Data Privacy Policy

Information We Gather

When you interact with our drawing fundamentals platform, we collect various types of information to tailor learning experiences for you and to enhance our services.

Personal Information

We obtain details you provide directly when creating an account or making contact. This includes your name, email address, phone number, and any messages sent via our contact forms. When you enroll in our drawing courses, we also gather information about your artistic background and learning goals.

Usage Data

We automatically collect data about how you use our website and learning platform. This includes pages visited, time spent in different sections, completed drawing exercises, and technical details like IP address, browser type, and device information.

Cookies and Tracking

Our site uses cookies and similar technologies to improve your browsing experience, remember preferences, and analyze site performance. You can manage cookie settings through your browser.

• Essential cookies for site functionality
• Analytics cookies to understand user behavior
• Preference cookies to recall your settings
• Marketing cookies for relevant content delivery

How We Use Your Information

Your personal information helps us deliver high-quality educational content and maintain the drawing platform effectively. We are committed to using your data responsibly and only for legitimate purposes.

Educational Services

We use your information to grant access to drawing courses, monitor your progress across skill levels, and tailor learning recommendations based on your artistic interests and abilities. This personalization supports more effective paths for developing your drawing basics.

Communication and Support

Your contact details enable us to respond to inquiries, share important course updates, and provide technical support when needed. We may also send periodic newsletters about new drawing techniques, featured artwork, or platform improvements if you’ve subscribed to our communications.

Platform Improvement

Usage data helps us identify which drawing exercises are most beneficial, spot areas where learners struggle, and create new content addressing common learning challenges. This analysis is conducted in aggregated form to protect privacy while enhancing our educational approach.

Legal Compliance

In certain situations, we may use or disclose your information to comply with Canadian privacy laws, respond to legal requests, or protect the rights and safety of our users and community.

Information Sharing and Disclosure

We enforce strict controls over how your information is shared and take privacy seriously in all our business relationships.

Service Providers

We collaborate with trusted third-party service providers who help us run our platform, handle payments, send emails, and provide customer support. These providers access only the information necessary for their services and are contractually obligated to protect your privacy.

• Cloud hosting services for secure data storage
• Email service providers for course communications
• Analytics providers for website performance insights
• Payment processors for course enrollment transactions

Business Transfers

If RiverAndRootBox participates in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction. We will inform you by email and provide details about any changes to how your information is handled.

Legal Requirements

We may disclose your information when required by Canadian law, a court order, or government request. This includes situations involving potential threats to safety, fraud investigations, or violations of our terms of service.

Your Rights and Choices

Under Canadian privacy regulations, including PIPEDA (Personal Information Protection and Electronic Documents Act), you have specific rights regarding your personal information.

Access and Correction

You may request access to the personal information we hold about you and ask us to correct inaccuracies. We will provide this data within 30 days of your request, subject to certain legal exceptions.

Data Deletion

You may request deletion of your personal information, and we will comply unless we have legitimate grounds to retain it for legal compliance, fraud prevention, or legitimate business purposes. Deleting your account will remove access to course progress and stored artworks.

Marketing Communications

You can opt out of our marketing emails at any time via the unsubscribe link in each message or by contacting us directly. You will still receive essential account and course enrollment communications.

Cookie Management

Most web browsers let you control cookies through their settings. You may choose to accept all cookies, block certain types, or receive prompts before cookies are stored. Blocking essential cookies may affect website functionality.

Data Security and Retention

We implement robust security measures to safeguard your personal information from unauthorized access, alteration, disclosure, or destruction.

Security Measures

Our security practices include encrypted data transmission, secure server environments, regular security audits, and restricted access controls. We employ industry-standard SSL encryption for all data transfers between your device and our servers.

• 256-bit SSL encryption for data transmission
• Secure cloud storage with encrypted databases
• Regular security vulnerability assessments
• Multi-factor authentication for administrative access
• Employee training on privacy and security practices

Data Retention

We keep your personal information only as long as necessary to provide services, meet legal obligations, or resolve disputes. Account data is typically kept for three years after account closure, while course progress data may be retained for up to seven years for educational records.

International Transfers

Although our primary operations are in Canada, some service providers may process data abroad. We ensure adequate protections through contractual safeguards and compliance with Canadian privacy requirements for international data transfers.

Children's Privacy

Our drawing platform welcomes learners of all ages, and we take extra care to protect the privacy of younger users in compliance with Canadian privacy laws.

For users under 18, we require parental consent before collecting personal information. Parents or guardians can review their child’s information, request corrections or deletions, and withdraw consent at any time.

Parental Controls

Parents have the right to review any personal information collected from their child, request its deletion, and refuse further collection or use of their child’s information. We provide clear mechanisms for parents to exercise these rights.

If you believe we have inadvertently collected information from a child under 18 without proper parental consent, please contact us immediately so we can take appropriate action.

Changes to This Policy

We may periodically update this privacy policy to reflect shifts in our practices, technology, legal requirements, or other factors. Significant changes will be communicated via email or prominent notices on our website.

Minor updates may be posted without individual notices, so please review this policy regularly. The "Last Updated" date at the top shows when the most recent changes were made.

Your continued use of our platform after policy updates indicates your acceptance of the revised terms. If you disagree with any changes, you may stop using our services or contact us to discuss your concerns.