Privacy Policy

At FLOW Academy, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or engage with our services. 

1. Who We Are 
   FLOW Academy is an educational provider offering training programmes designed to enhance professional skills. Our registered office is located at No. 22, Triq Wenzu Dyer, Hamrum, Malta. If you have any questions about this policy, you can contact us at info@flowmalta.academy. 
   
   
2. What Data We Collect  
   We may collect and process the following types of personal data: 
   - Identification data: Name, surname, and job title. 
   - Contact details: Email address, phone number, and mailing address. 
   - Payment details: If you register for a paid course, we collect payment details through a secure third-party payment provider. 
   - Technical data: IP address, browser type, and browsing behaviour on our website (via cookies). 
   - Course engagement data: Course registrations, attendance, and progress. 
   
   
3. How We Use Your Data 
   We process your data based on legal grounds under the General Data Protection Regulation (GDPR). We use your information for: 
   - Processing course registrations and managing your account. 
   - Providing customer support and responding to enquiries. 
   - Sending course updates, newsletters, and marketing materials (with your consent). 
   - Improving our website and learning experience. 
   - Complying with legal obligations. 
   
   
4. Legal Basis for Processing 
   Under DGPR, we process your personal data bases on: 
   - Contractual necessity – To deliver the services you have requested. 
   - Legitimate interest – For internal analytics and security. 
   - Consent – For marketing communications (You can withdraw your consent at any time). 
   - Legal obligations – When required by law. 
   
   
5. How We Share Your Data 
   We do not sell or rent your data. However, we may share it with: 
   - Service providers: To process payments, host our website, or support our platform. 
   - Legal authorities: If required to comply with legal regulations. 
   - Affiliates or business partners: When relevant to delivering the training programme. 
   - Data can be utilised by FLOW, The Digital Transformation Event and any 4Sight Group company. 
   
   
6. International Data Transfers 
   If we transfer your data outside the European Economic Area (EEA), we ensure safeguards such as Standard Contractual Clauses (SCCs) or agreements with providers certified under international privacy frameworks. 
   
   
7. How Long We Keep Your Data 
   We retain personal data only as long as necessary for the purposes stated in this policy, or as required by law. If you request deletion, we will securely erase data unless legal obligations require retention. 
   
   
8. Your Rights Under GDPR 
   You have the following rights regarding your personal data: 
   - Right to access – Request a copy of your data 
   - Right to rectification – Correct inaccurate or incomplete data 
   - Right to erasure (“Right to be forgotten”) - Request deletion of your data 
   - Right to restrict processing – Limit how we use your data 
   - Right to data portability – Receive a structured copy of your data 
   - Right to object – Object to data processing, including marketing 
   - Right to withdraw consent – Opt out of marketing emails or data collection 
   
   
9. Cookies and Tracking Technologies 
   We use cookies to improve your browsing experience. You can manage cookie preferences in your browser settings. For more details, visit our Cookie Policy. 
   
   
10. Updates to This Policy 
    We may update this Privacy Policy to reflect legal changes or improvements in our services. The latest version will always be available on our website. 
    
    
11. Contact Us 
    If you have any concerns about your personal data or this Privacy Policy, contact our Data Protection Officer (DPO) at info@flowmalta.academy.