Privacy Policy

Online Guard Cards ("we," "us") is a California guard-card training provider. This policy explains what information we collect when you use onlineguardcards.com, why we collect it, and the choices you have. We wrote it in plain English on purpose.

One thing worth stating up front: if you book the in-person portion of your training, we share the details you give us on the booking form — your name, email, phone, and chosen class date — with our BSIS-licensed training partner, Whitestar Group (CA PPO 120101 · CA PI 24105), so they can confirm your seat and keep the attendance and completion record California requires them to keep. That is the only routine sharing of your information with a third party outside our payment and hosting providers, and we never sell your information to anyone.

What we collect

• Account & enrollment details — your name, email address, and the courses you purchase or enroll in.
• Payment information — payments are processed by Stripe. Your full card number never touches our servers; we receive only a payment confirmation and the last four digits.
• Training records — course progress, assessment results, and certificates we issue to you. State law and BSIS rules require training providers to keep records of completed training.
• Messages you send us — contact-form submissions, including your name, email, and message.
• Basic technical data — standard web logs (IP address, browser type, pages viewed) used for security and to keep the site working.

How we use it

• To deliver the training you purchased and issue your certificates.
• To verify certificates: employers and BSIS can confirm a certificate serial number at /verify/. Verification shows the certificate's validity — it is how the credential system is supposed to work.
• To respond when you contact us.
• To send transactional email — receipts, course-access links, and completion notices. We do not send marketing email without your consent.

What we never do

We never sell student information. We do not share your data with advertisers or data brokers. We share information only with the service providers that run the platform (payment processing, hosting, email delivery, database) and when required by law or by BSIS as the state regulator.

Where your data lives

The platform runs on established U.S. cloud infrastructure: Stripe (payments), Netlify (hosting), and Supabase (certificate and enrollment records). Course progress on this device may also be stored in your browser's local storage so you can pick up where you left off.

Your rights (California)

Under the California Consumer Privacy Act (CCPA), you may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it (note that BSIS record-keeping rules may require us to retain completed-training records for the legally required period). To make a request, email legal@whitestargroup.net — we respond within the statutory timeline.

Questions

Anything unclear? Email support@whitestargroup.net or use the contact page.