Privacy Policy

Last Updated: December 1, 2025

Zero to One Events Ltd. (“we,” “us,” or “our”) operates the 021.School learning platform (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, first and last name when you create an account
• Authentication Data: Information from GitHub OAuth when you sign in
• Survey Responses: Feedback and responses you submit through our surveys
• Employer Information: Company name or corporate email domain when attending corporate workshops
• Communication: Messages you send to us or through the Platform

1.2 Information Collected Automatically

• Usage Analytics: Pages visited, time spent on pages, features used, and navigation patterns
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for authentication and analytics cookies for usage tracking

1.3 Third-Party Services

We use the following third-party services that may collect information:

• Clerk (Authentication): Manages user authentication and sessions
• Google Analytics: Tracks usage patterns and Platform performance
• Vercel (Hosting): Processes requests and may log access data
• Turso (Database): Stores your account and activity data
• Resend (Email): Sends transactional and notification emails

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Platform
• Process your registration and manage your account
• Deliver workshop content and track your learning progress
• Send administrative emails (welcome, workshop prep, account updates)
• Respond to your inquiries and support requests
• Analyze usage patterns to improve our services
• Enforce our Terms of Service
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information only in these circumstances:

3.1 Service Providers

We share data with third-party service providers who assist in operating the Platform (listed in Section 1.3). These providers are contractually obligated to protect your information.

3.2 Corporate Workshop Sponsors

If you attend a corporate-sponsored workshop, your workshop attendance and completion status may be shared with your employer or the sponsoring organization.

3.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account termination:

• Account data is retained for up to 2 years for legal and business purposes
• Anonymized analytics data may be retained indefinitely
• You may request deletion of your data (see Section 7)

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication through Clerk
• Access controls limiting data access to authorized personnel
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

6.1 For Canadian Residents (PIPEDA)

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access your personal information
• Correct inaccurate information
• Withdraw consent (subject to legal restrictions)
• File a complaint with the Privacy Commissioner of Canada

6.2 For US Residents

Depending on your state of residence, you may have rights to:

• Access your personal information
• Request deletion of your data
• Opt out of certain data sharing
• Non-discrimination for exercising your rights

6.3 Exercising Your Rights

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

7. Cookies and Tracking

7.1 Essential Cookies

Required for Platform functionality, including authentication and security.

7.2 Analytics Cookies

Used to understand how visitors interact with the Platform. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7.3 Managing Cookies

Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may prevent you from using certain Platform features.

8. Children’s Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in Canada and the United States. By using the Platform, you consent to this transfer. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the “Last Updated” date
• Sending an email notification for significant changes

Your continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries or to exercise your rights, contact us at:

Zero to One Events Ltd. Email: 142874422+wrsmith108@users.noreply.github.com

You may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if you have concerns about our privacy practices.