Privacy Policy

Introduction
Generation NetZero Limited (trading as GetZero) ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our educational and career advice services online or in person, visit our websites, participate in programmes or events, or engage with our marketing and business development activities.

The Green Skills Coach (https://coach.getzero.earth) uses artificial intelligence to provide career coaching and to help users explore occupations, jobs, apprenticeships, courses and other training.

This Policy should be read with our Terms of Use and Cookie Policy

1. Who we are

Generation NetZero Limited, trading as GetZero, is a company registered in England and Wales under company number 13795409. Our registered office is 28 Heysham Road, London, England, N15 6HL.

For most personal data processed through Green Skills Coach and our corporate activities, GetZero is the data controller. Where a school, college, local authority, charity, employer or programme partner commissions the Service and determines how particular learner data is used, GetZero may act as its processor for some activities. The participating organisation's privacy information may also apply.

Privacy contact: privacy@getzero.earth

2. A quick privacy summary for younger users

We use the information you give us to provide and personalise career, education and training guidance.
Your messages and documents may be processed by our secure technology and AI providers so that the Service can respond.
Do not include private or sensitive information unless it is genuinely needed. You can use the Service without giving an exact address or date of birth.
We do not sell your information, use it for behavioural advertising or let the AI make hiring, admissions or funding decisions about you.
You can ask what information we hold, correct it or request deletion by emailing privacy@getzero.earth.
If you are under 18, consider using the Service with support from a parent, guardian, teacher or careers adviser.

3. Information we collect

3.1 Account and profile information

Depending on how you use the Service, we may collect:

your name, email address and account identifier;
information received from a sign-in provider, such as Google or Microsoft, including your name, email address and provider identifier;
your age in years or age band where this is relevant to safe, age-appropriate or eligibility guidance; we do not need or ask for your full date of birth;
your city, region or other general location;
your education, employment status, skills, qualifications and experience;
your career interests, preferences, goals and confidence;
your school, college, programme or participating organisation, where your access is provided through one.

3.2 Conversations and AI interactions

When you use Green Skills Coach, we may process:

your prompts, questions and other messages;
AI-generated replies, recommendations and summaries;
conversation and session identifiers;
selected roles, jobs, courses or other result cards;
suggested actions, action-plan items and session progress;
limited technical and safety information about the tools, sources and safeguards used to generate a response.

3.3 CVs and uploaded documents

If you use CV analysis, we may collect the uploaded file, its filename and format, extracted text, analysis results and information about the security checks applied to the file. You can delete your stored CV through the Service where that feature is available or by contacting us.

3.4 Action plans and reminders

We may store action-plan items, completion status, dates and reminder instructions. Email reminders may include the action text and a link back to Green Skills Coach. They do not need to include the full conversation.

3.5 Feedback, complaints and safety reports

We may collect ratings, feedback categories, free-text comments, safety reports, complaint correspondence and associated session or response identifiers. This helps us investigate problems and improve safety and quality.

3.6 Corporate, educational and programme contacts

For customers, partners and professional contacts, we may collect:
name, work email address and telephone number;
organisation, role and business address;
contact history, meeting notes and correspondence;
programme participation, administration and reporting information.

3.7 Technical, security and analytics information

When you use our websites and digital services, we may collect:

IP address, browser, device, operating system and approximate location;
dates and times of access, pages viewed and technical events;
authentication, security, error, performance and audit logs;
limited analytics data where you have consented. We configure analytics not to collect chat text, CV text, email addresses, exact postcodes or account identifiers.

3.8 Information from other sources

We may receive personal data from:

a school, college, programme sponsor or other organisation that arranges your access;
authentication providers when you sign in;
public or licensed career, course, apprenticeship and job sources when we retrieve information relevant to your search;
referrals, enquiries and professional networking activities.

3.9 Sensitive information

We do not ask you to provide information about health, disability, ethnicity, religion, sexual orientation, political opinions, trade-union membership, biometric data or criminal records. However, this information may appear incidentally in a CV or free-text message. Please avoid including it unless it is genuinely necessary. We do not intentionally use such information to rank users or make decisions about them, and we may redact, restrict or delete it.

4. How we use personal data

4.1 Providing and personalising the Service

create and manage accounts and sessions;
provide career coaching and respond to questions;
tailor guidance using information you choose to provide;
search for and present roles, jobs, apprenticeships, courses and training;
analyse CVs and support interview practice where those features are enabled;
save action plans, progress and reminders;
provide support and respond to enquiries.

4.2 Using AI and search tools

send relevant prompts and context to our AI provider so it can generate a response;
send search terms and general location information to job, training, education or search providers where this is needed to answer a request;
summarise, rank, filter, group and explain information returned by external sources;
apply safety controls and identify potentially inaccurate, harmful or inappropriate outputs.

4.3 Safety, security and legal compliance

authenticate users and protect accounts;
detect, investigate and prevent misuse, security incidents, fraud and harmful activity;
review safety reports and complaints;
comply with legal duties and requests from courts, regulators or law-enforcement authorities;
establish, exercise or defend legal claims.

4.4 Evaluation and improvement

measure whether the Service is useful and understandable;
analyse feedback and de-identified usage patterns;
test safety, reliability, source quality, accessibility and performance;
evaluate and improve prompts, tools, user journeys and product features;
conduct controlled quality review of conversations where enabled, using redaction and restricted access where practicable.

4.5 Communications and marketing

send requested service messages, reminders and important account notices;
manage programme, customer and partner relationships;
send newsletters or promotional communications where you have consented or where lawful business-to-business marketing rules permit;
record marketing preferences and honour opt-outs.

5. Artificial intelligence and automated processing

Green Skills Coach uses Google Cloud generative AI and related tools to help produce responses. The AI provider processes prompts and relevant context to generate an output. Where grounded web search is used, a search query derived from your question and limited contextual information may also be processed by the search provider.

We do not use personal data from Green Skills Coach to train general-purpose foundation models. Our enterprise AI provider states that customer data is not used to train foundation models without permission. We may use de-identified examples, synthetic data, aggregate statistics and carefully controlled evaluations to improve our own service.

AI outputs may be inaccurate, incomplete or biased. We use technical controls, approved data sources, testing and human review of reported issues to reduce these risks. Users should check important information against the original source.

Green Skills Coach may profile information you provide to personalise recommendations, such as your interests, location, age band or stated preferences. It does not make solely automated decisions that determine whether you are hired, admitted to education, awarded funding or otherwise produce a legal or similarly significant effect. Those decisions are made by the relevant employer, provider or authority.

6. Our lawful bases

We rely on one or more of the following lawful bases, depending on the activity:
Contract: where processing is necessary to provide a service you have requested or to perform an agreement with a customer or partner.

Legitimate interests: to operate, personalise, secure, evaluate and improve our services; communicate with users, customers and partners; and manage our organisation. We consider the impact on individuals, including the best interests and additional protections required for children.

Consent: for optional analytics, certain marketing communications and any other processing for which we specifically ask permission. You may withdraw consent at any time.

Legal obligation: where we must process information to comply with law, regulation, court orders or statutory duties.

Protection of vital interests or recognised legitimate interests: where processing is necessary to respond to an emergency, protect someone from serious harm, support safeguarding or prevent or detect crime, where the legal requirements are met.
If you are under 18 and contract is not an appropriate basis, we generally rely on legitimate interests or another lawful basis and apply additional safeguards.

7. When information is required

You can browse some information or use guest access without providing all profile fields. Certain information is required to create an account, save progress, upload a CV or set an email reminder. If you do not provide required information, the relevant feature may not work.

8. Sharing personal data

We may share personal data with the following recipients where necessary:

Google Cloud and Firebase: for hosting, authentication, databases, storage, AI processing, security, monitoring and related infrastructure.

Email and communications providers: including Resend or another approved provider used to deliver reminders, invitations and service messages.

Analytics providers: only where optional analytics is enabled and you have provided the required consent.

Career, job, apprenticeship, course and search providers: which may receive a search term, general location or other limited query information needed to return results.

Participating organisations: such as schools, colleges, local authorities, charities, employers or programme sponsors, where this is necessary to deliver or report on a programme and is consistent with the relevant agreement and privacy information.

Professional advisers and suppliers: including legal, accounting, security and technical-support providers subject to confidentiality and data-protection obligations.

Authorities and other parties: where disclosure is required by law, necessary to protect rights or safety, or connected with a business reorganisation.

We do not sell or rent personal data. Clicking an external job, course or apprenticeship link does not automatically submit your profile or CV to that provider unless the Service clearly tells you otherwise.

9. International data transfers

We use UK and European hosting locations where reasonably practicable, but some suppliers and AI or search services may process data in other countries or through global infrastructure.

Where personal data is transferred outside the UK, we use an appropriate legal safeguard, such as a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism. We also assess the protections provided by the recipient and apply additional safeguards where appropriate.

10. Data retention

We keep personal data only for as long as it is reasonably needed for the purposes described in this Policy, to meet legal or contractual requirements, resolve disputes and protect the Service. We may retain anonymised information that no longer identifies an individual.

Account, profile, conversation, session and action-plan data: while you use the Service and ordinarily for up to 2 years after your last activity or the end of the relevant programme.
CV files, extracted text and analysis: until you delete or replace the CV, your account is deleted, or ordinarily no later than 2 years after your last activity.
Reminders: until sent or cancelled, with limited delivery and audit records ordinarily retained for up to 12 months.
Feedback, complaints and safety reports: ordinarily retained for up to 2 years after closure, or longer where needed for an ongoing investigation or legal claim.
Technical, authentication and security logs: ordinarily retained for up to 12 months, unless a longer period is needed to investigate an incident.
Marketing data: until you withdraw consent or opt out, after which we may retain a minimal suppression record so we do not contact you again.
Funded or commissioned programme records: for the period required by the relevant contract, funder or law. This may be longer than the periods above where a specific record-retention obligation applies.

11. Your rights

Subject to applicable law, you may have the right to:

ask for access to your personal data and receive a copy;
ask us to correct inaccurate or incomplete data;
ask us to delete personal data;
ask us to restrict how personal data is used;
object to processing based on legitimate interests or to direct marketing;
receive certain data in a portable format;
withdraw consent at any time where processing is based on consent;
ask for information about relevant automated processing and challenge any significant solely automated decision, if we ever use one;

• make a complaint about how we use your data.

These rights are not absolute and exemptions may apply. We may need to confirm your identity before responding. To exercise a right, email privacy@getzero.earth.

12. Complaints
Please contact privacy@getzero.earth if you are concerned about how we use personal data. We will acknowledge and investigate the complaint, keep an appropriate record and inform you of the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.

13. Children's privacy

Green Skills Coach is intended for users aged 13 and over and is designed to support young people. We consider the best interests of children when designing and operating the Service.

We collect only information reasonably needed for the feature being used.
We do not require a full date of birth or precise home address for normal use.
Optional analytics is off unless the required consent has been provided.
We do not use children's personal data for behavioural advertising.
We apply age-appropriate career and education safeguards.
We provide routes to report inaccurate, unsafe or inappropriate content.
Where a school, college or programme provides access, it may have its own responsibilities and privacy notice.

If you believe a child under 13 has provided personal data, please contact privacy@getzero.earth so we can investigate and delete it where appropriate.

14. Data security

We use appropriate technical and organisational measures designed to protect personal data from loss, misuse, unauthorised access, alteration or disclosure. Measures include access controls, encrypted connections, managed cloud security, authentication, monitoring, restricted service-to-service access, file-size and file-type controls, safety testing and incident-response processes.

No online service is completely secure. Please protect your account credentials and avoid sharing unnecessary sensitive information in messages or uploads.

15. Cookies and analytics
We use essential storage and access technologies needed to operate the website and keep users signed in. Optional analytics is enabled only where the applicable consent requirements are met. You can change analytics preferences through the Service where available.

For more information, see our Cookie Policy.

16. Changes to this Policy
We may update this Policy to reflect changes in the Service, our suppliers, legal requirements or how we use personal data. The latest version will be published with a revised review date. If a change materially affects registered users, we will take reasonable steps to bring it to their attention before or when the change takes effect.

17. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Generation NetZero Limited (GetZero)
28 Heysham Road, London, N15 6HL

privacy@getzero.earth

Last updated: 30 July 2026