Privacy Policy
Your privacy matters to us. This comprehensive policy explains how Smartflowspot collects, uses, protects, and manages your personal information in accordance with Philippine data protection laws and international standards.
Introduction and Scope
Smartflowspot ("we," "our," or "us") operates an educational platform specializing in interpretable machine learning applications in finance. This privacy policy applies to all users of our website (smartflowspot.com), educational services, webinars, and related digital platforms.
We are committed to protecting your privacy and maintaining transparency about our data practices. This policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and incorporates international best practices for data protection.
Information We Collect
Personal Information
- Full name, email address, and phone number when you register for courses or webinars
- Educational background and professional experience for course customization
- Payment information processed through secure third-party payment processors
- Correspondence and communication records with our support team
- Profile photos and biographical information you voluntarily provide
Technical and Usage Data
- Device information including IP address, browser type, and operating system
- Website navigation patterns and page interaction data
- Course progress, assignment submissions, and learning analytics
- Login timestamps and session duration information
- Cookies and similar tracking technologies for website functionality
How We Use Your Information
We process your personal data for legitimate educational and business purposes. Our data usage practices are designed to enhance your learning experience while maintaining strict privacy standards.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Course delivery and progress tracking | Personal details, learning data | Contract performance |
| Communication about services | Contact information | Legitimate interest |
| Platform security and fraud prevention | Technical data, usage patterns | Legitimate interest |
| Payment processing | Financial information | Contract performance |
Data Sharing and Third Parties
We maintain strict controls over data sharing and only work with trusted partners who meet our security and privacy standards. Your information is never sold or used for unauthorized marketing purposes.
Authorized Data Recipients
- Payment processors for secure transaction handling (encrypted data only)
- Cloud hosting providers with Philippine data residency requirements
- Email service providers for course communications and updates
- Educational technology partners for specialized learning tools
- Legal and regulatory authorities when required by Philippine law
All third-party processors are bound by contractual agreements that ensure equivalent protection of your personal data. We conduct regular audits of our partners' security practices and data handling procedures.
Your Rights and Choices
Under Philippine data protection law and our commitment to privacy, you have several important rights regarding your personal information. We make it straightforward to exercise these rights through multiple channels.
Access and Portability Rights
You can request a complete copy of your personal data in a structured, commonly-used format. This includes your profile information, course history, communications, and usage analytics. We typically fulfill these requests within 15 business days.
Correction and Update Rights
You have the right to correct inaccurate information or update outdated personal details. Most profile information can be updated directly through your account dashboard. For other corrections, contact our privacy team with specific details about the information requiring updates.
Deletion and Erasure Rights
You may request deletion of your personal data, subject to certain legal and contractual limitations. We will delete your information unless we have legitimate grounds to retain it, such as ongoing course enrollments, legal obligations, or unresolved disputes.
Data Security and Protection
We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our multi-layered approach includes both technical and organizational safeguards.
Technical Security Measures
- End-to-end encryption for all data transmission using TLS 1.3 protocols
- AES-256 encryption for stored sensitive data and database protection
- Regular security audits and penetration testing by certified professionals
- Multi-factor authentication requirements for administrative access
- Automated backup systems with encrypted off-site storage
- Network monitoring and intrusion detection systems
Organizational Security Practices
- Mandatory privacy training for all employees handling personal data
- Strict access controls based on job responsibilities and need-to-know principles
- Regular security awareness programs and simulated phishing tests
- Documented incident response procedures and breach notification protocols
- Annual third-party security assessments and compliance audits
Data Retention and Storage
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve potential disputes. Our retention practices are designed to minimize data storage while meeting operational and legal requirements.
| Data Category | Retention Period | Storage Location |
|---|---|---|
| Active student records | Duration of enrollment + 3 years | Philippines data centers |
| Course completion certificates | 10 years for verification purposes | Philippines data centers |
| Financial transaction records | 7 years (regulatory requirement) | Encrypted regional storage |
| Marketing communications data | Until unsubscribe + 1 year | Philippines data centers |
| Website analytics and cookies | 24 months maximum | Anonymized cloud storage |
International Data Transfers
While we primarily process data within the Philippines, certain operational requirements may necessitate international data transfers to trusted partners. We ensure all international transfers comply with Philippine data protection laws and maintain equivalent protection standards.
Transfer Safeguards
When international transfers occur, we implement appropriate safeguards including standard contractual clauses, adequacy decisions, and binding corporate rules. All receiving countries must provide adequate data protection levels as assessed by relevant authorities.
We maintain detailed records of all international data transfers and regularly review the necessity and adequacy of protection measures. You have the right to request information about specific international transfers affecting your personal data.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience, analyze website performance, and provide personalized content. We respect your choices regarding cookie usage and provide transparent controls.
Types of Cookies We Use
- Essential cookies required for website functionality and security
- Performance cookies to analyze website usage and improve user experience
- Functional cookies to remember your preferences and settings
- Analytics cookies to understand visitor behavior and popular content
You can control cookie settings through your browser preferences or our cookie management tools. Disabling certain cookies may limit website functionality but will not prevent access to core educational content.
Children's Privacy Protection
Our educational services are designed for adult learners and professionals. We do not knowingly collect personal information from individuals under 18 years of age without verified parental consent. If we discover that we have inadvertently collected information from a minor, we will promptly delete such information.
For educational programs specifically designed for younger learners, we implement enhanced privacy protections and obtain appropriate parental consent before processing any personal information.
Updates to This Privacy Policy
We regularly review and update this privacy policy to reflect changes in our practices, technology, legal requirements, and business operations. Material changes will be communicated to users through email notifications and prominent website notices.
We encourage you to review this policy periodically to stay informed about how we protect your privacy. The "Last Updated" date at the beginning of this document indicates when the most recent changes were made.
Notification of Changes
For significant policy changes that affect your rights or our data processing activities, we will provide at least 30 days advance notice. You will have the opportunity to review changes and make informed decisions about continued use of our services.
Privacy Questions and Support
For privacy-related questions, concerns, or to exercise your data protection rights, our dedicated privacy team is available to assist you.
Email: privacy@smartflowspot.com
Phone: +63437022094
Address: Manila East Arcade 1 Taytay Rizal 1920, Philippines
We typically respond to privacy inquiries within 5 business days and strive to resolve all requests promptly and thoroughly.