1. Introduction
This policy applies to website visitors, students, parents or guardians, and individuals contacting Nam Phuong Education. We act as the data controller determining the purposes and means of processing personal data described in this policy.
2. Information We Collect
- Account information: full name, email, phone number, date of birth, country, and learning preferences.
- Learning information: courses, submitted assignments, evaluation results, schedule, progress, and support correspondence.
- Transaction information: study plan, invoices, payment status, and reference codes; we do not store full payment card details.
- Technical information: IP address, device type, browser, security logs, and website activity.
3. Purposes of Use
- Provide accounts, courses, progress tracking, and support services under contract.
- Process payments, invoicing, and fulfill legal or accounting obligations.
- Protect accounts, prevent fraud, and maintain system security based on legitimate interests.
- Improve programs, measure effectiveness, and send marketing communications when authorized by appropriate legal grounds or consent.
When consent is required, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
4. Information Sharing
We do not sell personal data. Information is only shared when necessary with instructors, payment providers, hosting, email, analytics, or professional advisors subject to confidentiality obligations; or with competent authorities when required by law.
If data is transferred outside the UK, we implement appropriate transfer mechanisms and safeguards in accordance with applicable laws.
5. Data Security
We use access controls, transmission encryption, logging, and personnel authorization limits to protect data. No system is completely secure; in the event of an incident, we will evaluate, address, and notify affected individuals or regulators as required by law.
Data is retained only as long as necessary for the purposes above, contractual duration, and legal obligations; thereafter it is deleted, anonymized, or restricted according to internal retention schedules.
6. Your Rights
Depending on circumstances and processing grounds, you may request:
- Access, correct, or delete personal data.
- Restrict processing, object to processing, or receive data in a portable format.
- Withdraw consent and object to direct marketing at any time.
- Lodge a complaint with the Information Commissioner's Office (ICO) or relevant data protection authority.
We may need to verify your identity before processing requests. Certain rights have statutory exceptions; if a request cannot be fulfilled, we will explain the reasons.
8. Regulations & Compliance
We process data in accordance with applicable UK data protection laws, including UK GDPR and the Data Protection Act 2018. Where learners are under legal age to provide consent, parents or guardians must provide consent and manage the account. This policy is reviewed periodically and material changes will be notified.
9. Contact
To exercise your privacy rights, ask questions, or report data incidents, please provide details of your request and information helping us verify your account:
privacy@namphuongeducation.co.uk