Privacy notice

This notice explains what learn.thesecondworkforce.com collects and why. It is written to meet the collection-notice requirements of the New Zealand Privacy Act 2020 (Information Privacy Principle 3). Last updated 15 September 2026.

Who is collecting it

The Second Workforce (Habib Baluwala), Auckland, New Zealand. Contact: habib@thesecondworkforce.com.

What is collected

• Your email address, used to send you a one-time sign-in link and as the key your progress is stored under. No password is created.
• Your track choice (engineer or non-engineer) and module progress: which steps you ticked, which videos you marked watched, and your build checklist.
• Knowledge-check attempts: which questions you were served, your answers, score and pass/fail, with a timestamp.
• Reflection text you type into the Reflect step, including the "one thing I'll do differently" line.
• Result records: when you download a result, a snapshot of your completed modules is stored under a result ID (for example TSW-2026-ABC123) so an employer can verify it.

We do not use analytics trackers, advertising pixels or third-party cookies. One first-party session cookie (tsw_session, 30 days, HttpOnly) keeps you signed in. Fonts are loaded from Google Fonts, which receives your IP address as part of that request.

Why it is collected

• To run the learning cycle: unlock modules, score checks on the server and issue results.
• To improve the questions. During the pilot we compute per-question statistics (how many learners answered correctly, and whether strong learners did better) from first attempts. These are aggregated across the cohort and do not identify you.
• To verify results. The public verification page shows a result ID, a masked email (first character and domain only), the modules completed and scores. Reflection text is never shown publicly.

Where it is stored

In Cloudflare Workers KV, replicated across Cloudflare's global network, and in the email provider's logs for the sign-in message. Sign-in links expire after 24 hours and work once. In-progress checks expire after 6 hours. Everything else is kept until you ask for it to be deleted or the programme is retired.

Who can see it

Only the programme administrator (contact above) can read individual progress, attempts and reflection text, using an admin credential. Nothing is sold or shared with third parties. If you completed the programme through your employer, they see only what you choose to share, plus the masked public verification record for any result ID you give them.

Your rights

You can ask to see or correct the information held about you, or to have it deleted, by emailing the contact above from the address you signed in with. Deletion removes your progress, attempts, reflections and any issued result records; result IDs you have already shared will stop verifying. Requests are handled within 20 working days. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).