At Nought to One Limited ("Nought to One", "we", "us", "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with UK data protection laws, including the General Data Protection Regulation (GDPR).
Name:Nought to One Limited
Company Number: 15297846
Address: 128 City Road, London, EC1V 2NX
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected]
We collect and process the following types of personal data:
Identity Data: Name, job title.
Contact Data: Email address, phone number.
Financial Data: Payment details.
Feedback: Responses to surveys and feedback forms.
Profile Data: Membership details, preferences.
Marketing and Communication Data: Preferences for receiving marketing communications.
We use your personal data for the following purposes:
To Provide Services: Delivering the content and resources included in your membership, such as Canva content packs, blogs, guides, and branding templates.
To Process Payments: Managing subscriptions and financial transactions.
To Communicate with You: Sending membership updates, marketing information (if you have opted-in), and responding to inquiries
.To Improve Our Services: Analyzing feedback to enhance our offerings and customer experience.
We may share your personal data with:
Personnel: Our staff who need access to perform their job functions.
Supply Chain: Third-party service providers who assist with payment processing, website hosting, and delivery of our services.
All such third parties are contractually bound to protect your personal data.
Your personal data may be transferred and stored in the UK or other countries. We ensure that appropriate safeguards are in place to protect your data when it is transferred outside the UK, in accordance with GDPR requirements.
We implement the following measures to protect your personal data:
Access Controls and User Authentication: Including multi-factor authentication.Regular
Testing and Review: Of our security measures.
Staff Policies and Training: Ensuring that our staff are aware of and comply with data protection requirements.
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. When personal data is no longer needed, we securely delete or anonymise it.
Under UK data protection law, you have the following rights:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data where there is no compelling reason for us to continue processing it.
Right to Restrict Processing: Request us to restrict the processing of your personal data under certain circumstances.
Right to Data Portability: Request a copy of your personal data in a structured, commonly used format for transfer to another organisation.
Right to Object: Object to the processing of your personal data in certain situations.
To exercise these rights, please contact us using the contact details provided above.
You can request access to your personal data by contacting us at [email protected]. We will respond to your request within one month of receiving it.
We may send you marketing communications if you have opted-in to receive them. You can opt-out of receiving marketing messages at any time by clicking the unsubscribe link in our emails or by contacting us directly.
Note: Opting out of marketing communications will not affect the delivery of service-related messages necessary for the administration and use of your account.
For any questions or concerns regarding this Privacy Policy or how we handle your personal data, please contact us at: [email protected]