Privacy Policy

Effective Date: October 2, 2026 · Last Updated: October 2, 2026

First 2 Aid Inc. ("First 2 Aid," "we," "us," or "our") is a Canadian first aid and safety training organization located in London, Ontario. First 2 Aid operates as a Canadian Red Cross Training Partner and provides first aid and related training programs, including programs offered in connection with Ontario workplace first aid requirements and the Workplace Safety and Insurance Board (WSIB) First Aid Program, where applicable.

We are committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us.

This Privacy Policy explains how First 2 Aid collects, uses, discloses, safeguards, retains, and disposes of personal information when you visit or use first2aid.ca, register for or participate in a training course, communicate with us, or otherwise interact with our services.

First 2 Aid's privacy practices are intended to comply with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable, as well as applicable contractual, regulatory, and program requirements governing our relationship with the Canadian Red Cross and WSIB.

The Canadian Red Cross separately maintains its own privacy policies and practices for personal information under its control.

1. Accountability and Privacy Responsibility

First 2 Aid is responsible for the personal information in its custody or control.

Our Privacy Officer is responsible for overseeing First 2 Aid's privacy practices, responding to privacy inquiries and access requests, and addressing concerns regarding the collection, use, disclosure, retention, and protection of personal information.

We maintain reasonable policies, procedures, safeguards, and practices designed to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, loss, theft, or destruction.

Our Privacy Officer is:

Sam — Privacy Officer
First 2 Aid Inc.
London, Ontario, Canada
sam@first2aid.ca · +1 519-697-0183

2. What Is Personal Information?

For the purposes of this Privacy Policy, "personal information" generally means information about an identifiable individual.

Depending on the circumstances, this may include your:

• name
• mailing or residential address
• email address
• telephone number
• date of birth, where required for a particular training program
• employer or organization
• course registration information
• course, certification, and recertification information
• attendance and completion information
• payment and transaction information
• communications with First 2 Aid
• information submitted through registration or consent forms
• limited technical information relating to your use of our website

We limit the collection of personal information to information that is reasonably necessary for identified purposes.

3. Information We Collect

A. Course Registration

When you register for a First 2 Aid course, we may collect information necessary to administer your registration, including:

• full name
• email address
• telephone number
• address, where required
• employer or organization name, where applicable
• course and session selected
• certification or recertification status
• registration date
• attendance and completion information
• information contained in applicable consent or acknowledgement forms
• other information reasonably required to administer the applicable training program

Where training is provided through a Canadian Red Cross program, certain participant information may be required to administer the course, maintain training records, and issue or validate certification.

B. Optional Health or Safety Information

A registration form may provide an opportunity for a participant to voluntarily identify a medical, accessibility, allergy, or other health or safety concern that may affect their ability to participate safely in training.

Providing such information is voluntary unless otherwise required by law or a specific program requirement.

Where provided, First 2 Aid will use the information only to the extent reasonably necessary to:

• promote participant safety
• respond appropriately to an identified concern
• make reasonable training accommodations where possible; or
• respond to a safety incident or related matter

Access to this information will be restricted to individuals who reasonably require it for these purposes.

First 2 Aid will not use optional health or safety information for marketing or unrelated purposes.

Where information is required to be provided to another organization under applicable law, a contractual requirement, or the rules of the applicable training program, First 2 Aid will disclose only information reasonably necessary for that purpose.

C. Payment Information

Payments made through our website may be processed by third-party payment service providers, including Stripe.

First 2 Aid does not ordinarily receive or store your complete credit card number or security code. We may receive transaction information necessary to confirm payment, such as the payment amount, transaction status, and limited payment-card information such as the last four digits.

Payment information is subject to the privacy and security practices of the applicable payment processor.

D. Communications With Us

When you contact First 2 Aid by email, telephone, through our website, or by another communication method, we may collect information such as:

• your name
• contact information; and
• the contents and circumstances of your communication

We use this information to respond to your inquiry, provide customer service, administer our services, and maintain appropriate business records.

E. Website and Technical Information

When you visit our website, certain technical information may be collected automatically by our website, hosting provider, security services, or other service providers.

This may include information such as:

• IP address
• browser type
• operating system
• device information
• pages visited
• approximate time and date of access; and
• technical information required for website security, functionality, and performance

We use this information primarily to operate, secure, maintain, troubleshoot, and improve our website.

4. How We Use Personal Information

First 2 Aid may collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances, including:

• processing course registrations
• reserving a participant's place in a course
• administering training programs
• communicating course confirmations, reminders, cancellations, schedule changes, or other service-related information
• processing payments and issuing receipts
• verifying attendance and course completion
• issuing, administering, or validating applicable certificates
• fulfilling Canadian Red Cross Training Partner requirements
• fulfilling applicable WSIB First Aid Program requirements
• communicating with employers or organizations where appropriate and authorized
• providing customer service
• responding to questions, complaints, or requests
• maintaining business, financial, tax, training, and certification records
• meeting legal, regulatory, contractual, insurance, audit, or accreditation requirements
• preventing fraud, misuse, or unauthorized access
• maintaining website and information-security systems; and
• establishing, exercising, or defending legal claims

Where personal information is to be used for a new purpose that was not reasonably contemplated when it was collected, First 2 Aid will obtain additional consent where required.

PIPEDA generally requires personal information to be used or disclosed only for identified purposes unless consent or another legal basis applies.

5. Canadian Red Cross Training

First 2 Aid is a Canadian Red Cross Training Partner.

Where a course is delivered under a Canadian Red Cross training program, First 2 Aid may be required to collect, submit, maintain, or otherwise process participant information in accordance with Canadian Red Cross requirements.

This may include information necessary to:

• register participants
• administer a course
• maintain training records
• report course completion
• issue certificates
• validate certification; and
• satisfy applicable quality assurance, audit, or Training Partner requirements

The Canadian Red Cross states that personal information of registered trainees may be used to facilitate Canadian Red Cross training activities and courses.

Information submitted to or held by the Canadian Red Cross is subject to the Canadian Red Cross's own privacy policies and practices.

6. WSIB First Aid Program

Where First 2 Aid provides training under the WSIB First Aid Program, we may collect, use, maintain, or disclose information necessary to administer the applicable training and certification requirements.

WSIB's First Aid Program identifies approved training providers and requires providers to meet applicable program requirements. WSIB also states that its own collection and handling of personal information is governed by legislation applicable to the Board.

First 2 Aid does not represent that it is subject to the same privacy legislation or institutional privacy obligations that apply directly to WSIB.

Where information must be provided to WSIB or another authorized body to satisfy a legal, regulatory, contractual, audit, certification, or program requirement, First 2 Aid will limit the information disclosed to what is reasonably necessary for that purpose.

7. Disclosure of Personal Information

First 2 Aid does not sell, rent, or trade personal information.

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy, including:

Third-party service providers acting on behalf of First 2 Aid will be expected to handle personal information in accordance with contractual obligations and applicable privacy requirements.

8. Service Providers Outside Canada

Some technology, payment, hosting, communications, or other service providers used by First 2 Aid may process or store personal information outside Canada, including in the United States.

Where personal information is processed outside Canada, it may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law-enforcement agencies, regulators, or other lawful authorities in that jurisdiction.

First 2 Aid takes reasonable steps to select service providers and implement contractual, technical, and organizational safeguards appropriate to the nature and sensitivity of the information.

9. Consent

First 2 Aid will generally obtain meaningful consent for the collection, use, and disclosure of personal information, except where collection, use, or disclosure is permitted or required without consent under applicable law.

Consent may be express or, where legally appropriate, implied based on the circumstances and the nature of the information and purpose.

By submitting information to First 2 Aid for an identified purpose, you consent to the collection, use, and disclosure of that information for that purpose, subject to applicable law.

You may withdraw consent at any time, subject to legal, contractual, administrative, or other reasonable limitations.

Withdrawal of consent may affect our ability to provide certain services, administer a course, issue or validate a certificate, comply with Canadian Red Cross or WSIB requirements, or maintain records that we are legally or contractually required to retain.

10. Marketing Communications

First 2 Aid does not sell personal information or use participant information for unrelated third-party marketing.

Where First 2 Aid sends promotional or marketing communications, we will do so in accordance with applicable law.

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting our Privacy Officer.

Service-related communications — such as registration confirmations, course reminders, payment receipts, certification information, schedule changes, and safety-related notices — are not considered optional marketing communications where they are necessary to administer the services you have requested.

11. Cookies and Similar Technologies

Our website may use cookies or similar technologies that are necessary for website functionality, security, authentication, payment processing, and other essential services.

Third-party service providers, including payment processors, may also use cookies or similar technologies for security, fraud prevention, or transaction processing.

Where applicable, non-essential analytics, advertising, or tracking technologies will be disclosed and managed in accordance with applicable privacy requirements.

You may adjust cookie settings through your browser. Disabling certain cookies may affect the functionality of portions of our website, including registration or payment functions.

12. Safeguarding Personal Information

First 2 Aid uses reasonable physical, administrative, contractual, and technical safeguards appropriate to the sensitivity of the personal information in our custody or control.

These safeguards may include:

• secure HTTPS connections
• access controls
• password and account protections
• restricted access based on business need
• secure third-party service providers
• appropriate contractual confidentiality obligations
• administrative procedures for handling personal information
• reasonable measures to prevent unauthorized access, use, disclosure, loss, or destruction; and
• secure disposal of information when it is no longer required

No electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, while First 2 Aid takes reasonable measures to protect personal information, we cannot guarantee absolute security.

13. Privacy Breaches

First 2 Aid maintains procedures for responding to actual or suspected privacy breaches.

Where a breach involving personal information occurs, we will assess the circumstances and take reasonable steps to contain the incident, investigate it, mitigate potential harm, and comply with applicable legal notification and reporting requirements.

Where required by PIPEDA or other applicable law, affected individuals and/or the Office of the Privacy Commissioner of Canada will be notified.

14. Retention and Secure Disposal

First 2 Aid retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, to administer courses and certifications, to meet applicable legal, tax, contractual, insurance, Canadian Red Cross, WSIB, audit, or dispute-resolution requirements, and for other legitimate business purposes.

Different categories of information may therefore be retained for different periods.

When personal information is no longer required, First 2 Aid will take reasonable steps to securely destroy, erase, or anonymize the information, subject to applicable legal, contractual, regulatory, or program requirements.

Certification and training records may also be maintained by the Canadian Red Cross or another applicable certification authority in accordance with its own retention requirements.

15. Accuracy of Personal Information

First 2 Aid makes reasonable efforts to ensure that personal information in our custody or control is accurate, complete, and up to date to the extent necessary for the purposes for which it is used.

If you believe that information we hold about you is inaccurate or incomplete, you may request that it be corrected.

16. Access to Your Personal Information

Subject to applicable legal limitations, you may request access to personal information that First 2 Aid holds about you.

You may ask:

• whether we hold personal information about you
• what personal information we hold
• how we use it
• to whom it has been disclosed, where applicable; and
• that inaccurate or incomplete information be corrected

PIPEDA provides individuals with rights of access and correction subject to applicable exceptions.

To make an access or correction request, contact our Privacy Officer using the information provided below.

We may require sufficient information to verify your identity before processing a request.

We will respond to requests within the time required by applicable privacy legislation, subject to lawful extensions or exceptions.

17. Withdrawal of Consent

You may withdraw consent to the collection, use, or disclosure of your personal information where consent is the legal basis for the activity.

Withdrawal of consent does not affect processing that occurred before consent was withdrawn and does not prevent First 2 Aid from retaining, using, or disclosing information where permitted or required by law, contract, certification requirements, regulatory obligations, or other applicable legal authority.

18. Participants Under 18

Where a participant is under 18 years of age, First 2 Aid may require a parent or legal guardian to provide or confirm consent where appropriate.

First 2 Aid will handle information relating to minors with appropriate care and in accordance with applicable privacy requirements.

19. Third-Party Websites

Our website may contain links to websites operated by third parties, including the Canadian Red Cross, WSIB, payment processors, or other organizations.

First 2 Aid is not responsible for the privacy practices, content, security, or policies of third-party websites.

We recommend reviewing the privacy policy of any third-party website before submitting personal information.

20. Changes to This Privacy Policy

First 2 Aid may update this Privacy Policy periodically to reflect changes in:

• applicable legislation
• regulatory requirements
• Canadian Red Cross or WSIB program requirements
• technology
• business practices; or
• our privacy practices

The "Last Updated" date at the beginning of this policy indicates when the policy was most recently revised.

Where appropriate, material changes will be communicated through our website or other reasonable means.

21. Questions, Concerns, and Privacy Complaints

If you have a question, concern, or complaint regarding First 2 Aid's handling of your personal information, please contact our Privacy Officer first.

Privacy Officer
Sam
First 2 Aid Inc.
London, Ontario, Canada
sam@first2aid.ca · +1 519-697-0183

We will investigate privacy concerns and take reasonable steps to address them.

If you are unable to resolve your concern directly with First 2 Aid, you may contact the Office of the Privacy Commissioner of Canada, which oversees compliance with PIPEDA for organizations subject to the Act.

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Canada
priv.gc.ca

22. Governing Law

This Privacy Policy is governed by the laws applicable in the Province of Ontario and the applicable laws of Canada, including federal privacy legislation applicable to First 2 Aid's activities.

Nothing in this Privacy Policy limits or excludes any rights or protections available to an individual under applicable privacy legislation.