Privacy & Cookie Policy

ResusReady Healthcare Inc. ("ResusReady," "we," "us," or "our") provides online and in-person clinical education through www.resusready.ca. This Privacy & Cookie Policy applies whenever you visit our website, register for a course, subscribe to ResusReady Online, attend an in-person course, contact us, or otherwise interact with our services (the "Services").

We are a Canadian company based in British Columbia. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. If you are in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent legislation, described in Section 12. If you are a California resident, you have additional rights under the California Consumer Privacy Act, described in Section 13.

​

01 Information We Collect

 

​We collect the following categories of personal information:​

​

1.1 Information you give us directly

​

• Contact details: name, email address, phone number, and mailing or billing address.

• Professional information: your healthcare role (such as paramedic, nurse, EMT, physician, student) and country.

• Registration and booking details: course selections, registration dates, payment confirmation, and (for in-person courses) any accessibility requests.

• Communications: messages, emails, support requests, feedback, and any other communication you send us.

• Other information: if you complete a form, post a comment, or share information through our Services, we collect what you submit.

 

1.2 Information generated by your use of the Services

​

• Course progress and engagement: for ResusReady Online subscribers, we collect data about which courses you start, videos viewed, time spent, quiz attempts, knowledge check scores, and completion status. This gives you a record of your learning, allows us to issue certificates, and helps us improve courses.

• AI Tutor interactions: queries you submit to our AI Tutor are recorded and stored so you can return to your conversation, and so we can improve the feature. We do not require, encourage, or want you to enter any patient information, protected health information, or clinical or personal data about anyone else into the AI Tutor. Please don't.

• Technical information: IP address, browser type and version, device type and operating system, referring website, pages visited, time spent, and similar technical information. Collected automatically by our hosting provider (Wix) and analytics tools.

 

1.3 Information from third parties

 

We may receive information about you from payment processors (confirming a successful payment), Heart & Stroke (for course rosters and certification tracking where applicable), and analytics or advertising platforms (in aggregated form). We do not buy personal data from data brokers.

​

02 What We Don't Collect

​

We do not knowingly collect, and we do not want you to send us, any of the following:

• patient-identifiable information, protected health information (PHI), or any clinical record about another person;

• government-issued identification numbers (such as Social Insurance Numbers, passport numbers, or driver's licence numbers), other than where required for tax purposes for instructor contractors;

• full payment card numbers (these go directly to our payment processor — we never see or store them);

• information about children under 18. The Services are intended for adults only. If you believe a minor has provided us with personal information, please contact us so we can delete it.

​

03 How We Use Your Information

​

We use your personal information for the following purposes:

​

• Providing the Services — creating and managing your account, registering you for courses, granting access to ResusReady Online content, issuing certificates of completion.

• Payment processing — processing your payment, sending receipts, handling refunds, preventing fraud.

• Communications — sending course confirmations, reminders, cancellation notices, and other transactional emails. Responding to your questions.

• Improving the Services — understanding how courses are used so we can improve them, fixing bugs, developing new features.

• Marketing (with consent) — sending newsletters, course announcements, and promotional emails — only if you've opted in. You can unsubscribe any time.

• Legal and security — complying with tax, accounting, and other legal obligations. Preventing fraud or misuse. Enforcing our Terms & Conditions.

 

3.1 Legal bases for processing (GDPR / UK)

​

If you are in the EEA, UK, or Switzerland, we rely on the following legal bases under Article 6 of the GDPR:

​

• Contract performance: for account creation, course registration, course delivery, and customer support.

• Legitimate interests: for improving the Services, security, marketing to existing customers about similar services, and operating our business — balanced against your rights and freedoms.

• Consent: for marketing emails to non-customers, certain non-essential cookies, and any processing of sensitive data. You can withdraw consent at any time.

• Legal obligation: for tax records, anti-money-laundering checks, and other legal requirements.

 

04 Service Providers and Third Parties

​

To run our business, we share personal information with carefully selected service providers ("data processors") who process it on our behalf. We choose providers who offer appropriate data protection and we share only what is necessary. Our main service providers:

​

• Wix.com Ltd. — website hosting, learner management (Wix Online Programs), AI Tutor, email marketing, and business operations. Shares account info, course progress, AI Tutor conversations, communications, and technical data.

• Wix Payments / Stripe — payment processing for courses and subscriptions. Shares name, billing address, email, and payment card data (handled directly by them — we never see full card numbers).

• Google (Google Analytics) — understanding website traffic and user behaviour in aggregate. Shares IP address, browsing behaviour, and device info.

• Meta Platforms (Meta Pixel) — conversion tracking and remarketing for paid advertising. Shares IP address, browsing behaviour, and ad interactions.

• Heart & Stroke Foundation of Canada — issuing certifications for in-person courses where applicable. Shares name, email, and course completion data.

• Professional advisors — legal, accounting, insurance, and tax compliance. Shares only what is necessary for the matter.

 

We do not sell your personal information to anyone. We do not rent or trade your personal information for marketing purposes.

We may disclose your information without your consent where required by law (for example, in response to a court order, subpoena, or government investigation), to protect our legal rights, or in connection with a sale, merger, or reorganization of our business — in which case the new owner will be bound by this Privacy Policy.

 

05 The AI Tutor

​

Our AI Tutor is a navigation and study aid that helps you interact with content we have curated in ResusReady Online. It is powered by Wix's built-in AI assistant, which means AI Tutor data is handled by Wix under the same protections described in Section 4 (service providers) and Section 10 (international data transfers). 

 

 5.1 What we store

​

• conversation history with the AI Tutor is stored on our platform so you can return to past conversations;

• we use AI Tutor interactions to improve the feature, review quality, and address bugs. We do not sell AI Tutor data.

 

 5.2 What you should know

​

• AI-generated responses can be inaccurate or incomplete and must never be relied upon for clinical decisions (see our Terms & Conditions, Section 3);

• do not enter patient information, identifiable health information about anyone, or sensitive personal data into the AI Tutor;

• if you want a copy of your AI Tutor conversations or want them deleted, contact us at hello@resusready.ca.

 

06 Cookies and Tracking Technologies

​

A "cookie" is a small text file that a website stores on your device. We use cookies and similar technologies (such as pixels and local storage) to operate the Services, understand how they're used, and — with your consent — to support advertising.

 

6.1 Categories of cookies we use

​

• Strictly necessary — essential for the site to function (login, checkout, security). Cannot be opted out of. Examples: Wix session cookies.

• Functional — remember your preferences such as language and accessibility settings. Can be opted out. Examples: Wix preference cookies.

• Analytics — understand how visitors use the site in aggregate. Can be opted out. Examples: Google Analytics.

• Advertising — measure ad performance and show relevant ads on other sites. Can be opted out. Examples: Meta Pixel, Wix ad tools.

 

6.2 Managing your cookie preferences

​

When you first visit our site, you'll see a cookie banner that lets you accept or decline non-essential cookies. You can change your preferences any time through the cookie settings link in the footer, or by clearing cookies in your browser. Disabling certain cookies may affect your experience.

 

You can also opt out of Google Analytics by installing the browser add-on at tools.google.com/dlpage/gaoptout, and out of Meta Pixel tracking through your Facebook and Instagram ad preferences.

 

6.3 "Do Not Track"

​

Some browsers offer a "Do Not Track" signal. There is no industry consensus on how to respond to it, and we currently do not respond to it. You can manage tracking through our cookie banner instead.

 

07 Marketing Communications

​

We will only send you marketing emails if you have opted in to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email, by updating your account preferences, or by emailing hello@resusready.ca. Unsubscribing from marketing doesn't stop transactional emails (receipts, course confirmations, account notifications) — those are part of providing our services.

 

08 Data Retention

​

We keep your personal information only as long as we need it for the purposes set out in this policy, or as required by law. Our standard retention periods:

​

• Payment and transaction records — kept for 7 years from the transaction date. Required by Canada Revenue Agency and provincial sales-tax obligations.

• Course completion and certification records — kept for 7 years from completion. Supports re-certification, verification requests, and Heart & Stroke obligations.

• Account information (name, email, profile) — kept for the active period plus 3 years after last activity. Supports re-activating dormant accounts, responding to questions, and defending legal claims.

• Course progress and engagement data — kept for the active period plus 3 years after last activity. Aligns with account data and supports your learner records.

• AI Tutor conversation history — kept for the active period plus 2 years after last activity, or until you ask us to delete it. Preserves your conversation history and helps improve the feature.

• Marketing email lists — kept until you unsubscribe plus 3 years for record-keeping. Required to demonstrate consent under anti-spam legislation.

• Technical and analytics logs — kept up to 26 months (Google Analytics default). Industry standard for aggregate analytics.

• Support and communication records — kept for 5 years after the last interaction. Supports follow-up questions and complaints handling.

​

After the retention period, we delete or anonymize your information. Anonymized information (which cannot be linked back to you) may be retained indefinitely for statistical and research purposes.

 

09 Data Security

​

We take the security of your personal information seriously. We use a combination of technical, physical, and administrative safeguards, including:

​

• encryption of data in transit (HTTPS/TLS) across our website;

• encryption at rest for sensitive data stored by our service providers;

• access controls and authentication for staff who handle personal information;

• vendor-management practices to ensure our service providers meet appropriate security standards;

• PCI-DSS-compliant payment processing — we never see or store full card numbers.

 

No system can be guaranteed 100% secure. If we become aware of a security incident that has compromised your personal information and creates a real risk of significant harm, we will notify you and the relevant privacy authorities as required by law (in Canada, the Office of the Privacy Commissioner under PIPEDA; in the EEA, the relevant supervisory authority under GDPR Article 33).

 

10 International Data Transfers​

 

ResusReady is based in Canada, but our service providers operate internationally. As a result, your personal information may be stored or processed in countries outside Canada and outside your country of residence, including:

​

• United States — Wix data centres, payment processors, analytics providers;

• Ireland and other EU member states — Wix data centres;

• Israel — Wix corporate operations;

• South Korea, Taiwan, and other locations as required by our service providers.

​

Laws in those countries may differ from your local privacy laws. Where we transfer personal information internationally, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office, and other lawful transfer mechanisms. By using the Services, you understand and acknowledge that your information may be transferred to and processed in countries outside your own.

 

11 Your Privacy Rights — Canada (PIPEDA)​

 

Under PIPEDA and applicable provincial privacy laws, you have the right to:

​

• Access: ask us what personal information we hold about you and how it is used;

• Correction: ask us to correct inaccurate or incomplete information;

• Withdraw consent: withdraw consent at any time (subject to legal and contractual restrictions);

• Deletion: ask us to delete your personal information (we will do so unless we're required to keep it for legal or business reasons — see Section 8);

• Complaint: file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

 

To exercise any of these rights, email hello@resusready.ca with "Privacy Request" in the subject line. We will respond within 30 days, or sooner where required by law.

 

12 Your Privacy Rights — Europe, UK, Switzerland (GDPR)

​

If you are in the EEA, UK, or Switzerland, you have additional rights under the GDPR:

​

• Right of access (Art. 15): the right to know what personal data we hold about you and to receive a copy;

• Right to rectification (Art. 16): the right to ask us to correct inaccurate or incomplete data;

• Right to erasure (Art. 17): the right to ask us to delete your personal data in certain circumstances;

• Right to restrict processing (Art. 18): the right to restrict how we use your data while a dispute is being resolved;

• Right to data portability (Art. 20): the right to receive your data in a portable format or to have it transferred to another provider where technically feasible;

• Right to object (Art. 21): the right to object to processing based on legitimate interests, including direct marketing;

• Right to withdraw consent: if you have given consent, you can withdraw it at any time (without affecting the lawfulness of processing before withdrawal);

• Right to lodge a complaint: with your local data protection authority. A list of EU supervisory authorities is at edpb.europa.eu/about-edpb/about-edpb/members_en.

 

To exercise these rights, email hello@resusready.ca with "GDPR Request" in the subject line. We will respond within one month, as required by GDPR Article 12. We do not currently have a designated EU representative or Data Protection Officer; if our European user base grows, we will appoint one as required by GDPR Article 27 and update this policy.

 

13 Your Privacy Rights — California (CCPA / CPRA)​

 

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended:

​

• Right to know: what categories of personal information we have collected about you, the sources, the purposes, and the categories of recipients;

• Right to access: request a copy of the personal information we have collected;

• Right to delete: request deletion of your personal information, subject to certain exceptions;

• Right to correct: ask us to correct inaccurate personal information;

• Right to opt out of sale or sharing: we do not sell personal information for money. We do use third-party advertising cookies (like Meta Pixel) which may qualify as "sharing" under the CCPA — you can opt out via our cookie banner;

• Right to limit: limit the use of sensitive personal information. We don't knowingly collect sensitive personal information as defined by the CCPA;

• Right to non-discrimination: we will not deny you services, charge you a different price, or provide a different level of quality because you exercised a privacy right.

 

To exercise these rights, email hello@resusready.ca with "California Privacy Request" in the subject line. We will verify your identity before responding and will respond within 45 days.

 

14 Children's Privacy

​

The Services are intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, contact us at hello@resusready.ca and we will delete it.

 

15 Third-Party Links

​

Our Services may contain links to websites or services operated by third parties. We are not responsible for the privacy practices of those third parties. Their privacy policies will govern your use of those services. We encourage you to read them before submitting any personal information.

 

16 Changes to This Policy

​

We may update this Privacy & Cookie Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If we make material changes that affect how we handle your personal information, we will give you reasonable notice (for example, by email or by an in-product notice) at least 14 days before the changes take effect, or as soon as is reasonably practicable. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

 

17 How to Contact Us

​

For any privacy questions, requests, or complaints, please contact us:

​

ResusReady Healthcare Inc.

Privacy email: hello@resusready.ca

Subject line: "Privacy Request" (or "GDPR Request" / "California Privacy Request" as applicable)

Web: www.resusready.ca

​

We respond to most privacy requests within 30 days. If you have concerns about how we have handled your information and are not satisfied with our response, you can also contact your local privacy regulator. In Canada, the relevant authority is the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376). British Columbia residents may also contact the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).