Cookies and Privacy Policy

Protecting your private information is our priority. This Privacy Policy applies to www.missioncit.com and governs data collection, use, and disclosure practices for all MissionCIT products and services. For purposes of this Policy, all references to MissionCIT include www.missioncit.com and its subdirectories, subdomains, and partner-linked sites (collectively, the “Site”). By using the Site, you consent to the data practices described in this Policy.

This Policy should be read together with MissionCIT’s Website Terms and Conditions. For students enrolled in Live Fire training courses, the HIPAA Authorization and Medical Information Disclosure Consent executed at enrollment governs the collection and use of health-related information and takes precedence over this Policy with respect to that data.

1. INFORMATION WE COLLECT

A. Information You Provide Directly MissionCIT collects personally identifiable information that you voluntarily provide when you use the Site, including when you:

Register for an account;
Enroll in a course, assessment, or consulting engagement;
Submit payment information for products or services;
Send us an email or contact us through the Site;
Participate in surveys, contests, or promotional activities sponsored by MissionCIT or its partners.

The categories of personal information collected include your first and last name, mailing address, email address, phone number, date of birth (where required for enrollment eligibility), and payment information.

B. Health and Medical Information — Live Fire Training Students For students enrolled in Live Fire and certain in-person skill training courses, MissionCIT also collects health-related information through the HIPAA Authorization and Medical Information Disclosure Consent executed at enrollment. This information includes known medical conditions, allergies, current medications, emergency contact information, and related PHI as defined under HIPAA. The collection, use, disclosure, and retention of such health information is governed exclusively by that authorization and by applicable law, including HIPAA (45 C.F.R. §§ 164.508 and 164.510) and the Connecticut Data Privacy Act (CGS § 42-515 et seq.). Health information is never used for commercial, marketing, or analytical purposes.

C. Information Collected Automatically When you visit the Site, MissionCIT may automatically collect information about your device and browsing activity, including your IP address, browser type, operating system, domain names, access times, referring website addresses, and pages visited. This information is used to operate and improve the Site, maintain service quality, and generate aggregate usage statistics. It is not used to identify you individually without your consent.

D. Public Message Boards and Communication Services If you post information on any public message board, forum, or communication service on the Site, that information may be collected and used by others. MissionCIT is not responsible for the privacy practices of other users who view or collect information you disclose in public areas of the Site.

2. HOW WE USE YOUR INFORMATION

MissionCIT uses the personal information it collects to:

Operate the Site and deliver the products and services you have requested;
Process payments and manage your account;
Communicate with you about your enrollment, course status, and account activity;
Send you information about other products and services offered by MissionCIT and its affiliates, where you have not opted out of such communications;
Customize content and improve the Site based on your usage patterns;
Comply with applicable legal obligations, including CONN-OSHA incident reporting (CGS § 31-367 et seq.) and data breach notification (CGS § 36a-701b);
Enforce MissionCIT’s Terms and Conditions and other agreements; and
Protect the safety and security of the Site and its users.

MissionCIT does not use your personal information for purposes incompatible with those described in this Policy without your prior consent.

3. SHARING YOUR INFORMATION WITH THIRD PARTIES

A. No Sale of Personal Information MissionCIT does not sell, rent, or lease its customer lists or personal information to third parties.

B. Service Providers MissionCIT may share your personal information with trusted third-party service providers who assist in operating the Site and delivering products and services, including payment processors, email service providers, hosting vendors, shipping carriers, analytics providers, and assessment platform operators. All such service providers are contractually required to:

Use your information only to provide services to MissionCIT;
Maintain the confidentiality and security of your information; and
Process your data only in accordance with MissionCIT’s instructions and applicable law.

C. Business Partners MissionCIT may occasionally share your contact information — name, email address, mailing address, and telephone number — with selected external business partners to inform you of offerings that may be of interest to you. You may opt out of such communications at any time as described in Section 9 of this Policy.

D. Health and PHI Data — Never Shared Commercially MissionCIT does not share health-related information or PHI collected through Live Fire training enrollment agreements with any third party for commercial, marketing, or analytical purposes. Such information is disclosed only as expressly authorized in the HIPAA Authorization executed at enrollment and as required by applicable law.

E. Legal Disclosure MissionCIT may disclose your personal information without prior notice if required to do so by law or in the good faith belief that such action is necessary to:

Comply with applicable law or legal process served on MissionCIT;
Protect and defend the rights or property of MissionCIT; or
Protect the personal safety of users of the Site or the public.

E. Third-Party Data Storage MissionCIT may store your data on servers provided by third-party hosting vendors with whom MissionCIT has contracted. All such vendors are required to maintain the confidentiality and security of your data and to process it only in accordance with MissionCIT’s instructions and applicable law.

4. COOKIES AND TRACKING TECHNOLOGIES

A. What Are Cookies The Site uses cookies and similar tracking technologies to enhance your online experience. A cookie is a small text file placed on your device by a web page server. Cookies cannot run programs or deliver viruses. They are uniquely assigned to you and can only be read by the web server that issued them.

B. Types of Cookies We Use MissionCIT uses the following categories of cookies:

Strictly Necessary Cookies: Required for the Site to function. These include session cookies that maintain your login state and security cookies that protect against fraud. These cannot be disabled.
Analytics Cookies: Used to understand how visitors interact with the Site, including which pages are most visited and how users navigate the Site. MissionCIT uses third-party analytics tools, including Google Analytics, for this purpose. Data collected through analytics cookies is aggregated and does not identify you individually.
Functional Cookies: Used to remember your preferences and settings, such as language or region, to improve your experience on the Site.
Marketing and Tracking Cookies: Used to deliver relevant content and track the effectiveness of MissionCIT’s communications. These are only activated where you have provided consent.

C. Third-Party Cookies Some cookies on the Site are set by third parties, including Google Analytics and Google reCAPTCHA. Third-party cookies are subject to the privacy policies of their respective providers. MissionCIT’s implementation of Google reCAPTCHA v2 and v3 is subject to the Google Privacy Policy and Terms of Use, available at policies.google.com.

D. Managing Cookies You can accept or decline cookies through your browser settings. Most browsers automatically accept cookies, but you can modify your browser settings to decline them. You may also manage your preferences through any cookie consent mechanism presented on the Site. Please note that disabling certain cookies may affect the functionality of the Site and your ability to access some features.

5. TRACKING USER BEHAVIOR

MissionCIT may track the pages and services users access within the Site to determine which offerings are most popular and to deliver customized content to users based on their demonstrated interests. This data is used solely to improve MissionCIT’s services and user experience and is not sold to third parties.

6. SECURITY OF YOUR PERSONAL INFORMATION

MissionCIT uses industry-standard security measures to protect your personal information from unauthorized access, use, or disclosure, including:

Encryption of data in transit using SSL/TLS protocols;
Access controls limiting data access to authorized personnel with a need to know;
Secure third-party hosting with contractual data protection obligations; and
Periodic review and updating of security practices.

When sensitive information — such as credit card numbers or health data — is transmitted to or from the Site, it is protected through encryption.

No data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. While MissionCIT strives to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet beyond our control; and (b) the security, integrity, and privacy of information exchanged through the Site cannot be absolutely guaranteed.

Data Breach Notification. In the event of a security breach involving your personal information, MissionCIT will notify affected users in accordance with Connecticut General Statutes § 36a-701b and any other applicable state or federal law. Notification will be provided to the email address on file in your account as soon as practicable following MissionCIT’s discovery of the breach.

7. DATA RETENTION

MissionCIT retains personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes. Specific retention periods include:

Account and enrollment data: Retained for the duration of the user’s relationship with MissionCIT and for a minimum of seven (7) years following the conclusion of that relationship, or such longer period as required by applicable law.
Health-related training data: Retained for a minimum of seven (7) years from the date of collection, consistent with the HIPAA Authorization executed at enrollment and applicable CONN-OSHA requirements.
Payment information: Retained only as long as necessary to process transactions and comply with applicable financial regulations.
Analytics and usage data: Retained in aggregated, non-identifiable form for as long as needed to improve the Site.

At the conclusion of the applicable retention period, MissionCIT destroys personal data by a method that renders it unreadable and unrecoverable, such as secure deletion of electronic records or shredding of physical documents. Records maintained in electronic format must be true and accurate reproductions of original documents stored in a secure, access-controlled system.

8. CONNECTICUT DATA PRIVACY ACT (CTDPA) AND USER RIGHTS

MissionCIT handles personal data collected through this Site in compliance with the Connecticut Data Privacy Act (CGS § 42-515 et seq.) and applicable federal privacy laws.

Connecticut residents have the following rights with respect to their personal data:

Access: The right to confirm whether MissionCIT is processing your personal data and to access that data.
Correction: The right to correct inaccuracies in your personal data.
Deletion: The right to request deletion of your personal data, subject to applicable legal retention requirements.
Portability: The right to obtain a portable copy of your personal data in a readily usable format.
Opt-Out of Targeted Advertising or Sale: The right to opt out of the processing of your personal data for purposes of targeted advertising. MissionCIT does not sell personal data.
Non-Discrimination: MissionCIT will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact MissionCIT at [email protected] or by mail at MissionCIT, LLC, 3 Enterprise Drive, Suite 215, Shelton, CT 06484. MissionCIT will respond to verifiable consumer requests within forty-five (45) days as required by law. MissionCIT may extend this period by an additional forty-five (45) days where reasonably necessary and will notify you of any such extension.

Users in Other Jurisdictions. Users in other states or jurisdictions may have additional privacy rights under applicable local law, including the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act, and similar state privacy laws. MissionCIT will honor verifiable requests from users in any jurisdiction to the extent required by applicable law. Contact [email protected] for assistance.

9. OPT-OUT AND UNSUBSCRIBE

Marketing Communications. If you would like to stop receiving marketing or promotional communications from MissionCIT, you may opt out by clicking the unsubscribe link in any marketing email or by contacting MissionCIT at [email protected]. MissionCIT will process opt-out requests within forty-five (45) days of receipt and will confirm completion by email. Opting out of marketing communications does not affect transactional communications related to your account or enrollment.

Third-Party Partner Communications. Users may opt out of receiving communications from third-party partners of MissionCIT by contacting us at [email protected] with the subject line “Third-Party Opt-Out.” MissionCIT will process such requests within forty-five (45) days of receipt.

Email Tracking. MissionCIT may receive a notification when you open an email from MissionCIT or click on a link therein, to help improve our communications. You may disable email tracking by adjusting your email client settings to block remote images.

10. MEDIA USE AND CLASS PARTICIPATION IMAGES

The use of photographs, videos, and other images captured during MissionCIT training activities is governed by MissionCIT’s Media Use and Publicity Release policies.

Live Fire Training Students. For students enrolled in Live Fire training courses who have executed a separate agreement, the use of likeness, voice, and image is governed exclusively by Appendix II — Photo, Video, and Social Media Release — executed at enrollment. That document requires a separate affirmative opt-in for any commercial marketing use. The terms of Appendix II take precedence over this Policy with respect to Live Fire training students.

All Other Users. For users not covered by Enrollment Agreements, by registering for or participating in any course, training, event, or activity provided by MissionCIT, you grant MissionCIT the perpetual, royalty-free right to use photographs, video recordings, audio recordings, and your likeness for both commercial and non-commercial educational and operational purposes, including educational programs, internal training, course development, accreditation, and publicity within the fire service community, without further compensation or notification.

Opt-Out Procedure. If you do not wish to have your image or likeness used for any purpose, you must notify MissionCIT in writing at [email protected] with the subject line “Media Opt-Out,” prior to or within twenty-four (24) hours of the start of your activity. While MissionCIT will make reasonable efforts to accommodate your request, it may not be possible to remove your image from materials already published. Opting out does not affect your ability to participate in the course or program.

11. AGE REQUIREMENTS — MINOR USERS

Users Under Thirteen (13). MissionCIT does not knowingly collect personally identifiable information from children under the age of thirteen (13) and does not permit users under thirteen (13) to use the Site. MissionCIT’s practices regarding information collected from children under 13 are governed by the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq. If MissionCIT discovers that personal information has been collected from a user under 13 without appropriate consent, MissionCIT will delete that information promptly. Parents or guardians who believe their child has provided personal information to MissionCIT should contact [email protected] immediately.

Users Ages Thirteen (13) Through Fifteen (15). Users between the ages of thirteen (13) and fifteen (15) may not use the Site or enroll in any MissionCIT Product without express written permission from MCIT and written parental or guardian consent. MissionCIT will not knowingly collect personal information from users in this age group without verifiable parental consent.

Users Ages Sixteen (16) and Seventeen (17). Users ages sixteen (16) and seventeen (17) affiliated with a recognized first responder organization may access the Site and enroll in permitted courses as set forth in the Terms and Conditions Age Requirements section. MissionCIT may require proof of affiliation before completing enrollment for users in this age group. Misrepresentation of age or affiliation status shall be the sole responsibility of the enrolling party.

12. AUTOMATED DECISION-MAKING

MissionCIT does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects concerning users, such as automated eligibility determinations for course enrollment or assessment scoring without human review. Assessment scoring processes involve human-reviewed rubrics as described in the Assessment Indemnification section of the Terms and Conditions.

13. LINKS TO THIRD-PARTY SITES

The Site contains links to other websites. MissionCIT is not responsible for the content or privacy practices of those sites. We encourage users to review the privacy policies of any third-party site that collects personally identifiable information before providing any data to that site.

14. CHANGES TO THIS POLICY

MissionCIT reserves the right to change this Privacy Policy from time to time. For material changes that affect how your personal data is used, MissionCIT will provide at least fourteen (14) days’ advance notice by email to the address on file in your account before the changes take effect. Non-material changes will be noted by updating the Last Updated date at the bottom of this Policy and by posting a notice on the Site. Your continued use of the Site after such modifications constitutes your acknowledgment of the modified Privacy Policy and your agreement to be bound by it.

15. CONTACT INFORMATION

MissionCIT welcomes your questions or comments regarding this Privacy Policy:

MissionCIT, LLC 3 Enterprise Drive, Suite 215 Shelton, CT 06484 Email: [email protected] Telephone: +1 203.649.5090 (USA Eastern Time Zone)

For privacy rights requests under the CTDPA or other applicable law, contact [email protected] with the subject line “Privacy Rights Request.”

Effective as of March 27, 2026. Originally published July 25, 2019.