PRIVACY POLICY FOR THE ECG QUIZ

Last Updated: January 30, 2026

Welcome to The ECG Quiz (“we,” “us,” or “our”), an online educational platform operated by Cardiac Technologies, Inc., a Texas corporation. We are committed to protecting your privacy and handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and related services (the “Service”).

This Privacy Policy is designed to comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), and, where applicable, the General Data Protection Regulation (GDPR).

The Service is not designed to collect, store, or process Protected Health Information (PHI) and is not operated as a HIPAA-covered entity or business associate.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. INFORMATION WE COLLECT

1.1 Personal Information You Provide

We may collect personal information that you voluntarily provide, including:

• Account Registration: Name, email address, username, and password.
• Subscriptions and Payments: Payment information is processed by third-party payment processors. We do not store credit card or banking information on our servers.
• Communications: Information you provide when contacting us (such as emails or support requests).

1.2 Usage and Technical Data

We may automatically collect information about how you interact with the Service, including:

• IP address
• Browser type and device information
• Operating system
• Pages viewed and timestamps
• Referring URLs

This information is used in aggregated or pseudonymized form to analyze trends, administer the Service, and improve functionality.

1.3 Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the Service. See Section 7 for details.

1.4 Analytics and Security Services

We may use third-party services such as Google Analytics to understand user interactions and Google reCAPTCHA to protect against spam and abuse. These providers may collect information according to their own privacy policies.

2. HOW WE USE YOUR INFORMATION

We use personal information to:

• Provide, operate, and maintain the Service
• Create and manage user accounts
• Process subscriptions and payments through third-party processors
• Communicate regarding service updates, account notices, and customer support
• Improve educational content and user experience
• Detect, prevent, and address security or technical issues

We do not sell personal information.

3. DISCLOSURE OF INFORMATION

3.1 Service Providers

We may share information with trusted service providers who perform services on our behalf, such as payment processing, analytics, and security. These providers may only use information as necessary to perform services for us.

3.2 Legal and Safety Obligations

We may disclose information if required by law, legal process, or to protect the rights, safety, and security of the Service, our users, or others.

3.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction. We will provide notice where required by law.

4. NO PHI; HIPAA DISCLAIMER

The Service is intended solely for educational use. You agree not to upload or submit any Protected Health Information (PHI), patient-identifiable data, or real-world clinical records.

We are not a HIPAA-covered entity or business associate, and we do not intend to receive or process PHI. If PHI is inadvertently submitted, we will take reasonable steps to delete it.

5. DATA RETENTION

We retain personal information only for as long as reasonably necessary to:

• Maintain your account while it is active
• Provide the Service and customer support
• Comply with legal, accounting, or regulatory obligations
• Resolve disputes and enforce agreements

Usage and analytics data may be retained in aggregated or anonymized form for longer periods.

6. YOUR PRIVACY RIGHTS

6.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Request access to the personal information we have collected about you
• Request deletion or correction of personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information (we do not sell or share personal information)
• Not be discriminated against for exercising your rights

Requests may be submitted using the contact information in Section 13. We will verify your identity and respond within forty-five (45) days, as required by law. Authorized agents may submit requests on your behalf with appropriate authorization.

6.2 GDPR Rights (Where Applicable)

If you are located in the European Economic Area, United Kingdom, or Switzerland and GDPR applies, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability.

Our lawful bases for processing include contract performance, legitimate interests, and consent where required.

7. COOKIES AND TRACKING TECHNOLOGIES

7.1 Types of Cookies

• Essential Cookies: Required for core functionality
• Analytics Cookies: Used to understand usage patterns
• Functional Cookies: Store preferences

Where required by law, cookies will be deployed only after obtaining consent through a cookie banner or similar mechanism.

7.2 Managing Cookies

You may configure your browser to refuse cookies; however, some features may not function properly.

8. INTERNATIONAL DATA TRANSFERS

If you access the Service from outside the United States, your information may be transferred to and processed in the United States. We implement appropriate safeguards as required by applicable law.

9. EMAIL COMMUNICATIONS

We may send transactional emails related to your account or subscriptions. You may opt out of marketing emails at any time by using the unsubscribe link provided.

10. SECURITY

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. However, no system is completely secure.

11. CHILDREN’S PRIVACY

The Service is not directed to individuals under 18. If we learn that we have collected personal information from a child, we will promptly delete it.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Material changes will be communicated by email or prominent notice on the Service. Continued use after the effective date constitutes acceptance.

13. CONTACT US

Email: support@theecgquiz.com
Address: The ECG Quiz, P.O. Box 782071, San Antonio, TX 78278-2071 USA