Data Protection Policy
Flowclass is committed to safeguarding the confidentiality, integrity, and security of all client data received in the course of service delivery. The following terms govern how client data is handled throughout the engagement:
Purpose Limitation
All client data—including but not limited to contact information, institution details, user account data, course and payment records—will be collected and processed strictly for the purposes of delivering, supporting, or enhancing the services as defined in the scope of work. We do not process data beyond the agreed operational scope.
Data Security & Storage
All data is stored in secure server environments equipped with encryption, backup systems, and firewall protection. Both data at rest and data in transit are encrypted using industry-standard encryption protocols (e.g., SSL/TLS, AES-256 where applicable).
Access Control & Internal Handling
Access to client data is strictly limited to authorized Flowclass personnel who require access to fulfil their duties. All such personnel are bound by non-disclosure agreements and are trained in data privacy best practices.
Third-Party Disclosure
Client data will not be disclosed, sold, or transferred to third parties without prior written consent, except where disclosure is necessary to fulfill specific project requirements (e.g., payment gateway integration, third-party booking systems) or to comply with legal obligations.
Data Subject Rights
Clients have the right to request access to, correction of, or deletion of their data held by Flowclass. Requests may be submitted in writing and will be responded to within a reasonable timeframe, in accordance with applicable data protection laws.
Compliance & Oversight
Flowclass will make commercially reasonable efforts to comply with applicable data protection laws, including the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, and other regional laws where relevant.
Retention and Deletion
Unless otherwise agreed in writing, all client data will be retained only for the duration necessary to fulfill service obligations. Upon project completion or termination, clients may request permanent deletion of their data from our systems.
For any questions or concerns regarding data privacy, please contact our team directly at info@flowclass.io.
