Your Privacy Is Important To Us
Read about how we collect and manage to the data you share with FlowCreates
Updated Jan 11, 2024
FlowCreates (“we,” “us,” and “our”) is committed to protecting your privacy and personal information that you provide to us when accessing or using our Services, products, or this website (this “Site”). This privacy policy (this “Policy”) explains how we gather and use the information that we collect during your visit to this Site.
This Policy may change over time, so please be sure to reread it from time to time. Amendments, modifications or changes to this Policy will be posted at this URL and will be effective when posted. Your continued use of this Site following the posting of any amendment, modifications or change to this Policy shall constitute your acceptance thereof. If you do not agree with the terms in this Policy, please do not use this Site and do not provide any information to us. Unless otherwise defined in this Policy, the terms used in this Policy have the meaning given to them in our Terms of Service, which you can access here: www.flowcreates.com/terms-and-conditions.
Restrictions
This Policy covers your access to our Services and to this Site. Our Site is not directed to and is not intended for access and use by persons under the age of 18. We do not intentionally collect or use Personal Data from users that we have reason to believe are under the age of 18.
Personal Data Collected
The type of Personal Data (defined below) and Other Data (also defined below) we collect depends on how you are specifically interacting with this Site how you are using our Services. Generally, we gather Personal Data and Other Data as described below.
Personal data is information that identifies you or can be used to identify or contact you, e.g., your name, email address, address, usage data, phone numbers, and unique device identifiers (“Personal Data”). We may need to collect and process Personal Data in order to provide requested information, products or Services to you (including this Site) or because we are legally required to do so.
- Account Registration. We will request Personal Data from you if this Site requires registration. The registration process requests that you provide your name, email address, address, phone number, company affiliation, if any, and other similar information. This information must be stored on this Site, and is accessible to anyone with whom you share your username and password. For this reason, please safeguard your username and password carefully and do not disclose it to any other person.
- Voluntary Disclosure. We may collect Personal Data voluntarily provided by you, including in emails to this Site, online forms, order and registration forms, surveys, promotion participation, phone calls and online chats with our customer service and through other means.
- Payment Services. We may use third-party payment Services (each, a “Payment Service”) to collect payments made through this Site. If you wish to make a payment through this Site, you may be directed to a webpage that is hosted by the Payment Service (or the Payment Service’s service providers) and not by us. Any Personal Data that you provide through a Payment Service page will be collected by Payment Service and not by us, and will be subject to Payment Service’s privacy policy, rather than our Policy. We have no control over, and are not responsible for, Payment Service’s use of information collected through the Payment Service page.
- Log data. We may collect log data, such as network and connection information (including Internet Service Provider (ISP) and Internet Protocol (IP) addresses), device and browser identifiers and information (including device, application, or browser type, version, plug-in type and version, operating system, user agent, language and time zone settings, and other technical information), advertising identifiers, cookie identifiers and information, and similar data.
- Usage information. We may collect usage metrics (including usage rates, occurrences of technical errors, diagnostic reports, settings preferences, backup information), content interactions (including searches, views, downloads, and prints), and user journey history (including clickstreams and page navigation, URLs, timestamps, content viewed or searched for, page response times, page interaction, and similar data.
- Other Means. We may collect information through various other means, including from selected third-party business partners who work with us in relation to our Services and that we may utilise to deliver certain content, products, or Services or to enhance your experience. From time to time, we may also acquire from third parties certain lists containing the names and contact information of individuals who may be interested in our Services.
We ask that you not send us, and you not disclose, any sensitive Personal Data (e.g., personal identification numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through this Site or otherwise to us.
Use and Disclosure of Personal Data
Our primary goal in collecting, using, and sharing your information is to enhance and improve our Services. To that end, we will only use Personal Data for legitimate business purposes, including the following:
- Fulfilment of Requests. We may use Personal Data about you (a) to deliver products and Services to you, (b) provide you with information about products and Services you’ve ordered, (c) for internal research and development purposes, (d) when it is necessary for employees, agents and contractors to operate or maintain this Site or to correct a technical problem, (e) to detect and prevent fraud and abuse to ensure the security and protection of all customers and others, such as to verify the existence or condition of your account; (f) to comply with the law and our legal obligations, including to respond to a request or order from a court, regulator, or government authority; and (g) to effectuate the sale, merger, acquisition, or other disposition of our assets or business (including in connection with any bankruptcy or similar proceedings). We will engage in these activities to manage our contractual relationship with you and/or to comply with a legal obligation.
- Other Communications. From time to time, we may use Personal Data about you to inform you of products, programs, Services and promotions that we believe may be of interest to you. If you or your employer is one of our customers, we may also inform you of such products, programs, Services and promotions using Personal Data about you that you or your employer provided to us. If you would prefer that we not send electronic marketing messages to you, please see the “opt-out” section below.
- Promotions. We may operate contests and similar promotions (collectively, “Promotions”). If you choose to enter the Promotions, we typically ask you for certain Personal Data when you enter and, if applicable, win a Promotion. You should carefully review the rules of each Promotion in which you participate, as they may contain additional important information about our use of Personal Data about you. To the extent that the terms and conditions of such rules concerning the treatment of your Personal Data conflict with this Policy, the terms and conditions of such rules shall control. We use this information to operate the Promotions.
- Other Business Purposes. We may also use Personal Data about you for other business purposes, such as data analysis (for example, to improve the efficiency of our Site and Services), editorial and feedback purposes, providing customer support, customising and improving the content and layout of this Site, completing business transactions (for example, to confirm content requested is received by users), development of marketing and promotion plans and materials, statistical analysis of user behaviour (for example, to understand what parts of this Site are of most interest to users), product development, market research, administering individual accounts, and meeting government regulatory requirements such as sales tax collection, audits, etc. We may also use Personal Data of journalist/media contacts for press release distribution or sharing other newsworthy developments related to our business activities. We engage in these activities to manage our contractual relationship with you, to comply with a legal obligation, and/or because we have a legitimate interest.
- Administrative Communications. We reserve the right to use Personal Data to send to you important information regarding this Site, products, Services, your account status, changes to this Site’s terms of use, this Policy, or any other policies, agreements or transactions relevant to your use of this Site, products and/or Services. Because this information may be important to your use of this Site, products and/or Services, you may not opt-out of receiving such communications. We will engage in this activity to manage our contractual relationship with you and/or to comply with a legal obligation.
We may disclose Personal Data for the following purposes:
- Third-Party Service Providers. We may provide Personal Data to third-party service providers, who provide services to us, including but not limited to, data analysis, order fulfilment, payment processing, and other services.
- Affiliate Communications. We may transfer Personal Data among our affiliates to allow our affiliates to contact you regarding products, programs, Services and promotions that they believe may be of interest to you, and such affiliates may otherwise use your Personal Data in accordance with this Policy. If you would prefer not to receive marketing communications from us or our affiliates, please see the “opt-out” section below. We will be the party responsible for jointly-used Personal Data.
- Strategic Partners and Co-Branded Sites. From time to time, we may enter into a special relationship with another company that is not owned by or affiliated with us to provide or promote joint products, services, applications, or features (together, “Jointly Offered Items”). These special relationships may include co-branded web sites (“co-branded pages”). Any information, including Personal Data that you provide in connection with one of these Jointly Offered Items, and/or on one of these co-branded pages will be shared with our third-party partners. You should check these third parties’ web sites for information regarding their privacy practices. Please note that this policy does not address the privacy or information practices of any third parties. If you do not want Personal Data about you shared with such third parties, please do not provide Personal Data in connection with the Jointly Offered Items and/or co-branded pages.
- Third-Party Data Providers. If you subscribe to one of our products or Services that contains third-party data, we may be required to provide your Personal Data to the third party as part of our reporting obligations. We will only do so if a third-party data provider conditions your receipt of their data on knowing your identity.
- Conferences and Events. When you attend a conference or event organised by us, your name and contact information may be shared with other attendees.
- Promotions. We may share the Personal Data you provide in connection with Promotions with third-party sponsors of such Promotions (irrespective of whether such Promotions are hosted by us), or otherwise in accordance with the rules applicable to those Promotions.
- Assignment. We may disclose or transfer any and all Personal Data that we collect to an affiliated entity or a third party (and their respective advisors) in the event of any reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings).
- Law Enforcement; Emergencies; Compliance. We may use and disclose Personal Data about you to others as we believe to be appropriate: (a) in compliance with laws, rules, or regulations in any country in which we operates, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from government or public authorities, including government and public authorities outside your country of residence; (d) to enforce our Site’s terms of use; (e) to protect our operations or those of any affiliated entities; (f) to protect the rights, privacy, safety or property of us, our affiliated entities, you, or others; and (g) to permit us to pursue available remedies or limit the damages that we may sustain. For example, we may, to the fullest extent the law allows, disclose Personal Data about you to law enforcement agencies to assist them in identifying individuals who have been or may be engaged in unlawful activities.
Collection and Use of Other Data
Our service providers and we may also collect and use the following types of data, referred to in this Policy as “Other Data”:
- Monitoring Data. Our service providers and we may collect and/or track other information such as demographic information, domain names, computer type, browser types, screen resolution, and other statistical data involving the use of this Site (“Monitoring Data”). We use Monitoring Data to help us understand who uses this Site and to improve and market it, as well as our other websites and services. Unless combined with Personal Data, Monitoring Data does not personally identify you or any other user, and we may use it for any purpose.
- Aggregated Data. We may aggregate Personal Data in a manner such that the end-product does not personally identify you or any other user of this Site, for example, by using information to calculate the percentage of our users who have a particular telephone area code. Such aggregate information may also be used for any purpose.
- Cookies. To enhance the Internet experience on this Site, our service providers and we may use ‘cookies’ on this Site. Cookies are data that a web server transfers to an individual’s computer for record keeping and other purposes. We use cookies and other technologies to facilitate users’ ongoing access to and use of our Site. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies, or to be given the choice of declining or accepting the transfer of a particular cookie, or cookies from a particular web site, to your computer. If cookies are disabled, however, all features of this Site may not operate as intended. Information about disabling cookies can be found on your Internet browser provider’s web site. This Site may have a Cookie Policy that applies to its use of cookies and other similar tracking technologies. If it does, then the Cookie Policy will apply in addition to this Policy. We may use the following types of cookies:
- Strictly Necessary. These cookies are essential for our Services to perform their basic functions. These include cookies that are required to allow registered users to authenticate and perform account related functions, as well as to save the contents of virtual “carts” for e-commerce functionality.
- Analytics and Performance. Performance cookies collect information on how users interact with our Services, including what pages are visited most, as well as other analytical data. We use these details to improve how our Services function and to understand how users interact with our Services.
- Functionality. These cookies are used to store preferences set by users, such as account name and language.
- Security. We use these cookies to help identify and prevent potential security risks.
- Advertising. These cookies are used to display relevant advertising to users who use our Services, as well as to understand and report on the efficacy of ads served on our Services. They track details such as the number of unique visitors, the number of times particular ads have been displayed, and the number of clicks the ads have received. They are also used to build user profiles, including showing you ads based on products or Services you’ve viewed or acts you have taken.
- Third-Party / Embedded Content. Services hosted by us make use of different third-party applications and services to enhance the experience of our Services. As a result, cookies may be set by third parties, and used by them to track your online activity. We have no direct control over the information that is collected by these cookies.
- Tools. Our service providers and we may also use various common Internet tools such as ‘pixel tags,’ ‘action tags,’ ‘web beacons,’ ‘gif tags,’ ‘JavaScript’ or similar technologies (together, “Tools”) in connection with Site pages and email messages in certain formats to, among other things, track the actions of Site users and email recipients, to determine the success of marketing campaigns and to compile statistics about Site usage and response rates. Tools allow us to count users who have visited certain pages of this Site, to deliver Services, and to help determine the effectiveness of promotional or advertising campaigns. When used in email messages in certain formats, Tools can tell the sender whether and when the email has been opened.
We uses cookies and Tools to understand how this Site is used and to customise and enhance the Internet experience of individual users. When you revisit this Site, we may recognise you by a Tool and customise your experience. For example, once you have completed the registration process, a cookie and/or Tool will be used to avoid having you register again. We believe cookies and Tools add value to the user experience.
- HubSpot Analytics, Google Analytics. We may use Google Analytics, HubSpot Analytics and other similar programs which each use cookies and other similar technologies, to collect and analyse information about Site use and to report on activities and trends. These programs may also collect information regarding the use of other websites, apps and online resources.
- Verification. We may use third-party services to verify that you are a human user. Any information collected as part of such verification is subject to the privacy policy of the third-party service provider.
- IP Addresses. When you visit and interact with this Site, we and our third-party service providers may collect Internet Protocol (IP) addresses. Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider (ISP). This number is identified and logged automatically in our server log files whenever you visit this Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use IP addresses to understand how this Site is used by our users, to improve this Site and to enhance user experience of this Site. We may also use your IP address to help diagnose problems with our server and to administer our Site. We may also derive your approximate location from your IP address.
Our Advertising
We may use third-party advertising companies to serve advertisements regarding products and Services that may be of interest to you when you access and use this Site, our apps and other websites or online services, based on information relating to your access to and use of this Site and other websites or online services on any of your devices, as well as on information received from third parties. To do so, these companies may place or recognise a unique cookie on your browser (including through the use of pixel tags). They may also use these technologies, along with information they collect about your online use, to recognise you across the devices you use, such as a mobile phone and a laptop.
Security
We may store your Personal Data. This information is retained and used in accordance with existing laws, rules, regulations, and other policies.
While there is no such thing as “perfect security” on the Internet, we will take reasonable steps to insure the safety of your Personal Data. Personal Data is stored on our server and is not publicly accessible. To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information, we take reasonable precautions and have security measures in place to protect the loss, misuse and alteration of the information under our control. Although we attempt to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent third-party “hackers” from illegally obtaining this information. We are not responsible for any breach of its security or for the actions of any third parties that may obtain any Personal Data. You are prohibited from violating or attempting to violate security for or otherwise interfering with the operation of this Site. We do not make, and expressly disclaim, any representation or warranty, express or implied, regarding the security or integrity of this Site and your Personal Data.
If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us of the problem immediately by sending an email to general@flowcreates.com.
Data Integrity and Retention Period
We will use Personal Data only in ways that are compatible with the purposes for which it was collected, authorised by this Policy, or authorised by you. We will take reasonable steps to ensure that Personal Data is relevant to its intended use, and is accurate, complete, and current (as provided by you). We depend on you to update or correct your Personal Data whenever necessary.
We will retain Personal Data about you for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
Consent
By visiting our Site, you expressly consent to the collection and use by us of Personal Data according to this Policy.
Choice: Opt-Out
We give you choices regarding our use and disclosure of your Personal Data for marketing purposes.
- If you no longer want to receive marketing-related emails from us on a going-forward basis, you may stop receiving these marketing-related emails by sending an email to general@flowcreates.com.
- If you would prefer that we do not share your Personal Data on a going-forward basis with our affiliates or with unaffiliated third parties for their marketing purposes, you may cease this sharing by sending an email to general@flowcreates.com.
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you exercise the second option as described above, we will not be able to remove your Personal Data from the databases of our affiliates or unaffiliated third parties with which we have already shared your Personal Data (i.e., to which we have already provided your Personal Data as of the date that we implement your request). Further, please note that requesting us not to share your Personal Data with affiliates or unaffiliated third parties may result in you no longer receiving any marketing emails from us. Please also note that if you choose not to receive marketing-related messages from us, we may still send you important administrative messages, and you cannot elect to stop receiving such administrative messages, unless you choose to stop receiving Services from us.
You may also indicate your choices regarding marketing-related emails by contacting us via postal mail or telephone using our contact information below, or if you have a profile/account, by changing your preferences on the profile/account at any time.
Correct, Update, Accessibility & Conflicts
If you would like to request to review, correct, update, suppress, delete or otherwise limit our use of your Personal Data that has been previously provided to us, or if you would like to request to receive an electronic copy of your Personal Data for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may make a request by contacting us by sending an email to general@flowcreates.com. We will respond to your request consistent with applicable law. For your protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Please note that we may need to retain certain information for record keeping purposes and/or to complete any transactions that you began prior to requesting the change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.
We are committed to ensuring this Policy is accessible to individuals with disabilities. If you wish to access this Policy in an alternative format, please contact us by sending an email to general@flowcreates.com. Depending on the specific interactions you have with us, we may provide different or supplemental privacy statements that describe and govern how we use your personal information. When we do so, those different or supplemental privacy statements apply to those specific interactions you have with us.
Links
This Site may contain links to other Internet web sites, including social media sites and third-party hosted collaboration tools. These linked sites are not under our control. We provide links only as a convenience, and we does not endorse or control, and is not responsible for, the privacy practices or the content of these linked sites. If you provide any Personal Data through any third-party web site, or choose to communicate with us using third-party collaboration tools or other social media platforms, your transaction will occur on that third party’s web site (not this Site) and the Personal Data you provide will be collected by, and controlled by the privacy policy of, that third party. We recommend that you familiarise yourself with the privacy policies and practices of any such third parties. Please note that this policy does not address the privacy or information practices of any third parties, including, without limitation, affiliated entities that do ont post or link directly to this policy.
Governing Law and Enforcement of Privacy Policy
Use of this Site is governed by Malaysian law. If you are accessing this Site or Services from a physical location outside of the Malaysia with laws or regulations governing personal data collection, use, and disclosure that are different from Malaysian laws, you agree that by accessing this Site, you are transferring your Personal Data and Other Data to Malaysia and you consent to the application of the laws of Malaysia with respect to use of this Site and Services and any dispute regarding this Site or this Policy.
If any provision of this Policy is held by a court of competent jurisdiction to be illegal, unenforceable, or in conflict with any applicable law, the validity of the remaining portions or provisions shall remain in full force and effect.
Do Not Track Disclosures
We do not respond to Do Not Track (“DNT”) signals at this time. Some third party sites may track your actions when you are browsing and accessing content. Various browsers offer a DNT option that sends a signal to third parties that you do not want to be tracked.
Data Controller
For the purposes of this Policy, you are the Data Controller of your Personal Data. “Data Controller” means a person who (either alone or jointly or in common with other persons) determined the purposes for which and the manner in which any Personal Data is, or will be, processed. We should be considered only as a processor on your behalf as to any Personal Data that is subject to the requirements of European Union’s Directive 95/46/EC. We may use the services of various third-party service providers in order to process your data more effectively.
Cross Border Transfer of Personal Data
Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers. If you are accessing this Site from outside of Malaysia, you may be sending information that may be hosted in cloud services rendered by countries outside your country of residence. These countries do not necessarily have data protection laws as comprehensive as those in your country. Information transferred to the United States or another country is subject to the laws of that country and may be disclosed or accessed in accordance with those laws. By transferring information or allowing information to be transferred to us, you consent to the transfer, processing and storage in countries outside your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access your Personal Data.
Contact Us
If you have any questions about this Policy or the practices of this Site, you can email us at general@flowcreates.com with the subject 'Privacy'.
This document (“Privacy Policy”) describes what, why and how FlowCreates (collectively “FlowCreates”, "we" or "us") collect and use your personal data, how we protect it and how you can contact us.
Please read this Privacy Policy carefully. By accessing our website, using any services provided by FlowCreates, signing up for any products and services provided by FlowCreates, submitting any information to us, or otherwise showing your agreement thereon, you will be deemed to have agreed and consented to the terms of this Privacy Policy.
We reserve the right to amend, alter, change or modify this Privacy Policy at any time and without prior notice. Any amendment, alteration, change or modification will be posted from time to time on our website.
1. Personal Data
1. In this Privacy Policy, “Personal Data” means:
- Any data, whether true or false, which can be related to a specific identifiable individual;
- Your personal details, including details relating to other person(s) who may be identified from the data;
- The contents of all information obtained from the membership and/or VIP forms and/or document(s) collected by us;
- Other information which is available to us.
2. Collection of Personal Data
We may collect your Personal Data in several different ways.
1. Information that we may collect directly from you:
1. Whenever you interact with FlowCreates, you may be asked to provide us your Personal Data. For example:
- Some of our services require you to create an account. When creating your account, we may ask you to provide a range of information, such as your name, date of birth, contact details, interests and account and newsletter preferences.
- When you purchase, register, raise an issue or request for a refund at the end of the service, we may record the call or chat and/or ask you to provide information such as your contact details and payment information.
- When you contact our customer service for assistance, we may keep information about the conversation, including your name, contact details, the product(s) or service(s) you bought, the reason to why you contacted us and the advice we gave you.
- When you join one of our loyalty programs, we may collect information relating to your use of the loyalty program and the rewards that you claim.
- When you visit us at a public event, such as trade show or exhibition or participate in one of our surveys, competitions, prize draws or workshops, we may ask for information, such as your business card, name, contact details, interests and preferences.
- When you use our online services, we may receive content that you choose to upload, such as reviews, comments, photos and forum posts, or details of your interests and preferences that you choose to tell us about, for example, when you select the services that you wish to receive.
- When you participate in surveys and research, we may ask you for information, such as your email address and information about you.
- When you apply for a job position at FlowCreates, we may ask you for information such as your name, contact details, education and employment history.
- When you submit your Personal Data to us for any other reason.
2. Please take care when submitting information to us, in particular when completing free text fields or uploading documents and other materials. Some of our services are automated and we may not recognise that you have accidentally provided us with incorrect or sensitive information.
3. You are not required to provide the Personal Data. However, if you do not do so, we may not be able to provide you with our products or services, communicate with you or respond to your enquiries. You should ensure that all Personal Data submitted to us is complete, accurate, true and correct because it may result in our inability to provide you with the products and services you have requested.
4. If you provide us with any Personal Data relating to a third party (e.g., information of your spouse, children, parents, and/or employees), by submitting such Personal Data to us, you represent to us that you have obtained the required consent of the third party to provide us with their Personal Data.
2. Information we may collect in relation to social networks
If you use any of our social network applications, pages or plugins or you use one of our products or services that allow interaction with social networks, we may receive information relating to your social network accounts. For instance:
- If you log-in to one of our websites or services using your social network account, we may receive basic details from your social network profile. The basic details we receive may depend on your social network account privacy settings, however, they might include your social network ID, name, profile picture, gender and locale. We may also receive additional information from your profile if you give us permission to access it.
- If you click on a 'like', '+1' or 'tweet' or similar button in one of our websites or services, we may record the fact that you have done so. In addition, the content that you are viewing may be posted to your social network profile or feed. We may receive information about further interactions with this posted content (for example, if your contacts click on a link in the posted content), which we may associate with the details that we store about you.
- If you 'like', '+1' or similar one of our pages on a social network site, we may receive information about your social network profile, depending on your social network account privacy settings.
- For more information and for details about how you can control access to your social network profile, you should view the privacy policy and other guidance available on your social network’s website.
3. Information we may collect when you use websites, products and services from FlowCreates
Some internet-enabled products and online services provide FlowCreates with information about your use of them, including:
- Details of the content that you view and interact with. For example, when you use our website, we may collect information about your visit, such as your browser software, which pages you view and which items you ‘clicked’ on or added to your shopping cart.
- Service, product or server logs, which hold information about your use of our service, product or websites, such as your IP address, browser information (including HTTP user agent strings), HTTP client request information and the time and location of your activities, domain, device and application settings, errors and hardware activity.
- Device information such as your device ID(s) and/or information about where your device is physically located. For example, when you are using a geo-location service or application and you have provided consent to your location being shared.
- Interests and preferences that you specify during setup of the Internet enabled product or service.
- Communications that you have with our customer service or other personnels may be monitored and logged.
- In general, this information is collected using digital identifiers such as a device number, browser cookie or your IP address. These identifiers are used to distinguish the information provided by your browser or device from that of another user’s browser or device.
- We may associate the collected information with one or more of your accounts, if for instance you are logged into a service when the information is collected.
3. Purpose of Collection, Use and Disclosure of Your Personal Data
Generally, we collect, use and disclose your Personal Data for the following purposes:
1. Service provision: When we use personal information to offer our products and services to you, the processing is based on an agreement between you and FlowCreates. We may use personal information to provide services to you including:
- To facilitate and process your searches and requests for information when you contact us about FlowCreates and its products and services.
- To resolve complaints, respond, and handle requests and enquiries.
- To provide customer care, warranty, returns and other after sales services.
- To verify your identity when you contact us.
- To provide our checkout assistance service. When you use our online stores, details of any products that you seek to purchase and your email address may be collected as you fill in the checkout form. If you do not complete your purchase, we may contact you using these details to offer our assistance (in case, for instance, you were suffering from technical difficulties). This is an optional service. You can choose not to receive our checkout assistance emails at any time by following the link at the bottom of each assistance email.
2. Product and service development. We work constantly to improve our products and services. We either base this processing on our legitimate interests to develop our products and services to better meet customer requirements, to ensure data quality, to develop identity management, and to strengthen network and information security, or on your prior consent. We may use Personal Data for product and service development purposes such as:
- For staff training and quality assurance purposes, particularly in relation to our customer relations staff at our call, email and other support centres. For example, we may monitor and record your phone calls and customer-facing interaction.
- To measure our performance, troubleshoot and improve and enhance our products and services and effectiveness, fix errors, or ask for your opinions on FlowCreates products and services and conducting surveys.
- To carry out research and development and statistical analysis and marketing research activities to and create and improve new and existing FlowCreates products and services, recommendations, advertisements and other communications and learn more about customers in general.
3. Marketing. We will use your Personal Data to offer you products and services we believe may interest you. These products and services may be offered by us, our related companies, our other business partners or our service providers. Where you receive electronic marketing communications from us, you may opt out of receiving further marketing communications by following the opt-out instructions provided in the communication.
4. When we use Personal Data for marketing purposes, we base the processing on either our legitimate interests to know our customers, keep you up-to-date about FlowCreates’ latest products and services, and to personalise your customer experience, or on your prior consent, e.g. for sending marketing messages and to personalise your customer experience.
5. Scenarios that we may use your Personal Data for marketing purposes include:
- To provide you with newsletters and other communications by post, email, telephone, text message (SMS), social network, or instant message if you have provided your prior consent or we are otherwise permitted to do so under applicable law. These communications may include, for instance, details about the latest FlowCreates’ products and services, including upgrades and special offers in which you may be interested.
- Conduct prize draws, contests and organise any other promotional offers or events.
- Show you personalised content, recommendations and advertisements and more effectively target you with services, content, recommendations, advertisements and communications. You may notice this personalisation and targeting when you use FlowCreates’ products and services, when we contact you with marketing communications and when you visit our and third party websites and services that show advertisements from us or our advertising partners (for example, you might see an advertisement for a product that you have recently viewed on one of our websites). The personalisation and targeting that you see on our websites or in our online advertisements and communications may make use of your ID or cookies set by us or our third party advertising partners. In other cases, our services may have specific settings to control personalised content and you should consult the privacy policy of the relevant service for more information.
- Create anonymous, aggregated statistics about the use of our websites, products, services and loyalty programs, which we may share with third parties and/or make available to the public.
- Use product reviews, comments or content you have uploaded to our websites or services and made publicly visible to link to, publish or publicise elsewhere including in our own advertisements. Each time you create or reply to a post or thread on a website forum from FlowCreates, in addition to providing this forum service, we may also record the forum name and the time and date of your post or thread with your account details. We do this to better understand the ‘typical users’ of our forums and to select or tailor our marketing communications to reflect your forum activity. We do not use the content of your forum posts or threads for these additional purposes.
6. We may use your Personal Data collected from monitoring our websites, online services and emails for security purposes. We may also use your Personal Data to analyse, troubleshoot, investigate, handle, or resolve any security matters or any vulnerability. This information may be passed to the police or to other appropriate authorities. We base this processing on our legitimate interests to protect you and our company, systems, employees and partners, or on a legal obligation to cooperate with competent authorities.
7. We may use Personal Data to prevent, detect, and investigate commercial crime, dispute or fraud, to investigate any violations of our policies, and to conduct audit, due diligence or to analyse, prevent and manage commercial risks to FlowCreates. For example, we may use your information such as your device ID(s) to ensure that any vouchers or discounts relating to any promotions or campaigns are not being redeemed fraudulently, and to check that a payment is not made fraudulently. In this case, we base the processing of personal information on our legitimate interest to prevent fraud and to provide benefits only to our customers.
8. We may also use your Personal Data to comply with applicable laws, regulations and court orders and to comply with valid legal information requests from such bodies. We may use your Personal Data to enforce or defend the legal rights of any FlowCreates’ group company or the terms and conditions of any FlowCreates’ product or service including obtaining legal advice and dispute resolution. In this case, we base the processing on a legal obligation to which FlowCreates is subject or on our legitimate interest to defend our legal rights.
9. Other purposes
- We may use your Personal Data for other purposes which are reasonably related to the above purposes.
- When you apply for a job position at FlowCreates, we will use your Personal Data for recruitment purposes. We base this processing on consent.
- We may also have specifically notified you of other purposes for which we collect, use or disclose your Personal Data. If so, we will collect, use and disclose your Personal Data for those additional purposes as well, unless we have specifically notified you otherwise.
- We may use your Personal Data for managing the administrative and business operations of FlowCreates and complying with internal policies and procedures. We base this processing on legitimate interests.
- We may use your Personal Data to facilitate business asset transactions (which may extend to any mergers, acquisitions or asset sales) involving any of the related corporations or affiliates of FlowCreates. We base this processing on consent.
- We may process your Personal Data using an artificial intelligence or automated decision-making tool for the purposes specified herein. We will not do so if the activity is prohibited by the local laws.
- Your Personal Data may also be combined or linked via a unique identifier, such as a cookie, account number, email address and we may also match any of your Personal Data for any of the purposes listed herein. It is for your and/or our convenience (for example, to allow you to more easily register for a new service), to allow us to provide a more seamless customer support whenever you contact us and to provide you with better, personalised services, content, marketing and advertisements.
4. Processing of Children Data
1. We consider a child to be anyone under the age of 18. We do not knowingly seek or collect Personal Data from or about children without the consent of a parent or guardian.
2. If we become aware that Personal Data that has been submitted to us relates to a child without the consent of a parent or guardian, we will use reasonable efforts to:
- Delete that Personal Data from its files as soon as possible.
- Ensure, where deletion is not possible, that this Personal Data is not used further for any purpose, nor disclosed further to any third party.
- Any parent or guardian with queries regarding our processing of personal information relating to their child should contact us using the details provided at the end of this Privacy Policy.
5. Retention of your Personal Data
1. We will only retain your Personal Data for as long as is reasonably necessary for the various purposes set out in this Privacy Policy or to otherwise comply with any applicable laws and regulations concerning the mandatory retention of certain types of information.
6. Disclosing and Transferring of Personal Data
1. Subject to the provisions of any applicable law, we may disclose or transfer your Personal Data to the following parties for the purposes listed above:
- FlowCreates’ related corporations or affiliates and their employees to provide content, products and services to you or FlowCreates.
- any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale) involving any of FlowCreates’ related corporations or affiliates.
- our professional advisers such as auditors, financial advisers and lawyers.
- relevant government regulators, statutory boards or authorities or law enforcement agencies to comply with any laws, rules, guidelines and regulations or schemes imposed by any governmental authority.
- any other party to whom you specifically authorise us to disclose your Personal Data.
2. Some of the recipients may be outside of Malaysia. We use a variety of legal mechanisms, including data sharing agreements, to ensure adequate level of protection of your Personal Data. It is deemed that you consent and agree to FlowCreates transferring your Personal Data outside of Malaysia for any of the purposes as listed above. If you have any questions or concerns, please contact us using the details provided at the end of this Privacy Policy.
7. Security measures
1. We take appropriate and commercially reasonable technical, physical, and administrative measures to protect your Personal Data from misuse or accidental, unlawful or unauthorised destruction, loss, alteration, disclosure, acquisition or access in accordance with applicable laws. These processes and systems include:
- Limiting access to the information and using identity and access management technologies to control access to systems on which information is processed and stored.
- Putting in place physical, electronic and procedural safeguards in line with industry standards.
- Requiring all employees to complete training about information security.
- Monitoring and regularly reviewing our practise against our own policies and against industry best practice.
8. Cookies, web beacons and embedded scripts
1. In order to improve our services to you, we sometimes use automated tracking devices such as a “cookie”. A cookie is a small amount of data that our web server sends to your web browser when you visit certain parts of our website and the use of which is intended to assist our understanding of your interest in our website. We may use the cookies to personalise the content, recommendations, advertisements and communications delivered to you so that they are more relevant to you and your interests. For example, you may see an advertisement for a product that you have recently viewed on our website. Please note that the cookies do not personally identify users although they do identify a user’s browser. You can always choose to disable cookies from being stored on your computer by changing your browser settings. Disabling cookies, however, may result in a limited experience of our functionality and services and in some cases may mean that we are unable to provide you with the services, or parts of the services, that you have requested. Some of our business partners whose content is incorporated into or linked to from the website may also use cookies. However, we have no access to or control over these cookies or websites.
2. A “web beacon” (also known as image tag, pixel tag, clear GIF or web bug) is a small piece of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to our websites and to monitor how users navigate our websites.
3. An “embedded script” is programming code that is designed to collect information about your interactions with our websites, such as the links you click on. The code is temporarily downloaded onto your device from our server or a third-party service provider, is active only while you are connected our websites, and is deactivated or deleted thereafter.
9. Data subject rights
1. Under Personal Data Protection Act 2010, as a data subject you have the right to:
- have your data deleted or corrected where it is inaccurate;
- access your data which we process and keep with us;
- stop any of our new promotional products sent to you;
- withdraw your consent for us to process your personal data.
10. Contact
1. If you have any questions, comments, concerns, or requests to withdraw your consent, delete, make access or corrections to your Personal Data records or exercise any of your rights, you may contact us as at general@flowcreates.com. We will make our best effort to respond to your queries and/or requests within 21 days.
2. There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).
3. If you withdraw your consent to any or all use of your Personal Data, depending on the nature of your request, we may not be able to continue to provide its products and/or services to you. In addition, there are some circumstances in which we are not required to give you access to your personal information.
4. If you remain unsatisfied with the way in which we have handled your privacy issue, you may contact the government authority.
Ready to scale your business with a fully customised website?
Not sure which web design service do you need to grow your business? Let us figure it out together!