Privacy Policy

Effective Date: January 15, 2025

At BrainSparkFlow, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our financial analysis and educational services.

1 Information We Collect

We collect several types of information to provide and improve our services. This includes both information you provide directly and data we gather automatically during your interaction with our platform.

Personal Information You Provide:

  • Name, email address, and phone number when you register
  • Educational background and professional experience details
  • Payment information for course enrollment (processed securely through third-party providers)
  • Communication preferences and feedback you share with us
  • Documents and assignments submitted through our learning platform

Automatically Collected Information:

  • Device information including browser type, operating system, and IP address
  • Usage patterns such as pages visited, time spent, and navigation paths
  • Learning progress data including course completion rates and assessment scores
  • Technical data like cookies, session tokens, and log files

2 How We Use Your Information

Your information helps us deliver personalized educational experiences and maintain high service quality. We process your data for specific, legitimate business purposes.

Purpose Information Used Legal Basis
Course delivery and progress tracking Learning data, assessments, personal details Contract performance
Customer support and communication Contact information, support tickets Contract performance
Service improvement and analytics Usage data, feedback, technical information Legitimate interest
Marketing and promotional content Contact details, preferences Consent

Important Note

We never sell your personal information to third parties. Your educational progress and financial analysis work remain confidential and are used solely to support your learning journey with us.

3 Data Storage and Security

We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our approach combines technical, physical, and administrative safeguards.

  • Data encryption in transit using TLS 1.3 and at rest using AES-256
  • Regular security audits and vulnerability assessments
  • Access controls limiting staff access to necessary information only
  • Secure backup systems with geographic redundancy
  • Employee training on data protection and privacy best practices
  • Incident response procedures for potential security breaches

Our servers are located in secure data centers that meet international security standards. We maintain detailed logs of data access and regularly review these for unusual activity.

Data Retention: We keep your information for as long as your account remains active or as needed to provide services. After account closure, most personal data is deleted within 90 days, though some records may be retained longer for legal compliance purposes.

4 Your Privacy Rights

Under Thailand's Personal Data Protection Act (PDPA) and international privacy laws, you have several important rights regarding your personal information:

Access Right

Request a copy of all personal information we hold about you, including how it's being processed.

Correction Right

Ask us to correct or update any inaccurate or incomplete personal information in our records.

Deletion Right

Request deletion of your personal information when it's no longer needed for legitimate purposes.

Portability Right

Receive your personal information in a structured, commonly used format for transfer elsewhere.

Objection Right

Object to processing of your personal information for marketing or other non-essential purposes.

Restriction Right

Request limitations on how we process your information while disputes are resolved.

To exercise any of these rights, contact our privacy team using the information below. We'll respond to your request within 30 days and may need to verify your identity before processing certain requests.

5 Third-Party Services and Data Sharing

We work with trusted partners to deliver our services effectively. These partnerships are governed by strict data protection agreements that limit how your information can be used.

Service Providers We Work With:

  • Payment Processors: Secure handling of transaction data for course payments
  • Email Services: Delivery of course updates, newsletters, and important communications
  • Analytics Platforms: Understanding user behavior to improve our educational content
  • Cloud Infrastructure: Reliable hosting and data backup services
  • Customer Support Tools: Managing help desk tickets and user assistance

We may also share information in these specific circumstances:

  • When required by Thai law or legal processes
  • To protect against fraud, security threats, or illegal activities
  • In connection with business transfers or mergers (with user notification)
  • With your explicit consent for specific purposes

International Data Transfers

Some of our service providers operate outside Thailand. When transferring data internationally, we ensure adequate protection through standard contractual clauses and other appropriate safeguards.

6 Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience and understand how our services are used. You have control over many of these technologies.

Types of Cookies We Use:

  • Essential Cookies: Required for basic site functionality and security
    • Session management and user authentication
    • Shopping cart and payment processing
    • Security features and fraud prevention
  • Performance Cookies: Help us understand site usage and improve performance
    • Page load times and error tracking
    • Popular content and navigation patterns
    • Device and browser compatibility data
  • Functional Cookies: Remember your preferences and personalize experience
    • Language and region settings
    • Learning progress and bookmarks
    • Display preferences and accessibility options

You can manage cookie preferences through your browser settings or our cookie preference center. Note that disabling certain cookies may affect site functionality and your user experience.

7 Updates to This Policy

We review and update this privacy policy regularly to reflect changes in our practices, services, or applicable laws. When we make significant changes, we'll notify you through appropriate channels.

  • Email notifications for material changes affecting your rights
  • Website banner announcements for policy updates
  • Updated effective date at the top of this policy
  • Archive of previous policy versions available upon request

We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of our services after policy changes indicates acceptance of the updated terms.

Policy Version History: This policy was last updated on January 15, 2025. Previous versions are available by contacting our privacy team.

Privacy Questions or Concerns?

Our privacy team is here to help with any questions about this policy or how we handle your personal information.

Phone +66 4 224 4755
Mail Address 781 24/781 Popular Rd, Ban Mai
Pak Kret District, Nonthaburi 11120
Thailand

We typically respond to privacy inquiries within 3 business days and aim to resolve all requests within 30 days as required by applicable privacy laws.