PRIVACY POLICY

This Policy applies to personal information collected through our website, online registration, email, phone, and in-person administrative processes related to our training services. By using our website or providing personal information to us, you agree to the practices described in this Policy. If you have questions or concerns about this Policy, please contact us before using our services or submitting personal information.

By registering for a course, you acknowledge that AT Safety may share the participant information required with the applicable training provider/accrediting body for certification and verification purposes and may share certificates/completion information with a Training Sponsor (payer) as described in this Policy.

This Policy is intended to apply across Canada. Depending on your location, additional provincial privacy requirements may apply.

A. Information You Provide to Us

We may collect personal information you provide, such as:

• Name, email address, phone number, mailing address
• Company name, role, and employer details (if provided)
• Course registration details (course type, dates, attendance status)
• Information you submit through our website checkout/registration forms, contact forms, email, phone, or in-person registration

B. Identity Verification (Viewing ID)

For some courses or administrative requirements (including wellness testing where applicable), we may ask you to show government-issued identification to confirm identity and ensure accurate spelling of your name and correct date of birth.

• We do not collect or record the ID number.
• We may record your name and date of birth as provided/confirmed for registration and certification purposes.

C. Information Collected Automatically (Website Data)

When you use our website, we (and our service providers) may collect information automatically, such as:

• IP address, device identifiers, browser type, operating system
• Pages viewed, links clicked, time spent, referring/exit pages
• General location inferred from IP address

D. Photos, Audio, and Video (Media Capture) and Video Surveillance

We may collect photos, audio recordings, or video recordings of participants during training or at our facilities (for example, group photos, class activity images, or short video clips). This media may be used for legitimate business purposes such as marketing, promotions, internal training, and documentation, including use on our website, social media channels, posters, brochures, and other marketing or informational materials.

If you do not want to be photographed or recorded, please tell our staff before training begins or contact us in advance (see Section 16). We will take reasonable steps to accommodate your request, but we cannot guarantee you will not be captured incidentally in group or background footage.

Individuals do not receive royalties, payment, or other compensation for the use of photos/audio/video captured by us. If we plan to feature content on social media, we may ask whether you would like to be tagged. Tagging is optional and will only be done if you provide your handle and confirm you want to be tagged.

We also use video surveillance (CCTV) at our training locations for safety, security, and incident prevention/response. CCTV may capture images of individuals in and around our facilities. CCTV is not used in private areas where individuals would have a reasonable expectation of privacy (for example, washrooms).

We use cookies and similar technologies (for example, pixels/tags) to help our website function, understand how it is used, and measure marketing effectiveness.

Tools we may use include:

• Google Analytics (site usage analytics)
• Google Ads conversion tracking (measuring conversions and ad performance)
• Meta Pixel (measuring conversions/ad performance and improving ad relevance)
• LinkedIn Insight Tag (measuring conversions/ad performance and improving ad relevance)

These tools may collect information about your device and interactions with our website and may use cookies or similar identifiers.

Managing Cookies and Consent

We use essential cookies that are required for the website to function. For non-essential cookies and similar technologies (including analytics and advertising/measurement tools), we seek consent where required and may provide cookie preference controls (where enabled). You can also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

Consent before non-essential cookies (where required): Where required, we may present a cookie banner or preference tool to obtain consent for non-essential cookies (including advertising and measurement tags) before they are set.

We use personal information to:

• Process registrations and deliver training services
• Communicate with you (confirmations, reminders, schedule updates, customer support)
• Maintain training history records for administrative and compliance purposes
• Improve our website and services (analytics and troubleshooting)
• Send marketing communications where permitted by law and based on your preferences/consent
• Provide your registration and required participant details to applicable training providers/accrediting bodies to issue, validate, and maintain your certification

Certification delivery and verification: issue and deliver course certifications and respond to verification requests.

Training Sponsor (payer) delivery: where a course is purchased or paid for by an employer or other organization (a "Training Sponsor"), we may provide the Training Sponsor with a copy of the participant's certificate and completion status for record-keeping and compliance purposes. The Training Sponsor is responsible for storing the certificate in their systems.

Participant-paid courses: where the participant pays for the course directly, we provide the certificate to the participant. We do not provide the participant's certificate or completion information to an employer or other third party unless the participant provides consent or we are required by law.

Capture and use photos/audio/video recordings (where permitted by law) for marketing and promotional purposes and operational purposes (for example, internal training and documentation), including use on our website, social media, posters, brochures, and other marketing or informational materials.

Wellness / occupational testing disclaimer: Where we provide occupational testing or wellness-related services (for example, drug and alcohol testing or respiratory fit testing), information is collected and used for occupational, training, or compliance purposes only and not for medical diagnosis or treatment (see our Terms & Conditions).

Online payments are processed through Payfirma. Payment card information is handled through the payment processor's systems. We typically receive limited information necessary to confirm payment (for example: payment confirmation, amount, date, and basic payer details as provided).

We may disclose personal information:

To Training Sponsors (payer): If an employer or other organization pays for a participant's course, we may disclose the participant's certification/completion information (including a copy of the certificate) to that Training Sponsor for compliance and record-keeping purposes. If the participant paid directly, we do not disclose certification/completion information to an employer or third party without the participant's consent, unless required by law.

To applicable training providers/accrediting bodies: We may disclose participant information required to issue, validate, renew, or verify certifications (for example, participant name, date of birth, course details, and outcome), including course accrediting bodies or training partners that issue certifications.

We may require written consent or reasonable verification before disclosing certificates or completion information to any third party.

If a participant paid for the course, we may require the participant's written authorization before releasing a certificate or completion information to an employer or other third party.

• To service providers who support our operations (for example: website hosting, WordPress tools/plugins, email services, analytics providers, advertising platforms, and payment processing) under contractual safeguards.
• For legal, safety, and compliance reasons (to meet legal obligations, respond to lawful requests, protect rights/safety).
• In a business transaction (such as a merger, financing, or sale), subject to appropriate protections.

We may store or process personal information in Canada and, depending on the service providers we use, in other jurisdictions.

When personal information is processed outside Canada, it may be subject to the laws of that jurisdiction. When personal information is processed outside Canada, it may be subject to access by foreign courts, law enforcement, or national security authorities under the laws of that jurisdiction.

Some of our training programs may include participants who are minors (for example, certain first aid and safety courses). In those cases:

• We collect the minor's information only as needed for registration and certification.
• A parent/guardian provides consent, and we may collect parent/guardian contact information.
• Where a participant is a minor, we require confirmation of parent/guardian consent (for example, through a registration acknowledgement, signed form, or email confirmation), depending on the course and registration method.
• We treat all personal information relating to minors as sensitive information and apply enhanced security and consent protocols accordingly.
• We do not use behavioural advertising to target children, and we take steps to avoid interest-based advertising practices aimed at minors.
• If we intend to use a minor's identifiable image, audio, or video for marketing or promotional purposes, we require parent/guardian consent (for example, a signed media release form).

We retain personal information only as long as necessary for the purposes described in this Policy and to meet legal, regulatory, safety, and operational requirements.

Core registration and certification records: Certain core registration and certification records (such as participant name, course completed, certification date, and accrediting body) may be retained for as long as necessary to support long-term verification, regulatory compliance, and safety-related recordkeeping obligations.

Documents stored in shared drive (3 years): Supporting documents (for example, certificates provided to us, course-related uploads, and administrative records) may be stored in an online shared drive for 3 years, after which they are securely destroyed.

Hard copies (3 years): Where we maintain hard-copy records, hard copies are retained for 3 years and then securely destroyed.

Other information: Information that is not required for the purposes above is securely deleted or anonymized when no longer needed.

We aim to limit retained information to what is reasonably required for these purposes. We periodically review retained records and delete or anonymize information that is no longer required.

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

If a breach of security safeguards occurs, we will take steps to reduce risk. If a reasonable person would consider the breach to pose a real risk of significant harm, we will notify the appropriate privacy regulator(s) as required, and we will notify affected individuals as required or as directed. We maintain records of security safeguard breaches as required by applicable law.

You may request access to your personal information and request corrections, subject to legal exceptions. We may need to verify identity before fulfilling a request.

You may also request that we delete or anonymize certain personal information. We will consider and action such requests where appropriate, unless we are required or permitted to retain the information for legal, regulatory, safety, or record-keeping purposes.

You may request a copy of certain personal information we hold about you in a commonly used format, where feasible. Examples may include PDF or CSV, depending on the information requested.

Withdrawal of consent: You may withdraw or change your consent, subject to legal or contractual restrictions. If you do so, we will inform you of the likely consequences (for example, we may not be able to process a registration or issue/verify certification in certain cases).

If you receive marketing emails from us, you can unsubscribe at any time using the unsubscribe link in the message. We will action unsubscribe requests within 10 business days, and our unsubscribe mechanism remains available for at least 60 days after an email is sent.

We may update this Policy from time to time. We will post the updated version on our website and update the effective date. If changes are material, we may provide additional notice on our website.

AT Safety Training may use Artificial Intelligence ("AI") tools to support certain business and administrative functions, such as drafting content, summarizing information, improving communications, or assisting with operational efficiency.

A. No High-Impact Automated Decisions

We do not use AI to make fully automated decisions that could significantly affect an individual (for example, eligibility decisions or certification decisions) without meaningful human involvement. Where AI is used to assist, a staff member reviews the output before it is relied upon.

We will provide notice where AI is used in customer-facing interactions or materially influences an outcome, and we maintain human oversight for decisions related to eligibility, certification, and compliance.

B. What Information May Be Used with AI Tools

If we use AI tools, we take steps to avoid entering sensitive information into those tools unless it is necessary and appropriate safeguards are in place. Where feasible, we use de-identified or minimized information and only the information needed to complete the task.

C. Children and Minors

We do not use AI for behavioural advertising targeted at children, and we take additional care to minimize and protect any minor's personal information when delivering programs that may include minors.

D. Service Providers and Cross-Border Processing

Some AI tools may be provided by third parties and may process information outside Canada. Where AI tools are used, we will take reasonable steps to ensure appropriate contractual and security safeguards are in place and that use is consistent with applicable privacy laws.

E. Accuracy and Limitations

AI tools can generate incorrect or incomplete outputs. We use human review and other checks to help ensure accuracy, especially for safety, operational, or compliance-related information.

F. Questions

If you have questions about how we use AI tools, you can contact us using the contact information below.

Training reduces risk but does not eliminate risk. You are responsible for applying training appropriately and following workplace and legal safety requirements.

Assumption of risk and personal responsibility: Training may involve physical activities, demonstrations, equipment use, and hands-on practice. You understand and agree that participation carries inherent risks, including the risk of injury or property damage. You are responsible for acting within your abilities and following instructor directions, safety rules, and any posted facility/site rules at all times.

Fitness to participate: You are responsible for determining whether you are fit to participate in any training activity. If you have a medical condition, injury, or limitation that could affect your participation, you must inform the instructor before training begins. You are responsible for obtaining any medical advice you require before participating.

Except as required by law, the Services are provided "as is" and "as available."

Mobile App (coming soon): If we launch a mobile app in the future, we will update this Policy to describe what information is collected through the app and how it is used.