Privacy Policy
FlashNext SmartStream Financial Education Platform
Introduction and Scope
FlashNext SmartStream operates as a specialized financial education platform focused on fundamental analysis techniques for the Malaysian market. We recognize that your personal information deserves careful protection, especially when dealing with financial education services.
This policy applies to all interactions with our platform at flashnextsmartstream.com, including course enrollments, resource downloads, webinar registrations, and correspondence with our educational team. Our commitment extends to protecting data collected through all touchpoints of your learning journey with us.
As an educational institution operating in Malaysia, we comply with the Personal Data Protection Act 2010 (PDPA) and maintain international standards for data protection to serve our diverse student community effectively.
Information We Collect
Name, email address, phone number, educational background, and professional experience in finance. We collect this during course enrollment and account creation to personalize your learning experience.
Course progress, assignment submissions, quiz results, discussion forum participation, and time spent on different modules. This helps us improve course content and provide academic support.
IP address, browser type, device information, operating system, and website navigation patterns. We use this for platform optimization and security purposes.
Email correspondence, support ticket conversations, feedback submissions, and webinar chat interactions. This ensures consistent support and helps us address your educational needs.
How We Use Your Information
- Delivering comprehensive fundamental analysis courses tailored to Malaysian financial markets
- Providing personalized learning recommendations based on your progress and interests
- Sending course updates, new content notifications, and educational newsletters
- Facilitating peer discussions and collaborative learning opportunities
- Generating certificates and academic records upon course completion
- Improving course content based on student feedback and learning analytics
- Ensuring platform security and preventing unauthorized access
- Complying with educational standards and regulatory requirements in Malaysia
Legal Basis for Processing (PDPA Compliance)
Under Malaysia's Personal Data Protection Act 2010, we process your personal data based on the following legal grounds:
- Consent: You provide explicit consent when registering for courses or subscribing to our newsletters
- Contract Performance: Processing necessary to deliver educational services you've enrolled in
- Legitimate Interests: Improving our educational platform and ensuring security, balanced against your privacy rights
- Legal Compliance: Meeting Malaysian educational and business regulatory requirements
Information Sharing and Disclosure
We maintain strict controls over data sharing and only disclose information in specific, limited circumstances:
Educational Partners: Guest instructors and industry experts who contribute to our courses may receive limited contact information for educational purposes only.
Service Providers: Trusted technology vendors who help maintain our learning platform, payment processors for course fees, and communication tools for student support.
Legal Requirements: When required by Malaysian law enforcement, regulatory bodies, or court orders, we will disclose necessary information while protecting your privacy to the fullest extent possible.
Business Transfers: In the unlikely event of a merger or acquisition, student data would be transferred under strict confidentiality agreements maintaining the same privacy protections.
Your Privacy Rights
Request a complete copy of all personal data we hold about you, including learning records and communications.
Update or correct any inaccurate personal information in your student profile or academic records.
Request removal of your personal data, subject to academic record retention requirements and legal obligations.
Receive your learning data in a structured format to transfer to another educational platform if desired.
Withdraw consent for marketing communications or optional data processing activities at any time.
Object to certain types of data processing, particularly for direct marketing or automated decision-making.
To exercise any of these rights, contact our privacy team using the details below. We respond to all requests within 21 days as required under Malaysian PDPA regulations.
Data Security Measures
Encryption: All data transmission uses TLS 1.3 encryption, and sensitive data is encrypted at rest using AES-256 standards.
Access Controls: Role-based access restrictions ensure only authorized staff can access student information on a need-to-know basis.
Regular Audits: Quarterly security assessments and annual penetration testing to identify and address vulnerabilities.
Staff Training: All team members complete privacy and security training annually, with additional training for those handling sensitive data.
Incident Response: Established procedures for detecting, containing, and reporting any data breaches within 72 hours to relevant authorities.
Data Retention and Deletion
We retain different types of information for varying periods based on educational, legal, and business requirements:
- Academic Records: Kept for 7 years after course completion to support transcript requests and continuing education verification
- Financial Records: Maintained for 7 years in compliance with Malaysian business record keeping requirements
- Marketing Communications: Deleted within 30 days of unsubscribing from newsletters or promotional materials
- Technical Logs: Automatically purged after 12 months unless required for security investigations
- Support Communications: Retained for 3 years to maintain service continuity and resolve ongoing issues
When retention periods expire, we securely delete data using industry-standard methods that prevent recovery. Students can request early deletion subject to our legal and educational obligations.
International Data Transfers
While our primary operations are based in Malaysia, some of our technical infrastructure and educational partners operate internationally. When data crosses borders, we ensure adequate protection through:
- Contractual agreements requiring equivalent privacy protections
- Selection of service providers in jurisdictions with strong data protection laws
- Regular monitoring of international partners' privacy practices
- Encryption of all data during international transmission
Cookies and Tracking Technologies
Our educational platform uses cookies and similar technologies to enhance your learning experience:
- Essential Cookies: Required for platform functionality, login sessions, and course progress tracking
- Analytics Cookies: Help us understand how students navigate courses and identify areas for improvement
- Preference Cookies: Remember your settings, language preferences, and customization choices
You can control cookie preferences through your browser settings, though disabling essential cookies may limit platform functionality. We do not use advertising cookies or share tracking data with external marketing networks.
Changes to This Policy
We review and update this privacy policy annually or when significant changes occur to our data processing practices. Students will be notified of material changes via email and platform announcements at least 30 days before implementation.
Previous versions of our privacy policy are archived and available upon request. Continuing to use our platform after policy updates indicates acceptance of the revised terms.
Contact Us
FlashNext SmartStream
21 A, Hala Pinji 2, Taman Hoover
31650 Ipoh, Perak, Malaysia
Privacy inquiries are prioritized and typically receive responses within 48 hours.