Privacy Statement

This Privacy Statement explains how we handle your personal information when you visit our website, request a demo, or subscribe to our training services. This statement applies to users in the United States (including California), Canada, the European Union, the United Kingdom, and any other country where our services are used.

When we handle personal information of individuals in:

• The EU or UK, we act as a controller under the General Data Protection Regulation (GDPR).
• Canada, we follow the principles in the Personal Information Protection and Electronic Documents Act (PIPEDA).
• California and other U.S. states with privacy laws, we aim to meet the requirements of the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and related laws.

Contact details:

• Email: support@learninghub.zone

We collect only the personal information we need to provide our services and communicate with you.

Email address

• When you request a demo
• When you sign up as a customer
• When you contact us with questions or support requests

Automatic information

Our website may collect standard technical information such as your IP address, browser type, and access times through cookies and similar technologies. Please see Section 14 (Cookies and Tracking) for more details.

We do not intentionally collect sensitive information (such as health information, financial account details, or information about children) through this website.

We use your email address and other information collected for the following purposes:

• To create and manage your account
• To help you access your account, including password reset or login assistance
• To send you information about upcoming learning material and service updates
• To respond to your questions and support requests
• To maintain and improve the security and performance of our services
• To comply with legal and regulatory obligations

We do not sell your personal information.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

If you are in the EU or UK, we rely on the following legal bases to process your personal information under the GDPR:

• Performance of a contract: To provide our learning services, manage your subscription, and operate your account.
• Legitimate interests: To improve our services, maintain security, and send you essential service-related communications.
• Consent: When required by law (for example, for certain optional promotional emails or cookies).

When we rely on consent, you can withdraw it at any time using the unsubscribe link or by contacting us.

PIPEDA (Privacy Law)

For individuals in Canada, we follow PIPEDA's principles, including accountability, identifying purposes, consent, limiting collection, limiting use and retention, safeguards, openness, access, and challenging compliance.

In practice, this means:

• We clearly explain what we collect (your email and technical information), why we collect it (to run your account, deliver training, and communicate with you), and who we share it with (service providers such as email, payment, and hosting providers).
• We limit collection to what is necessary for the purposes described.
• We only use or disclose your information for those purposes, unless you consent to something new or the law requires it.
• We keep your information only as long as needed to provide services and meet legal obligations.
• We use reasonable safeguards to protect your information.
• We are open about our privacy practices and will answer questions or handle complaints about how we manage your personal information.

CASL (Email Rules)

When we send commercial electronic messages (like emails about upcoming training or new features) to individuals in Canada, we follow Canada's Anti-Spam Legislation (CASL).

This means:

• We send these emails only where we have your consent (express or implied, as allowed by CASL).
• Each commercial email clearly identifies us and includes our contact information.
• Every such email includes an easy way to unsubscribe at no cost (for example, a link you can click).
• If you unsubscribe or tell us to stop, we will stop sending you these messages within the time allowed by CASL (no more than 10 business days).
• We may still send essential service or account emails (for example, password resets or important service notices) even if you unsubscribe from promotional or learning schedule emails.

We may send you emails to:

• Help you access or manage your account (including password resets)
• Provide information about your subscription and service changes
• Share learning materials, feature updates, or similar information
• Respond to your questions or requests

You can opt out of non-essential emails (such as promotional or training-schedule messages) at any time by using the unsubscribe link in the email or contacting us. We may continue to send you essential service messages even if you opt out of promotional emails.

We use Stripe to manage all subscription payments.

• We do not receive or store your credit card or other payment details on our systems.
• The payment processor collects and processes your payment information on its own systems, under its own privacy policy, which we encourage you to review.

We also use trusted service providers to help us operate our website and services (for example, hosting, email delivery, and security). These providers may process your personal information only on our instructions and must protect it appropriately.

We share your personal information only when necessary and with appropriate safeguards. We may share your information with:

• Service providers who help us operate the website, deliver emails, host data, provide analytics, or process payments
• Professional advisers (such as lawyers or accountants) where needed for legal, accounting, or business reasons
• Government authorities or law enforcement when we are required to do so by law or to protect our rights or the rights of others

We do not sell your personal information or share it with third parties for their own independent marketing. If we ever need to use or share your information for a new purpose not described in this statement, we will update this statement and, where required, ask for your consent.

Our business, servers, or service providers may be located outside your state, province, or country, including in the United States. This means your personal information may be transferred to and processed in a country that may have different privacy laws than where you live. Where required by law (for example, for individuals in the EU/UK), we use appropriate safeguards such as standard contractual clauses or similar measures to protect your information when it is transferred internationally.

We keep your personal information only for as long as needed to:

• Provide and support our services (typically for the duration of your active subscription)
• Meet our legal, tax, and accounting obligations (generally 3-7 years depending on applicable law)
• Resolve disputes and enforce our agreements

When we no longer need your information, we will delete it or anonymize it, in line with our data retention practices and legal requirements.

We use reasonable technical and organizational measures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These measures include encryption, access controls, secure servers, and regular security assessments. No system can be guaranteed to be perfectly secure, but we work to limit access to your information to people and service providers who need it for the purposes described in this statement. If we experience a data breach that affects your personal information, we will notify you and any relevant authorities as required by applicable law.

Your privacy rights depend on where you live, and we will make reasonable efforts to honor all valid requests.

EU/UK Rights

If you are in the EU or UK, you may have the right to:

• Access the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your information in certain situations
• Ask us to limit how we use your information in certain situations
• Object to certain types of processing, including some based on our legitimate interests
• Ask for your information in a portable format, where legally required

You may also have the right to lodge a complaint with your local data protection authority.

Canada Rights

If you are in Canada, you may have the right to:

• Access the personal information we hold about you
• Ask us to correct or update your information if it is inaccurate or incomplete
• Ask questions or challenge how we handle your personal information

You can also contact the Office of the Privacy Commissioner of Canada if you have concerns about how we manage your personal information.

California and Other U.S. State Rights

If the CCPA, CPRA, or similar state privacy laws apply to our business, residents of those states may have some or all of the following rights:

• Right to know: Request details about the categories and specific pieces of personal information we have collected, used, disclosed, or sold in the preceding 12 months.
• Right to delete: Ask us to delete certain personal information, subject to legal exceptions.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt-out of sale/sharing: We do not sell or share personal information as those terms are defined under California law.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

You may authorize an agent to submit requests on your behalf. We may require verification of the agent's authority to act on your behalf.

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@learninghub.zone and tell us:

• What you are asking for (for example, access, correction, deletion)
• The country or state where you live

We may need to verify your identity before responding to your request. We will typically ask you to confirm information associated with your account (such as your email address) or provide additional identifying information.

We will respond to verified requests within the timeframes required by applicable law (typically 30-45 days for GDPR, 30-45 days for CCPA/CPRA, and 30 days for PIPEDA).

Our services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

Our website may use cookies and similar tracking technologies to improve your experience, analyze usage, and provide essential functionality.

Types of cookies we may use:

• Essential cookies: Required for the website to function properly (e.g., login sessions).
• Analytics cookies: Help us understand how visitors use our site.

We may update this Privacy Statement from time to time to reflect changes in our services, our practices, or the law.

When we make material changes, we will update the version number and "Last Updated" date at the top of this statement and, where appropriate, provide additional notice (for example, by email or a notice on our website).

We encourage you to review this Privacy Statement periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Statement or how we handle your personal information, please contact us at: support@learninghub.zone.