Privacy Policy

Your privacy matters to us. We're committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data.

Last Updated: January 15, 2025

Introduction and Scope

SmartFlashStream operates as an educational platform focused on budgeting skills and financial literacy. This privacy policy explains how we handle your personal information when you visit smartflashstream.com, use our services, or interact with our educational content.

This policy applies to all users accessing our platform from Malaysia and internationally. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and maintain international privacy standards to protect users regardless of their location.

By using our services, you agree to the collection and use of information as described in this policy. If you don't agree with our practices, please discontinue use of our platform.

Information We Collect

Personal Information

Contact details including name, email address, and phone number when you register or contact us
Demographic information such as age, location, and educational background for course customization
Payment information processed through secure third-party providers
Communication preferences and marketing consent status

Technical Information

IP addresses, browser types, and device information for security and optimization
Website usage patterns, page views, and navigation paths
Cookies and similar tracking technologies for functionality and analytics
Login timestamps and session duration for account security

Educational Data

Course progress, completion rates, and assessment results
Learning preferences and skill level assessments
Forum posts, comments, and community interactions
Feedback submissions and course evaluations

How We Use Your Information

We process your personal data for several legitimate purposes that directly support your educational experience and our business operations.

Purpose Data Used Legal Basis
Course delivery and progress tracking Account info, learning data Contract performance
Customer support and communication Contact details, inquiry history Legitimate interest
Platform improvement and analytics Usage data, technical info Legitimate interest
Marketing and promotional content Contact info, preferences Consent

We never sell your personal information to third parties. Our data processing focuses on enhancing your learning experience and maintaining a secure, effective educational platform.

Data Sharing and Third Parties

We work with trusted service providers to deliver our educational services effectively. Here's when and why we might share your information:

Service Providers

Payment processors for handling course fees and transactions securely
Cloud hosting services for data storage and platform operations
Email service providers for course notifications and communications
Analytics tools to understand platform usage and improve user experience

Legal Requirements

We may disclose your information when required by Malaysian law, court orders, or regulatory requirements. This includes compliance with PDPA obligations and cooperation with authorized investigations.

All third-party providers undergo security assessments and agree to protect your data according to our privacy standards. We maintain data processing agreements with all service providers.

Your Privacy Rights

Under Malaysian PDPA and international privacy standards, you have several rights regarding your personal data. We make exercising these rights straightforward and free of charge.

Access and Correction

Request copies of personal data we hold about you
Update or correct inaccurate information in your account
Review your data processing history and purposes

Control and Deletion

Withdraw consent for marketing communications at any time
Request deletion of your account and associated data
Object to specific data processing activities
Request data portability for information you've provided

To exercise these rights, contact our privacy team using the details provided at the end of this policy. We'll respond to your request within 21 days as required by Malaysian law.

Data Security and Protection

Protecting your personal information is a top priority. We implement comprehensive security measures to safeguard your data against unauthorized access, alteration, or disclosure.

Technical Safeguards

SSL/TLS encryption for all data transmissions
Secure database storage with access controls
Regular security audits and vulnerability assessments
Multi-factor authentication for administrative access

Organizational Measures

Staff training on data protection and privacy principles
Limited access to personal data on a need-to-know basis
Incident response procedures for potential data breaches
Regular backup and disaster recovery testing

While we implement strong security measures, no internet transmission is completely secure. We encourage users to use strong passwords and keep their login credentials confidential.

Data Retention and Deletion

We retain your personal data only as long as necessary to provide our services and comply with legal obligations. Our retention periods vary based on the type of information and its purpose.

Data Type Retention Period Reason
Account information 3 years after account closure Legal compliance, dispute resolution
Course progress data 5 years after course completion Educational records, certification
Payment records 7 years Tax and accounting requirements
Marketing data Until consent withdrawn Active marketing campaigns

When retention periods expire, we securely delete or anonymize your data. You can request early deletion of your data, though this may affect our ability to provide certain services.

International Data Transfers

Some of our service providers and systems may be located outside Malaysia. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your privacy rights.

Standard contractual clauses with international service providers
Adequacy decisions from Malaysian authorities where applicable
Regular review of international transfer mechanisms
Documentation of all cross-border data flows

We only work with providers that demonstrate adequate data protection standards and maintain transparency about where your data is processed.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. These tools help us understand user preferences, maintain sessions, and improve our services.

Types of Cookies We Use

Essential cookies for platform functionality and user authentication
Performance cookies to analyze site usage and optimize content
Preference cookies to remember your settings and customizations
Marketing cookies for relevant advertising (only with your consent)

You can control cookie preferences through your browser settings or our cookie management tool. Disabling certain cookies may limit some platform features but won't prevent access to core educational content.

Children's Privacy

Our platform is designed for adult learners and we don't knowingly collect personal information from children under 18 without parental consent. If you're a parent or guardian concerned about your child's data, please contact us immediately.

Age verification during account registration
Special procedures for users under 18 with guardian approval
Enhanced privacy protections for younger users
Clear policies for educational institution partnerships

If we discover we've inadvertently collected data from a child under 18 without proper consent, we'll delete that information promptly and restrict the account until appropriate authorization is obtained.

Updates to This Policy

We review and update this privacy policy regularly to reflect changes in our practices, technology, and legal requirements. Significant changes will be communicated clearly to all users.

Email notifications for major policy changes affecting your rights
Platform announcements for important updates
30-day notice period before implementing significant changes
Version history maintained for transparency

Continued use of our platform after policy updates indicates your acceptance of the revised terms. If you disagree with changes, you can withdraw consent or close your account before the changes take effect.

Privacy Questions and Contact Information

For any questions about this privacy policy or your personal data, contact our privacy team:

SmartFlashStream Privacy Team
Bandar Botanik, 42000 Port Klang, Selangor, Malaysia
Phone: +6072357521
Email: info@smartflashstream.com

We aim to respond to all privacy inquiries within 21 days.