Privacy Policy

Arizona Goldens LLC (d/b/a The Service Dog School), a limited liability company organized under the laws of the State of Arizona, United States, is the business responsible for your information (the “data controller” for GDPR purposes). We have trained service dogs since 2006 and serve clients across the United States, Canada, the United Kingdom, Europe, South America, and Australia.

You can reach us at:

• Arizona Goldens LLC (The Service Dog School)
• P.O. Box 40776, Mesa, AZ 85274, USA
• Phone: (480) 205-6810
• Email: AzGoldensLLC@gmail.com

This policy applies to azgoldensllc.com, arizonagoldensllc.vercel.app, and our related forms, assessments, and messaging programs (together, the “Services”). It does not apply to third-party websites or services we link to, which have their own privacy practices.

We collect the following categories of personal information:

• Identity and contact information — first name, last name, email address, and mobile phone number.
• Sensitive information about disability and health — through our free toolkit assessment/quiz and related forms, we ask about the disability or health-related challenges a service dog would help with, and about the person the dog is for (for example, whether it is for yourself or for a family member such as a child). This is “sensitive personal information” under the CCPA/CPRA and “special category data” under GDPR Article 9. We collect it only with your consent and use it only to provide the guidance and services you request.
• Assessment and quiz responses — your answers about your situation, needs, goals, location (state/region), and who the dog is for.
• Communications and consents — messages you send us, our notes about your inquiry, and the separate consents you give (email-marketing consent and SMS/text-messaging consent under the Telephone Consumer Protection Act, or TCPA).
• Payment information — if you purchase a paid assessment or program, our payment processor (Stripe) collects and processes your card and billing details. We do not receive or store full payment card numbers; we receive limited confirmation and transaction details.
• Technical and usage data — IP address, device and browser type, general location inferred from IP, referring pages, marketing campaign parameters (UTM tags), and analytics about how you use the Services.
• Client portal learning and activity records — if you have a client portal account, we keep a record of how you use it: the lessons you open, how much of each lesson video you have played and where you stopped, the lessons you mark complete, and each quiz you take, including your answers, your score, and when you took it. Each time you use the portal we also record the date and time, how long you were signed in, the IP address you connected from, and your browser type. If you were a client on our previous course platform, we will do what we reasonably can to bring your lesson and quiz history from that platform into your portal record, and we label it as imported.
• Cookies and similar technologies — as described in the Cookies section below.

• Directly from you — when you complete an assessment or form, text or email us, request a consultation, or purchase a program.
• Automatically — through cookies and similar technologies when you use the Services.
• From service providers — for example, our payment processor confirms a transaction, and our hosting and analytics providers supply technical data.

• To match you with an appropriate program, deliver your assessment results, schedule consultations, and provide our Services — legal basis: performance of a contract or steps taken at your request; for disability/health details, your explicit consent.
• To send the SMS and/or email messages you opted into, including assessment follow-up, scheduling, updates, and offers about our programs — legal basis: your consent.
• To process payments for paid assessments and programs — legal basis: performance of a contract.
• To operate, secure, troubleshoot, analyze, and improve the Services and prevent fraud or abuse — legal basis: our legitimate interests.
• To document your training. Service dog handlers are sometimes asked to show that they and their dog have been trained, so we keep your client portal learning and activity record and can give you, at your request, a written summary of the training you completed with us. We also use these records internally to see where clients get stuck, to confirm that course materials are being used by the person who enrolled, and to develop and improve our programs, our marketing, and our other business operations — legal basis: performance of a contract and our legitimate interests.
• To comply with legal obligations and to establish, exercise, or defend legal claims — legal basis: legal obligation and legitimate interests.

You may withdraw consent at any time (for example, reply STOP to texts, use the unsubscribe link in an email, or email us). Withdrawing consent does not affect processing we carried out before you withdrew it.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. No mobile information (including your phone number and SMS opt-in consent) will be sold or shared with third parties or affiliates for marketing or promotional purposes.

We share information only in these limited ways: with trusted service providers (“processors”) who help us run the Services under contracts that restrict their use of the information to providing the service; to comply with law, legal process, or lawful requests; to protect the rights, safety, and property of you, us, or others; and in connection with a business transfer (such as a merger or acquisition), subject to this policy.

Your client portal learning and activity record is used internally and shared only with you — and with anyone you ask us in writing to send it to, such as a landlord, an employer, or an attorney. Within Arizona Goldens it can be seen by our training staff and by the coach assigned to you.

Our key service providers include:

• Stripe — payment processing.
• Google (Gmail API / Google Workspace) — transactional and marketing email delivery.
• Twilio — SMS/text-message delivery (pending activation).
• Supabase — database and application hosting for our records.
• Vercel — website and application hosting and delivery.

We use cookies and similar technologies to keep the Services working, remember your preferences, measure and analyze traffic, and understand which marketing brought you to us (including UTM parameters). Some are essential to operate the site; others (such as analytics) are optional.

You can control cookies through your browser settings, and where required we honor opt-out preference signals such as Global Privacy Control (GPC). We treat a valid GPC signal as a request to opt out of any sale or sharing of personal information for the browser or device that sends it.

We keep personal information only as long as needed for the purposes described above, to provide the Services you requested, and to meet our legal, tax, accounting, and dispute-resolution obligations — then we delete or de-identify it. Retention periods vary by the type of data and the reason we hold it. You may request deletion at any time (see Your Choices and Rights).

We keep client portal learning and activity records for at least two years after your last activity, because a handler may need proof of training after a program ends. We do not intend to keep them indefinitely, but we may choose to keep them longer where we have a continuing reason to. You can ask us for a copy at any time, and you can ask us to delete your record — if you do, we will no longer be able to provide documentation of your training.

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls, least-privilege handling of sensitive credentials, and encryption of data in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach affecting your personal information occurs, we will notify you and any regulators as required by applicable law, including the New York SHIELD Act.

We are based in the United States, and our service providers may process data in the United States and other countries. If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, any transfer of your personal information out of your region is made using an appropriate safeguard — typically the European Commission’s Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism. You may request more information or a copy of the relevant safeguards by emailing us at AzGoldensLLC@gmail.com.

• Access, correction, and deletion — request a copy of, correction of, or deletion of your personal information.
• Email marketing — every marketing email includes an unsubscribe link (in line with the CAN-SPAM Act); you can also email us to opt out. We honor opt-out requests promptly.
• Text messages — reply STOP to any text to opt out, or reply HELP for help. See our SMS Terms.
• Withdraw consent — where we rely on consent, you can withdraw it at any time.
• Opt-out preference signals — we honor Global Privacy Control (GPC) where applicable.

To make a request, email AzGoldensLLC@gmail.com or call (480) 205-6810. We will verify your identity and respond within the time required by applicable law.

If you are a California resident, you have specific rights regarding your personal information.

Categories of personal information we collect (from the CCPA categories): identifiers (such as name, email, and phone number); Cal. Civ. Code §1798.80 customer records (such as contact details you provide); internet or other electronic network activity (such as usage and device data); geolocation data (approximate, inferred from IP); and inferences drawn to serve you. We also collect sensitive personal information — specifically health-related information about a disability and information about the person the dog is for. We use and disclose sensitive personal information only for purposes permitted by the CCPA/CPRA, such as providing the Services you request, and not to infer characteristics about you.

How we disclose it. We disclose these categories to our service providers (for example, hosting, email, payment, and messaging providers) for the business purposes described in this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, including the personal information of consumers we know are under 16.

Subject to verification, you have the right to: know/access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients; delete personal information we collected from you; correct inaccurate personal information; opt out of the sale or sharing of personal information (note: we do not sell or share); limit the use and disclosure of sensitive personal information; and to non-discrimination for exercising your rights. Because we already limit sensitive personal information to permitted purposes and do not sell or share, no separate opt-out link is required.

Authorized agents. You may use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization and may ask you to verify your identity directly.

Global Privacy Control. We treat a valid GPC signal as an opt-out request for the browser or device that sends it.

“Shine the Light” (Cal. Civ. Code §1798.83). We do not disclose personal information to third parties for their own direct-marketing purposes.

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive consumer privacy law, you may have the right to confirm whether we process your personal data; to access, correct, and delete it; to obtain a portable copy; and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data or use it for targeted advertising. Where the law requires opt-in consent to process sensitive data, we obtain your consent before collecting disability/health information.

Right to appeal. If we decline to act on your request, you may appeal that decision by replying to our response or emailing AzGoldensLLC@gmail.com with the subject line “Privacy Appeal.” If your appeal is denied, you may contact your state attorney general.

If you are in the EEA, the United Kingdom, or Switzerland, Arizona Goldens LLC is the controller of your personal data, and the legal bases we rely on are described in Section 5. You have the right to: access your personal data; rectification (correction); erasure; restriction of processing; data portability; to object to processing based on legitimate interests; and to withdraw consent at any time (without affecting processing before withdrawal).

You also have the right to lodge a complaint with your local data protection supervisory authority (for example, your national Data Protection Authority in the EEA, or the UK Information Commissioner’s Office). We would appreciate the chance to address your concerns first — please contact us at AzGoldensLLC@gmail.com.

When you consent to marketing email, we send you updates and offers about our programs. Every marketing email identifies us, includes our mailing address, and provides a clear way to unsubscribe. We honor unsubscribe requests promptly. Transactional and service messages (such as assessment results, receipts, and scheduling) are not marketing and are part of providing the Services.

If you opt in to text messages, your prior express consent is the legal basis for those messages; message and data rates may apply; message frequency varies; you can reply HELP for help and STOP to opt out at any time; and carriers are not liable for delayed or undelivered messages. Consent to receive texts is not a condition of purchase. See our SMS Terms for full details.

Our Services are directed to adults — typically a parent or guardian inquiring on behalf of a family member, who may be a child. We do not knowingly collect personal information directly from children under 13 (or under 16 where a higher age applies), and we do not direct the Services to children. If you believe a child provided us personal information directly, contact us and we will delete it.

The Services may link to third-party websites or services we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them. Please review the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time. The “last updated” date above reflects the latest version, and material changes will be posted here. Your continued use of the Services after an update means you accept the revised policy.

Questions about this policy, or to exercise any right, contact Arizona Goldens LLC (The Service Dog School):

• P.O. Box 40776, Mesa, AZ 85274, USA
• Phone: (480) 205-6810
• Email: AzGoldensLLC@gmail.com

See also our Terms of Service and SMS Terms.