Skip to main content

Privacy Policy – Ferno Rescue Academy

Last Updated: 27th November 2025

Ferno Group, Inc. (“we”, “us”, “our”) is committed to the responsible, ethical, and secure handling of personal information. This Privacy Policy explains how we collect, use, disclose, protect, and store personal information when you use Ferno Rescue Academy (“the Platform”). It incorporates requirements under:

  • UK GDPR
  • EU GDPR
  • CCPA/CPRA
  • Colorado CPA
  • Virginia VCDPA
  • Connecticut CTDPA
  • Utah UCPA

By creating an account, accessing training content, or submitting information on Ferno Rescue Academy, you agree to the practices described in this Privacy Policy.


1. Data Controller Information

Ferno Group, Inc.
Address: 70 Weil Way, Wilmington, Ohio 45177, USA
Email: info@ferno.com
Telephone: 1-877-733-0911

If applicable:
Data Protection Officer (DPO): Dorothy Ramsay, Chief of Global Strategy, Legal and Compliance

If required for EU operations, Ferno Group, Inc. will appoint an EU Representative.


2. Information We Collect
2.1. Information You Provide
  • Name
  • Email address
  • Username (public on leaderboards)
  • Password (encrypted)
  • Marketing communication preferences
  • Any information provided in enquiries/support requests
2.2. Automatically Collected Information
  • IP address
  • Device and browser type
  • Usage analytics, course activity and completions
  • Authentication and essential operational cookies
2.3. Sources of Information
  • You, during registration or Platform use
  • Automatic collection when using the Platform
  • Service providers supporting Platform functionality

We do not collect sensitive personal data.


3. Purposes and Legal Bases for Processing
3.1 GDPR Legal Bases
Purpose Legal Basis
Account creation & training access Contractual necessity
Security & operation Legitimate interests
Leaderboards Legitimate interests
Analytics & service improvement Legitimate interests
Marketing Consent
Legal compliance Legal obligation
3.2 U.S. Purposes

For providing and improving the Platform, security, analytics, user support, and marketing (only with consent).

We do not sell or share personal information as defined under CCPA/CPRA.


4. Leaderboards

Usernames chosen by you may appear publicly on leaderboards. You may request:

  • Removal from leaderboards
  • Username changes
  • Account deletion (leaderboard data removed or anonymised)

5. Data Sharing and Disclosure

We do not sell, rent, or commercially share personal information.

Data may be shared only with:

  • Authorised Ferno Group, Inc. users
  • Service providers supporting hosting, analytics, or platform security
  • Government authorities if required by law

All service providers are bound by confidentiality obligations.


6. International Data Transfers

If your personal information is transferred outside the UK or EEA—for example, because our servers or service providers are located in the United States—we ensure the transfer is conducted in accordance with applicable data protection laws and that the data is safeguarded appropriately throughout the process.


7. Data Retention
Data Retention
Account details Until account deletion + up to 12 months
Marketing consent data While consent is active
Activity logs Up to 24 months unless needed longer for security/legal purposes

Data is securely deleted or anonymised once no longer required.


8. Your Rights
8.1 GDPR / UK GDPR Rights

You may request:

  • Access
  • Correction
  • Erasure
  • Restriction
  • Objection
  • Portability
  • Withdrawal of consent
8.2 U.S. Privacy Rights

Residents of CA, CO, CT, VA, and UT may request:

  • Access
  • Correction
  • Deletion
  • Disclosure of categories collected
  • A copy of data
  • Right to opt out of sale/sharing (not applicable; we do not sell/share)
8.3 Appeals (CO/CT/VA)

If a request is denied, you may appeal by emailing info@ferno.com.


9. How to Exercise Your Rights

Submit requests via:

Response timelines:

  • GDPR: 30 days
  • U.S. State Laws: 45 days (may extend with notice)

10. Data Security

We use industry-standard security measures, including:

  • Encrypted password storage
  • Role-based access controls
  • Secure hosting and server environments
  • TLS encryption
  • Monitoring for unusual activity

This protects your data while using Ferno Rescue Academy.


11. Children’s Privacy

Ferno Rescue Academy is not intended for children under 13, and we do not knowingly collect their data.
If discovered, such data is deleted promptly.


12. U.S. State-Specific Privacy Notice (CCPA/CPRA, CO, VA, CT, UT)
12.1 Categories Collected in the Last 12 Months
Category Examples Sold / Shared?
Identifiers Name, email, IP address, username No
Online activity Usage logs, course activity No
Account data Password (encrypted), settings No
Marketing data Consent preferences No
12.2 Purposes for Use

Providing education services, analytics, platform operation, communications, and optional marketing.

12.3 Third Parties
  • Hosting and IT security providers
  • Legal authorities (if required)
12.4 Your U.S. Rights
You may request access, correction, deletion, data disclosure, and a copy of your data.
12.5 Non-Discrimination
We do not discriminate against users for exercising privacy rights.

13. Contact Information

Ferno Group, Inc.
70 Weil Way
Wilmington, Ohio 45177
USA

Email: info@ferno.com
Phone: 1-877-733-0911


14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.
The “Last Updated” date will reflect the most recent version.
Material changes may be communicated via email or via Ferno Rescue Academy.