Flow Labs Consultancy FZCO Privacy Policy
Effective: April 01, 2024

Privacy Policy
Flow Labs recognise the importance of protecting the personal information collected from users in the operation of its services and taking reasonable steps to maintain the security, integrity, and privacy of any information in accordance with this Privacy Policy. By submitting your information to Flow Labs, you consent to the practices described in this policy. If you are less than 18 years of age, then you must first seek the consent of your parent or guardian prior to submitting any personal information.
This privacy policy describes how Flow Labs collects and uses the personal information you provide on our assessment platform https://discflow.org. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.

How We Collect Information
Information You Provide
Use of Your Information
Disclosure and Sharing of Your Information
Security
Cookies and Similar Tracking Technologies
Your Rights
Recourse
Updates to this Privacy Policy

How We Collect Information
Flow Labs may collect personal information about you in the following ways:

(1) directly from the information you provide as part of the assessment set up process; or (2) from your organisation who are making our service available to you; or (3) from an authorised partner who has been engaged by your organisation to make our services available to you.

Information You Provide
The types of personal information that Flow Labs collects about you may include:
Name
Email
Geographic location
Employer
Your responses to the assessment questions and the resulting profile generated (including self-selected behaviours, preferences, and characteristics)
Any demographic information you provide voluntarily

Use of Your Information
You agree that we can use the data, including personal data you enter on this web site, for the purpose of generating your personalised report and sending you, your organisation or the authorised partner engaged by your organisation, your results.

We will not send you any promotional communications. We will only send you communications that are necessary to perform the Service. We do not share, sell, rent, or trade personal data collected via the Service with third parties for their promotional purposes.

Personal information will not be kept longer than is necessary for the purpose for which it was collected. This means that, unless information must be retained for legal or archival purposes, personal information will be securely destroyed, put beyond use or erased from our systems when it is no longer required or, where applicable, following a request from you to destroy or erase your personal information.

Disclosure and Sharing of Your Information
We will share your personal data with third parties only in the ways that are described in this privacy policy. We share your personal data and the report generated after you take the assessment with the authorised partner or the company that ordered this assessment for you. We also share your personal data with third parties who provide services on our behalf to help with our business activities. Third parties who provide services on our behalf are authorised to use your personal information only as necessary to provide these services to us, pursuant to written instructions. In such cases, these third parties must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. These third parties provide us services including but not limited to the following:

Network or cybersecurity monitoring and intrusion detection
Web or application development/management
Shipping and fulfilling orders
Payment processing
Providing customer service
Conducting research and analysis
Monitoring site usage and user movements
Technical administration, such as hosting, managing, and maintaining our servers
In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We reserve the right to disclose your personal data as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process.

Cross Border Transfers
We may transfer your personal information outside of your country of residence for the following reasons:
To process your transactions, we may store your personal information on our servers and those servers may reside outside the country where you live. For the Service, your personal information is stored on servers located in Frankfurt, Germany. We also have a service provider located in the Philippines for the provision of support services. In order to satisfy global reporting requirements, we may be required to provide your personal information to our affiliates in other countries.
By submitting your personal information, you agree to this transfer, storing or processing of your information. We will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Policy and all applicable data protection laws.

Security
We will use appropriate physical, technical, and administrative safeguards to protect your data. Access to your personal data will be restricted to only those who need to know that information to perform their job function. In addition, we train our employees about the importance of maintaining the confidentiality and security of your information. When you enter information on our registration or order forms, we encrypt that information (such as login credentials) using secure socket layer technology (SSL). The Services are SSL encrypted.
We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Disclosure in Chat Rooms or Forums
You should be aware that identifiable personal information--such as your name or e-mail address--that you voluntarily disclose and that is accessible to other users (e.g., on social media, forums, bulletin boards or in chat areas) could be collected and disclosed by others. We cannot take any responsibility for such collection and disclosure.

Cookies and Similar Tracking Technologies
We and our partners use cookies or similar technologies to analyse trends, administer the Service, track users' movements around the Service, and to gather demographic information about our user base. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions available through the Service.

Your Rights
You may have the right to make a written request to be informed whether we hold or process any of your personal information (by emailing privacy@discflow.co) and we will comply with local laws with regards to responding in the required time frame. In your written request, you may:

Request that we provide you with details of your personal information that we process, the purpose for which it is processed, the recipients of such information, the existence of any automated decision making involving your personal information, and what transfer safeguards we have in place.

Request that we rectify any errors in your personal information.
Request that we delete your personal information if our continued processing of such information is not justified.
Request that we transfer your personal information to a third party.
Object to automated decision-making and profiling based on legitimate interests or the performance of a task in the public interest (in which event the processing will cease except where there are compelling legitimate grounds, such as when the processing is necessary for the performance of a contract between us).
Object to direct marketing from us; and
Object to processing for purposes of scientific, historical research and statistics.

We will comply with our legal obligations with respect to your request.

Recourse
Any comments, complaints or questions concerning this policy or complaints or objections about our use of your personal information should be addressed by directing your comments to Flow Labs Data Protection Officer.

Updates to this Privacy Policy
Please note that Flow Labs Privacy Policy is reviewed periodically. Flow Labs reserves the right to update its Privacy Policy at any time without notice. Any changes to the Privacy Policy will be posted on this page and will become effective on the date of posting. We encourage you to periodically review this page for the latest information on our privacy practices.
If we make material changes to this policy, we will notify you here, by email, or by means of a notice on our home page prior to the changes becoming effective.