Privacy Policy

Last Updated: January 15, 2025

At Flow Brain, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our financial modeling education platform.

We operate in Thailand and comply with the Personal Data Protection Act B.E. 2562 (2019) and related regulations. Your trust matters to us, and we're committed to transparency about how we handle your data.

1 What Information We Collect

When you sign up for our programs or browse our website, we gather different types of information. Some you provide directly, and some we collect automatically.

We need certain details to deliver our educational services effectively and improve your learning experience.

Personal Information You Provide

  • Your full name and preferred contact email address
  • Phone number for program-related communications
  • Educational background and professional experience details
  • Payment information processed through secure third-party providers
  • Program preferences and learning goals you share with us
  • Communication history including support tickets and feedback
  • Assignment submissions and project work from your coursework

Information We Collect Automatically

  • Device information including browser type and operating system
  • IP address and approximate geographic location
  • Pages visited and time spent on different sections
  • Course progress and completion rates
  • Login timestamps and session duration
  • Interaction patterns with learning materials

Thai Data Protection Compliance

As a Thailand-based education provider, we follow the PDPA regulations strictly. This means we only collect data that's necessary for our educational services, and we always ask for your consent before processing sensitive information.

You have specific rights under Thai law, including access to your data, correction requests, and the ability to withdraw consent at any time.

2 How We Use Your Information

We use the information we collect to run our programs, communicate with you, and make our services better. Everything we do with your data has a clear purpose related to your education or our legitimate business needs.

Primary Uses

  • Delivering course content and managing your enrollment
  • Providing technical support and answering your questions
  • Sending program updates and important administrative notices
  • Processing payments and maintaining financial records
  • Evaluating your progress and providing feedback on assignments
  • Improving our curriculum based on learning outcomes
  • Ensuring platform security and preventing fraud
  • Meeting legal and regulatory obligations in Thailand

3 Data Sharing and Third Parties

We don't sell your personal information. Period. But we do work with certain service providers who help us run our platform and deliver our programs.

Any company we work with signs agreements to protect your data and can only use it for the specific services they provide to us.

Who We Share With

  • Payment processors for secure transaction handling
  • Cloud hosting services that store our platform data
  • Email service providers for program communications
  • Analytics tools that help us understand user behavior
  • Customer support platforms for managing inquiries
  • Legal and regulatory authorities when required by Thai law

Access Your Data

You can request a copy of all personal information we hold about you. We'll provide it in a readable format within 30 days.

Correct Information

Found something wrong? You can update your profile details anytime or ask us to correct inaccurate information.

Delete Your Account

You have the right to request deletion of your account and associated data, subject to legal retention requirements.

Withdraw Consent

If you change your mind about how we use your data, you can withdraw consent for specific processing activities.

Data Portability

Request your data in a structured format that you can transfer to another service provider if you choose.

Object to Processing

In certain situations, you can object to how we process your personal information.

4 How We Protect Your Data

Security isn't just a checkbox for us. We use multiple layers of protection to keep your information safe from unauthorized access or breaches.

Our team regularly reviews and updates security measures to address new threats and vulnerabilities.

Encryption

All data transmitted between your device and our servers uses industry-standard SSL/TLS encryption.

️

Access Controls

Only authorized personnel can access personal data, and all access is logged and monitored.

Regular Backups

We maintain secure backups of our systems to prevent data loss and ensure business continuity.

Security Audits

Third-party security experts regularly review our systems and practices.

️

Breach Response

We have protocols in place to detect, respond to, and notify you of any security incidents.

Staff Training

Our team receives ongoing training about data protection and privacy best practices.

Data Retention Periods

We keep your information only as long as necessary for the purposes outlined in this policy or as required by Thai law.

Data Type Retention Period Reason
Account Information Active account duration + 2 years User access and program delivery
Course Progress Active account duration + 3 years Certificate verification and records
Payment Records 7 years from transaction date Tax compliance and accounting requirements
Communication Logs 3 years from last interaction Support quality and dispute resolution
Marketing Consent Until consent withdrawn Communication preferences management
Analytics Data 26 months from collection Platform improvement and analysis

5 Cookies and Tracking

Like most websites, we use cookies to remember your preferences and understand how you use our platform. You control what cookies you accept.

Essential cookies are necessary for the site to work properly. Optional cookies help us improve your experience and understand what content works best.

Types of Cookies We Use

  • Authentication cookies that keep you logged in securely
  • Preference cookies that remember your settings
  • Analytics cookies that track general usage patterns
  • Performance cookies that help us optimize load times

6 International Data Transfers

Our primary servers are located in Thailand, but some of our service providers operate internationally. When we transfer data outside Thailand, we ensure appropriate safeguards are in place.

These safeguards include standard contractual clauses approved by data protection authorities and strict security requirements for all partners.

7 Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email and post a notice on our platform.

The "Last Updated" date at the top shows when the most recent changes were made. We encourage you to review this policy periodically.

Questions About Your Privacy?

If you have concerns about how we handle your data or want to exercise your rights, contact our Data Protection team at:
Email: contact@flow-brain.com
Phone: +66 2 947 9160
Address: สโมสร, Nong Mai Daeng, Chon Buri District, Chon Buri 20000, Thailand