, issued certifications).
-
Payment Information: Billing name and contact, and payment method details. Note: Payments are processed through Square, so we do not store full credit card numbers on our servers.
-
Professional or Educational Info: If relevant, your employer or affiliation (for group trainings) and any credentials or licenses you provide.
-
Health Information (if provided): For example, any medical conditions or disabilities you choose to disclose for accommodation purposes. We only collect such information with your consent and to ensure your safety and equal access during training.
We collect personal information directly from you (e.g., when you register for a class or fill out a form) and from your interactions with our site (such as cookies and usage data). We will identify the purposes for which information is collected at or before the time of collection , and we will collect and use personal information solely to fulfill those purposes or other compatible purposes unless we obtain your consent or as required by law .
How We Use Your Information
We use the collected information to:
-
Provide and Improve Services: Process class registrations and payments, verify prerequisites, record course performance, issue certificates, and improve our course offerings and website.
-
Communicate: Send you confirmations, reminders, and updates related to your courses. We may also send informational or promotional emails about new courses or offers, but you can opt out of marketing communications as described below.
-
Compliance and Certification: Share necessary information with certifying organizations (e.g., the American Heart Association) to issue or verify your certification, and to report training completion as required . We only share the minimum data required (such as your name, completion status, and contact info for e-card issuance).
-
Legal and Safety: Fulfill legal obligations, such as record-keeping requirements, and use or disclose information as necessary to comply with law or protect the rights, property, or safety of our business, our students, or others .
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention is required by law (for example, maintaining training records for certification verification or legal compliance).
Payment Processing (Square)
All payments for our courses are handled through Square, a secure third-party payment processor. When you make a purchase, you will provide payment details (credit card number, billing address, etc.) directly to Square. We do not receive or store your full credit card information. Square’s processing of your payment information is governed by Square’s privacy policy and security practices. We only receive confirmation of payment and basic details needed to record your order (such as your name, email, and payment status). By paying through Square, you consent to Square’s collection and use of your data for payment purposes. If you have questions about how Square handles your information, please refer to Square’s Privacy Notice.
Disclosure of Your Information
We value your privacy. Golden Hour does not sell, rent, or trade your personal information to outside parties for their own commercial use . We only disclose your information in the following circumstances:
-
Service Providers: We share data with trusted third-party service providers as needed to operate our business and provide services to you – for example, technology hosting providers or payment processors. These parties are bound by obligations to keep your information confidential and use it only for the services requested .
-
Certifying Bodies: As noted, if your course results in a certification (such as an AHA course completion card), we will share required information with the certifying organization to issue your certification. This may include your name, contact information, and course results. We do not share more of your personal data than is necessary for that purpose.
-
Legal Compliance: We may release personal information when required by law, subpoena, or regulation, or if we have a good-faith belief that such disclosure is necessary to comply with legal obligations. We may also disclose information to enforce our policies, to protect our rights or the safety of our students or others, or to investigate fraud or security issues .
Aside from the above, any sharing of personal information would occur only with your consent. We do not engage in the sale of personal information as defined under the CCPA (no selling of data to data brokers or third-party advertisers, etc.) . Non-personal or aggregated data (which cannot identify you) may be used for analysis or marketing, or shared with third parties, in a way that does not reveal any individual’s identity .
Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction . For example, our website uses encryption (HTTPS) for data transmission. Payment transactions are secured through Square’s PCI-compliant systems. We restrict access to personal data to our employees or contractors who need it to perform their duties and who are bound to confidentiality.
Despite our efforts, no security measure is 100% perfect. Therefore, we cannot guarantee absolute security of information. You can help by using strong passwords, protecting your login credentials, and notifying us immediately of any suspected unauthorized use of your account.
Your Rights and Choices
Email Opt-Out: If you no longer wish to receive promotional emails or newsletters, you may unsubscribe at any time. We include an “Unsubscribe” link at the bottom of our marketing emails that you can use to opt out . Alternatively, you can contact us at any time to request removal from our mailing list. We will honor opt-out requests promptly . (Please note, we may still send you transactional or service-related communications, such as class reminders or receipts, as these are not promotional.)
Cookies: Our website uses cookies and similar technologies to enhance your browsing experience (for example, to remember your shopping cart or preferences). You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect certain features (for instance, you will not be able to log in or book classes if cookies are disabled) . Our Cookie usage is disclosed in our separate Cookies section or policy (if applicable).
California Privacy Rights (CCPA): If you are a California resident, you have specific rights under the California Consumer Privacy Act regarding your personal information:
-
Right to Know: You may request that we disclose what personal information we have collected about you in the past 12 months, including the categories of information, the sources of that information, the business purpose for collection, and the categories of third parties with whom we shared it . You may also request the specific pieces of personal information we hold about you (data portability request).
-
Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (for example, we may retain information needed to complete your transaction, for legal compliance, or for internal purposes compatible with the context of your interactions with us) . If you request deletion, we will delete your personal data from our records and instruct any service providers to do the same, unless a legal exception applies.
-
Right to Opt-Out of Sale: As noted, we do not sell personal information. If that practice changes in the future, we will update this policy and provide a mechanism for you to opt out.
-
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights . This means, for example, we will not deny you services, charge you a different price, or provide a different level of service because you exercised your privacy rights.
To exercise your CCPA rights, you (or an authorized agent) may submit a verifiable request by contacting us (see Contact Us below). We may need to verify your identity (for instance, by confirming information we have on file) before processing your request. We will respond to valid requests within the timeframe required by law. Note that under CCPA, certain information may be exempt from these requests – for example, information already governed by other privacy laws like HIPAA is not covered by CCPA .
HIPAA and Medical Information: Golden Hour is primarily an education provider and not a healthcare provider. In general, most of the personal data we handle is not “Protected Health Information” (PHI) subject to HIPAA. However, if you provide us with health-related information (for instance, noting a medical condition, disability, or vaccination status for course participation or requesting an accommodation), we treat that information with the same care as health providers do under HIPAA. In such cases, you have rights similar to patients under HIPAA, including:
-
The right to access and obtain a copy of any health information you have provided to us, within a reasonable time frame .
-
The right to request an amendment of your health-related information if you believe it is incorrect or incomplete . We will review any requested changes and either make the correction or let you know why we may deny the request (for example, if we believe the information is accurate as is) .
-
We will not use or disclose any health information you provide to us for any purpose other than facilitating your participation in our courses or as required by law (for instance, in an emergency or if required for public health reporting). We do not share your health details with third parties except as needed for your safety or as legally permitted. Any disclosure of health information for treatment or emergency reasons will be in line with HIPAA’s minimum necessary rule.
Please note, because Golden Hour is not a covered entity under HIPAA, these rights are offered as a courtesy and commitment to privacy. If you have any concerns about health information privacy, contact us and we will be happy to discuss or provide our full Notice of Privacy Practices if applicable.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will post the updated policy on our website and update the “Last Updated” date. If changes are significant, we may also notify you by email or by a notice on the site. We encourage you to review this policy periodically. Your continued use of our services after any update constitutes your acceptance of the revised Privacy Policy.
Contact Us
If you have any questions or concerns about this Privacy Policy, or wish to exercise your rights regarding your personal information, please contact us at:
Golden Hour Education – Privacy Office
Azusa, CA
Email: admin@goldenhoureducation.org
​
Please indicate the nature of your inquiry (e.g., “Privacy Question,” or “CCPA Request”) and provide enough information for us to verify your identity and process your request. We will respond as required by applicable law. Thank you for trusting Golden Hour Education with your personal information.
