Privacy Policy

1. Scope and Responsible Business

This Privacy Policy applies to windercna.com and to the website features, forms, embedded tools, and online services that link to this Policy and are operated by or on behalf of Tri Delta Fye, LLC, doing business as Winder CNA Training (collectively, “Winder CNA Training,” “we,” “us,” or “our”).

Some services reached from this website—including our registration application, Moodle online learning, myLaunchpad™ student portal, payment services, testing providers, funding agencies, app stores, and other third-party websites—may be governed by additional privacy notices, terms, or agreements. If another notice is presented when you use a connected service, that notice also applies to the information collected through that service.

2. Notice at Collection: Categories of Information

The categories of personal information we collect depend on how you interact with us. We collect only information reasonably related to operating our website, responding to requests, providing training and student services, administering employer services, completing transactions, maintaining security, and meeting legal or regulatory obligations.

Please do not enter Social Security numbers, driver’s-license numbers, payment-card information, medical records, account passwords, or other highly sensitive information into the public callback form or PathFinder chat. When such information is legitimately required for enrollment, funding, testing, employment, or another service, provide it only through the designated secure process.

• Identifiers and contact information, such as name, email address, telephone number, mailing address, account identifiers, and similar information.
• Inquiry and relationship information, such as the program or service of interest, inquiry type, employer or organization, campus, course, cohort, funding interest, and the source page or button used to contact us.
• Enrollment, student, and service information submitted through a connected platform, which may include course selections, schedules, attendance or progress information, documents, credentials, payment status, and communications.
• Employer and workforce-service information, such as organization details, employee training requests, license or credential records, compliance information, and administrative contacts when an employer uses our services.
• Transaction information, such as amounts charged, payment status, refunds, and billing records. Full payment-card credentials are processed by the applicable payment provider and are not intended to be collected through the public website.
• Communications and content, including callback requests, emails, text messages, telephone communications, survey responses, support requests, and questions entered into PathFinder or another support tool.
• Internet, device, and usage information, such as IP address, browser and device type, operating system, approximate location derived from IP address, referring website, pages viewed, links selected, timestamps, session activity, cookie identifiers, and interactions with forms or website features.
• Advertising and analytics information, such as campaign source, advertisement interactions, conversions, audience or attribution information, and events associated with course pages, dates, tuition, funding, registration, portals, and other website actions when the applicable consent has been granted.
• Publicly available information, such as a Google review you publish publicly or graduate-recognition information authorized for public display.

3. Sources of Information

We collect information directly from you; automatically from your browser or device; from a parent, guardian, employer, funding agency, business partner, or other person acting with authority; from registration, learning, payment, student-support, testing, and workflow providers; and from public sources such as Google reviews.

We may combine information received from these sources when reasonably necessary to respond to you, maintain accurate records, provide a requested service, measure website performance, prevent fraud, or comply with law.

4. How We Use Information

We use personal information for the purposes described below and for other compatible purposes disclosed when information is collected. We do not use information in a manner materially inconsistent with this Policy without providing additional notice or obtaining consent when required.

Submitting a request for information authorizes us to use the contact information provided to respond to that request. It does not, by itself, authorize unrelated automated marketing communications where separate consent is required by law.

• Responding to questions, callback requests, student-support needs, employer inquiries, and community or workforce-partner requests.
• Providing program, schedule, tuition, payment-plan, enrollment, funding, testing, online-learning, portal, and career-resource information.
• Processing registrations, payments, refunds, account access, documents, course participation, student services, and employer services.
• Operating, maintaining, personalizing, troubleshooting, and improving the website and connected services.
• Authenticating users, securing accounts and systems, detecting abuse or fraud, enforcing applicable terms, and protecting people, property, and legal rights.
• Measuring website use, advertising performance, and actions such as viewing course dates, selecting programs, starting registration, requesting information, or opening student resources, subject to consent requirements.
• Communicating administrative, transactional, safety, policy, schedule, account, or service-related information.
• Maintaining business, educational, financial, tax, accreditation, authorization, testing, contractual, and regulatory records.
• Complying with subpoenas, court orders, lawful governmental requests, and other legal obligations, and establishing, exercising, or defending legal claims.

5. Callback Forms and Communications

The Request a Callback form collects your name, telephone number, email address, program or service of interest, inquiry type, source page, and source button. This information is transmitted through our website to Zoho workflow services so the appropriate Winder CNA Training team member can respond. The public website applies basic validation, request-size limits, same-origin checks, and rate limiting to the form.

If you provide a telephone number or email address, we may contact you about the specific inquiry, registration, account, or service relationship. Message and data rates may apply to text messages. You may ask us to stop nonessential marketing emails by using an unsubscribe method when provided and may reply STOP to marketing text messages where that option is available. We may still send nonmarketing communications reasonably necessary to administer an enrollment, transaction, account, safety matter, or legal obligation.

PathFinder is an automated support resource. Questions, ordinary device or request information, and generated responses may be processed or logged as reasonably necessary to provide, secure, troubleshoot, and improve the service. Automated responses may be incomplete or inaccurate and should be confirmed with Winder CNA Training when the information affects enrollment, payment, funding, testing, or another important decision. PathFinder is not an emergency, medical, legal, financial, or clinical service. Do not use PathFinder or a public website form to report an emergency or to transmit medical records or other highly sensitive information.

6. Cookies and Consent Management

We use cookies, pixels, tags, local storage, and similar technologies for security, essential website functions, user preferences, analytics, and advertising. CookieYes provides the production website’s consent banner and records available cookie choices. Except for technologies reasonably necessary for security or essential operation, analytics and advertising technologies are intended to load according to the consent categories you select.

You may accept, reject, or change available cookie categories through the Cookie Settings control. You may also restrict cookies through your browser, but doing so may affect login, translation, embedded content, account access, or other features. Cookie names, providers, purposes, and durations may change as vendors update their services; the CookieYes preference center is intended to provide the current production-site cookie inventory.

• Necessary technologies support security, consent records, page delivery, and essential website operation.
• Functional technologies support optional features and preferences.
• Analytics technologies help us understand visits, navigation, and website actions.
• Advertising technologies help measure campaigns, attribute conversions, and create or measure audiences when advertising consent is granted.

7. Analytics and Advertising

With analytics consent, Google Analytics and Google Tag Manager may process device, cookie, approximate-location, referral, page, campaign, and interaction information. We use these services to understand website performance and events such as program-page views, dates-and-tuition selections, registration starts, funding-pathway selections, contact actions, accordion use, and portal or learning-platform links.

With advertising consent, the Meta Pixel and TikTok Pixel may process browser, device, cookie, page-view, advertisement, attribution, and interaction information to measure advertising and create or evaluate audiences. We do not intentionally include the name, email address, telephone number, or free-form callback content submitted through the callback form in the analytics events configured on this website.

Google, Meta, TikTok, and other providers process information under their own terms and privacy notices. Their services may associate website activity with information they already hold, depending on your settings and their practices.

8. When We Disclose Information

We disclose personal information only as reasonably necessary for the purposes described in this Policy, at your direction, with your consent, or as otherwise permitted or required by law. The recipient’s role and the information disclosed depend on the service you request.

We may also disclose information in connection with a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to appropriate confidentiality and legal requirements.

• Cloud hosting, content-delivery, database, security, and technical-service providers that operate or protect the website and connected systems.
• Zoho workflow services and authorized Winder CNA Training personnel who receive and route callback or contact requests.
• Supabase, which supports server-side retrieval of public course, campus, seat-availability, and graduate-recognition information used by the marketing website.
• PathFinder, myLaunchpad™, Moodle, the registration application, payment providers, testing providers, and other connected services used to deliver the service you select.
• CookieYes, Google, Meta, and TikTok for consent, analytics, tag management, and advertising purposes as described in this Policy.
• Microsoft or SharePoint services when website content, documents, or gallery materials are delivered from those services.
• Employers, funding agencies, workforce partners, testing organizations, regulators, or other parties when you request or authorize coordination with them or when disclosure is necessary to administer the applicable program or service.
• Professional advisers, auditors, insurers, law-enforcement authorities, courts, regulators, and governmental bodies when reasonably necessary to comply with law, protect rights or safety, or manage legal and business obligations.

9. Sale, Sharing, and Targeted Advertising

We do not sell personal information in exchange for money. We also do not sell the personal information submitted through the callback form.

Some privacy laws define “sale” or “sharing” broadly enough to include certain disclosures of cookie, device, or browsing information for cross-context behavioral or targeted advertising, even when no money is exchanged. Accordingly, use of Google advertising services, the Meta Pixel, or the TikTok Pixel may be considered a sale, sharing, or processing for targeted advertising under the law of a particular jurisdiction.

Advertising technologies are intended to remain disabled unless advertising consent is granted. You may withdraw that consent through Cookie Settings. Where applicable law grants an additional right to opt out, you may also submit a request using the contact information in Section 18.

10. Connected Student, Registration, Payment, and Employer Services

The registration application, myLaunchpad™ student portal, Moodle, payment services, testing services, and employer online-learning services may collect information beyond what is collected on the public marketing website. Depending on the service, this may include account credentials, date of birth, eligibility documentation, enrollment records, course activity, attendance, progress, credentials, licensing information, employer records, billing information, or other records needed to provide the service.

Payment-card data is entered into and processed by the applicable payment provider. Winder CNA Training may receive transaction identifiers, payment status, amount, or related accounting records, but the public callback form is not designed to collect full payment-card credentials.

Information maintained in a student, employee, employer, testing, or funding system may be subject to additional contractual, educational, regulatory, or statutory requirements. Nothing in this Policy expands or limits the application of a law such as FERPA or HIPAA where that law independently applies. The public website and PathFinder are not intended to provide health care or collect clinical records.

11. Public Course, Graduate, Review, and Event Information

The marketing website uses server-side access to Supabase to display marketing-safe information such as upcoming course dates, program and campus details, seat availability, and public graduate-recognition records. Website visitors do not receive a Supabase key and do not write directly to Supabase through the public marketing website.

We may display public Google reviews, including the reviewer name, rating, review text, and relative review date made publicly available through Google. Google controls the original review and its associated profile information. A reviewer who wants to edit or remove the original review should do so through Google; the reviewer may also contact us regarding our cached display.

Event pages may display vendor names, logos, registration widgets, photographs, or other event information supplied by us or our event and technology partners. Embedded content may cause the applicable provider to receive ordinary device, browser, and request information.

12. Data Retention and Secure Disposal

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, for a compatible disclosed purpose, or as required by law. Retention periods vary based on the type of information and may be affected by enrollment status, course or account activity, transaction history, state authorization or testing requirements, tax and accounting rules, contracts, limitation periods, security needs, disputes, legal holds, and regulatory obligations.

When information is no longer reasonably required, we delete, deidentify, aggregate, or securely dispose of it consistent with applicable law and operational capabilities. Backup copies may remain for a limited period until overwritten or deleted in the ordinary course. Deidentified or aggregated information that cannot reasonably be linked to an individual may be retained and used for lawful purposes.

13. Security and Incident Response

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, use, alteration, disclosure, or destruction. Measures may include access controls, vendor controls, server-side data access, transport encryption, input validation, rate limiting, monitoring, and data minimization, as appropriate to the information and service.

Winder CNA Training does not operate an on-premises physical server for this website. Information is processed and stored through cloud-hosted systems and service providers. No security measure, internet transmission, or electronic-storage system is completely secure, and we cannot guarantee absolute security.

If we determine that a security incident requires notice under applicable law, we will provide legally required notice to affected persons, regulators, or other authorities within the time and by the means required by law.

14. Your Privacy Rights and Choices

Depending on where you reside and whether the applicable law covers our processing, you may have the right to confirm whether we process your personal information; request access, correction, deletion, or a portable copy; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; restrict or object to certain processing; or appeal a decision concerning a privacy request.

To submit a request, email info@windercna.com with the subject “Privacy Request” and describe the request and the service involved. To appeal a decision, use the subject “Privacy Appeal” and explain why you believe the decision should be reconsidered. We may request information reasonably necessary to verify identity and authority. An authorized agent may submit a request where permitted by law, but we may require proof of authority and verification of the consumer’s identity.

Rights are not absolute. We may deny or limit a request when permitted by law, including when we cannot reasonably verify the requester, must retain information to complete a transaction or provide a requested service, must comply with educational, financial, testing, regulatory, security, or legal obligations, or need the information to establish, exercise, or defend legal claims. We will respond within the period required by applicable law and will not unlawfully discriminate against a person for exercising a privacy right.

You may manage cookie consent through Cookie Settings. The website does not currently use a separate response mechanism for browser “Do Not Track” signals because no uniform standard applies to those signals. We will recognize legally required opt-out preference signals if and when required for our website and processing.

15. Children and Minors

The public website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information through the public website from a child under 13 without legally required parental consent. A parent or guardian who believes a child under 13 submitted personal information should contact us so we can investigate and take appropriate action.

Some training opportunities may be available to individuals under 18 subject to program rules, parent or guardian involvement, and applicable law. Minors should not submit enrollment, payment, or sensitive information without the involvement of a parent or guardian when such involvement is required.

16. External Services and International Processing

Links and embedded features may connect to websites or services that we do not control. Their privacy practices are governed by their own notices, and we encourage you to review those notices before submitting information.

Our website and services are directed primarily to users in the United States. Cloud and technology providers may process information in the United States or other locations where they operate. By using a service, information may be transferred to and processed in a jurisdiction whose data-protection rules differ from those of your location, subject to applicable legal safeguards.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, vendors, information practices, or legal obligations. The revised Policy will be posted on this page with a new effective date. If a change is material, we may provide additional notice when required by law.

18. Contact Information

Privacy questions, requests, and complaints may be directed to Tri Delta Fye, LLC, doing business as Winder CNA Training, at info@windercna.com; by telephone at (770) 203-0858; or by mail at 1047 Summit Grove Drive, Suite 403, Watkinsville, Georgia 30677.

Please do not send Social Security numbers, payment-card information, medical records, passwords, or other highly sensitive information by ordinary email.