Privacy Policy
How we collect, use, and protect your personal information.
Last updated: August 7, 2026
Who We Are
GTA CPR is a WSIB Approved CPR and First Aid training provider based in Markham, Ontario, serving the Greater Toronto Area. Our website address is: /
Information We Collect
We collect personal information that you voluntarily provide when you:
- Submit a contact form — name, email, phone number, and your message.
- Request a group training quote — name, email, phone, organization, group size, and training preferences.
- Apply as a provider — name, email, phone, organization, location, experience, and certifications.
- Browse this site — Google Analytics records pages viewed, approximate location from an anonymised IP address, device type and how you arrived (for example from a search engine).
- Use the chat assistant — the questions you type in the chat widget during your session.
- Book a class — name, email, phone, employer or organization, any existing certificate details, any accessibility or language needs, and how you heard about us. Bookings made through our own booking pages are stored on our server.
How We Use Your Information
We use personal information solely to:
- Respond to your enquiry or quote request
- Process your course booking or provider application
- Send you the information you requested
- Issue your WSIB Approved certificate after course completion
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Contact, quote and provider application forms are processed on our own server and emailed directly to us. They are not sent to any third-party form service.
Third-Party Services
We use the following third-party services to operate this website:
- Anthropic — powers our chat assistant. Chat messages are processed by Anthropic's API but are not stored by us. Anthropic Privacy Policy
- Google Ads — our Analytics property is linked to our Google Ads account, so audience lists and event data may be shared with Google Ads and used to personalise the ads you see, including showing you our ads again after you visit. How Google uses advertising data
- Google Analytics — measures site traffic so we know which courses and pages people are looking for. Configured with IP anonymisation and without advertising features. Google Privacy Policy
- Meta (Facebook and Instagram) Pixel and Conversions API — tells us whether our Facebook and Instagram ads lead to class bookings and group quote requests, so we only pay for ads that work. When you book or request a quote, we send Meta a notice of that event together with your email address and phone number scrambled one-way (hashed), so Meta can match it to its own users without receiving them in readable form. We do not load it for visitors in the European Union. Meta Privacy Policy
- Google Maps — displays our service area map. Google may set cookies when the map loads. Google Privacy Policy
- Google Fonts — serves the typeface used on this site. Google Fonts Privacy
Cookies
Analytics cookies. We use Google Analytics to understand how visitors find and use this site. It sets first-party cookies (named _ga and similar) containing a randomly generated identifier. We have enabled IP anonymisation. This data tells us which pages and courses people are interested in; it is not used to identify you personally.
Advertising cookies. The Meta Pixel sets cookies (named _fbp and, when you arrive from a Facebook or Instagram ad, _fbc) so we can tell which ads lead to bookings. You can limit this in your browser settings or in your Facebook ad preferences; blocking it will not stop you booking a class. To have your data deleted, email admin@gtacpr.com (see "Your rights" below).
Staff cookies. A session cookie is set only for staff who sign in to our booking administration area. It is not set for ordinary visitors.
Third-party cookies. Embedded services (Google Maps and Google Fonts) may set their own cookies. See their privacy policies above.
You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. Blocking them will not stop you booking a class.
Data Retention
Form submissions are emailed to us and kept in our email records; they are not passed to any third-party form service. Class booking records — your name, email, phone, employer, any certificate details and any accessibility needs you tell us — are stored on our own server so we can run the class and issue your certificate, and are retained as required by WSIB regulations. Chat conversations are not stored on our servers. Google Analytics data is retained by Google for 14 months.
Your Rights
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Withdraw consent for future communications
To exercise any of these rights, contact us using the details below.
Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal information from children.
Contact Us
If you have questions about this privacy policy or how we handle your data:
- Phone: 647-588-8872
- Email: admin@gtacpr.com
- Contact form