Privacy Policy (Draft)

When you enroll we collect your name, contact information (email, phone), and the records needed to run the program and document compliance — attendance/hours, skills progress, required documents, and enrollment status. Payment card details are handled by Stripe; we never see or store your card number.

To process your enrollment and payment, deliver the training, track progress toward exam-eligibility, communicate with you, and maintain the records a Minnesota-approved nurse aide program is required to keep.

Service providers that operate the program: Stripe (payments), our hosting and database provider, and (when introduced) email and file-storage providers. We share student records with the state nurse aide registry/testing vendor as needed for exam eligibility. We do not sell your information.

Data is transmitted over encrypted connections and stored in access- controlled systems. Sensitive records are kept to the minimum needed and retained per our records-retention requirements.

You may request a copy of your information or ask us to correct or delete it, subject to records we are legally required to retain. Contact tara@northwestfastpathcna.com.

When we act on a deletion request, we remove your identifying details (name, contact information, date of birth, guardian and emergency contacts) and permanently delete the documents you uploaded. We keep the de-identified training and compliance records a Minnesota-approved program must maintain — for example attendance/hours, skills check-offs, exam results, and payment history — so the program record stays intact without identifying you.

One deliberate exception: if you enrolled as a minor, the consent your parent or guardian signed at enrollment is a legal record of who authorized the training. That consent record — including the guardian’s name — is retained even after a deletion request, because we must be able to show valid consent was given. Everything else about the student is de-identified as described above.

Because this is a healthcare-training context, additional rules (e.g. FERPA/HIPAA-adjacent considerations) may apply and must be confirmed with counsel before launch.