Flowflashstream

Introduction and Data Controller

Flowflashstream operates as an educational platform specializing in valuation techniques for financial analysts. We're committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data. This policy explains our practices in detail and your rights regarding your personal information.

Our company is registered in Vietnam and complies with Vietnamese data protection laws, including Decree 13/2023/ND-CP on personal data protection. We also follow international best practices to ensure your privacy rights are respected regardless of your location.

As the data controller, Flowflashstream is responsible for determining how and why your personal data is processed. Our registered office is located at 57 P. Lê Lợi, Máy Tơ, Ngô Quyền, Hải Phòng 180000, Vietnam, and you can reach our privacy team at info@flowflashstream.com for any data protection inquiries.

Information We Collect

We collect different types of information to provide and improve our educational services. The data we gather falls into several categories, each serving specific purposes for delivering personalized learning experiences and maintaining platform security.

Personal Information You Provide

Account registration details including name, email address, and professional background
Educational history and career objectives to personalize course recommendations
Payment information processed through secure third-party payment processors
Communication preferences and contact information for course updates
Profile information including professional certifications and work experience

Automatically Collected Data

Device information including browser type, operating system, and screen resolution
Usage analytics showing course progress, completion rates, and learning patterns
IP address and general location data for security and service optimization
Cookies and tracking technologies to maintain session state and preferences
Technical logs for troubleshooting and platform performance monitoring

Important Note

We never collect sensitive financial data such as bank account numbers, credit card details, or investment portfolio information. All payment processing is handled by certified third-party processors who maintain their own strict security standards.

How We Use Your Information

Your personal data serves multiple purposes, all focused on delivering exceptional educational experiences while maintaining the highest security standards. We process your information based on legitimate interests, contractual obligations, and your explicit consent where required.

Purpose	Legal Basis	Data Used
Course delivery and progress tracking	Contract performance	Account details, learning progress
Personalized learning recommendations	Legitimate interest	Educational background, course history
Customer support and communications	Contract performance	Contact information, account details
Platform security and fraud prevention	Legitimate interest	Device data, IP address, usage patterns
Marketing communications	Consent	Email address, preferences

We analyze learning patterns to identify areas where students commonly struggle, allowing us to improve course materials and provide additional support resources. This analysis is conducted using aggregated, anonymized data that cannot be traced back to individual users.

Data Sharing and Third Parties

We maintain strict controls over data sharing and only work with trusted partners who meet our security standards. Your personal information is never sold to third parties, and we limit sharing to essential service providers and legal requirements.

Service Providers We Work With

Payment processors for secure transaction handling and subscription management
Cloud hosting providers for reliable platform infrastructure and data backup
Email service providers for course notifications and important updates
Analytics services to understand platform usage and improve user experience
Customer support tools to provide timely assistance and resolve issues

All third-party processors sign comprehensive data processing agreements that require them to protect your information according to international standards. We regularly audit these relationships to ensure compliance with our privacy commitments.

In cases where we're legally required to disclose information, such as court orders or regulatory investigations, we will notify affected users when legally permitted and limit disclosure to the minimum required information.

Your Privacy Rights

You have comprehensive rights regarding your personal data, regardless of your location. We've designed user-friendly processes to help you exercise these rights quickly and efficiently. Most requests can be handled through your account settings, while others may require verification for security purposes.

Rights Available to All Users

Access: Request a copy of all personal data we hold about you, including how it's being used
Rectification: Correct inaccurate or incomplete information in your profile or account
Erasure: Request deletion of your personal data when no longer needed for legitimate purposes
Portability: Receive your data in a structured, machine-readable format for transfer
Restriction: Limit how we process your data while disputes or corrections are resolved
Objection: Opt out of data processing based on legitimate interests or direct marketing

To exercise any of these rights, contact us at info@flowflashstream.com with your request. We'll respond within 30 days and may need to verify your identity to protect against unauthorized access. For complex requests, we may extend this period by an additional 60 days with explanation.

You also have the right to withdraw consent at any time for processing activities that rely on your consent, such as marketing emails. This won't affect the lawfulness of processing before your withdrawal.

Data Security and Protection

We employ multiple layers of security to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security measures are regularly updated to address emerging threats and maintain compliance with industry standards.

Technical Safeguards

End-to-end encryption for data transmission using TLS 1.3 protocols
Advanced encryption standards (AES-256) for data storage and backup systems
Multi-factor authentication options for account access and sensitive operations
Regular security audits and penetration testing by independent security firms
Automated monitoring systems for unusual access patterns or potential breaches
Secure development practices with regular code reviews and vulnerability assessments

Organizational Measures

Strict access controls limiting employee data access to job-required minimum
Regular privacy and security training for all team members
Comprehensive incident response procedures for potential data breaches
Background checks and confidentiality agreements for all personnel

Despite our robust security measures, no system is completely immune to all potential threats. We maintain comprehensive insurance coverage and incident response procedures to address any security events quickly and transparently.

Data Retention and Deletion

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by applicable laws. Our retention periods are based on the type of data, its purpose, and legal requirements in Vietnam and other jurisdictions where we operate.

Data Type	Retention Period	Reason
Account information	7 years after account closure	Legal compliance and tax records
Course progress data	5 years after completion	Certification verification
Payment records	10 years	Financial regulations
Marketing communications	Until consent withdrawn	Ongoing communication
Technical logs	12 months	Security and troubleshooting

When retention periods expire, we securely delete or anonymize your personal data using industry-standard methods. For data stored on encrypted systems, we ensure cryptographic keys are properly destroyed to make recovery impossible.

You can request early deletion of your data in most cases, though we may need to retain certain information to comply with legal obligations or resolve disputes. We'll explain any retention requirements when processing your deletion request.

International Data Transfers

As a global education platform, we may transfer your personal data to countries outside Vietnam to provide our services effectively. We ensure all international transfers meet strict adequacy requirements and implement appropriate safeguards to protect your information.

When transferring data to countries without adequate data protection laws, we use standard contractual clauses approved by relevant authorities or rely on other appropriate transfer mechanisms. Our cloud infrastructure partners maintain certifications including SOC 2 Type II and ISO 27001.

We regularly review the adequacy of protection in destination countries and adjust our transfer mechanisms as needed to maintain the highest protection standards for your personal data.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your learning experience, remember your preferences, and analyze platform usage. You have control over most cookies through your browser settings, though some are essential for basic platform functionality.

Types of Cookies We Use

Essential cookies: Required for basic platform functions like login and course access
Performance cookies: Help us understand how you use the platform to improve performance
Functionality cookies: Remember your preferences and personalization settings
Analytics cookies: Provide insights into user behavior and platform effectiveness

We don't use advertising cookies or share cookie data with advertising networks. Our analytics cookies are configured to respect user privacy and provide aggregated insights rather than individual tracking.

Changes to This Policy

We update this privacy policy periodically to reflect changes in our practices, legal requirements, or service offerings. We'll notify you of material changes through email or prominent platform notices at least 30 days before they take effect.

Minor updates that don't affect your rights or how we handle your personal data may be implemented immediately with updated posting dates. We encourage you to review this policy regularly to stay informed about our privacy practices.

If you disagree with policy changes, you have the right to close your account and request data deletion before the changes take effect. We'll process such requests according to our standard procedures and applicable legal requirements.

Privacy Policy