Privacy Policy

Information We Collect

Personal Information You Provide

When you register for our learning programs or contact us for services, we collect information that you voluntarily share with us. This typically includes your name, email address, phone number, and professional background details.

For those enrolling in specialized capital allocation programs, we may request additional information about your educational background and professional experience to better tailor our curriculum to your needs.

Automatically Collected Data

Our website collects standard technical information through cookies and similar technologies. This includes your IP address, browser type, device information, and how you interact with our content.

• Browser and device characteristics
• Pages you visit and time spent on each page
• Links you click and documents you download
• Location data (city level only, derived from IP address)

How We Use Your Information

We use the information we collect for specific, legitimate purposes that directly relate to providing our services:

Service Delivery and Communication

Your contact information allows us to send program updates, course materials, and respond to your inquiries. We'll notify you about upcoming events, schedule changes, or new learning opportunities that match your interests.

Educational Experience Enhancement

We analyze how students interact with our materials to improve course content and delivery methods. This helps us identify which topics need more explanation and which teaching approaches work best.

Security and Fraud Prevention

We monitor for unusual activity patterns to protect your account and our platform from unauthorized access or misuse. This includes tracking login attempts and flagging suspicious behavior.

Data Storage and Security

Your information is stored on secure servers located in Vietnam and Singapore, with regular backups to prevent data loss. We implement industry-standard security measures including encryption, firewalls, and access controls.

Technical Safeguards

• SSL/TLS encryption for all data transmission
• Encrypted database storage with AES-256 standards
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access
• Automated backup systems with 30-day retention

Access Controls

Only authorized staff members who need access to perform their job functions can view your personal data. We maintain detailed logs of who accesses what information and when.

Our team receives regular training on data protection practices and confidentiality requirements. Each employee signs non-disclosure agreements before handling any personal information.

Information Sharing and Disclosure

We share your information only in specific circumstances and always with appropriate safeguards in place.

Service Providers

We work with carefully selected third-party providers who help us deliver our services. These include email delivery services, payment processors, and hosting providers. Each partner is bound by strict confidentiality agreements and can only use your data for the specific purposes we authorize.

Legal Requirements

We may disclose your information if required by Vietnamese law, court order, or government regulation. This includes cooperating with law enforcement investigations or responding to legal processes served on our company.

Business Transfers

If Expand Zone undergoes a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We would notify you via email at least 30 days before any such transfer occurs.

Your Privacy Rights

Under Vietnamese law and our commitment to transparency, you have several rights regarding your personal information.

Access and Correction

You can request a copy of all personal information we hold about you. We'll provide this in a readable electronic format within 15 business days. If you find any inaccuracies, you can ask us to correct them immediately.

Data Deletion

You have the right to request deletion of your personal information, subject to legal retention requirements. We must keep certain records for tax and accounting purposes for seven years under Vietnamese law, but we can delete other information upon request.

Processing Restrictions

You can ask us to limit how we use your data. For example, you might want to receive only essential program updates rather than all promotional materials. We'll honor such preferences within five business days.

Data Portability

You can request your data in a machine-readable format (typically JSON or CSV) to transfer it to another service provider. We'll provide this within 20 business days of your request.

Cookies and Tracking Technologies

Our website uses cookies to improve your experience and understand how people use our platform. You have control over these cookies through your browser settings.

Types of Cookies We Use

You can disable cookies in your browser settings, though this may affect certain site features. Most browsers let you control cookies through their privacy settings.

Data Retention Periods

We keep your information only as long as necessary for the purposes outlined in this policy or as required by law.

Active Students and Clients

While you're enrolled in our programs or actively using our services, we maintain your complete profile and interaction history. This allows us to provide continuous support and track your learning progress effectively.

After Program Completion

We retain basic contact information and program completion records for three years after you finish a course. This helps us provide alumni services and verify credentials if needed.

Inactive Accounts

If you haven't interacted with our platform for 24 months, we'll send you an email asking if you want to keep your account active. Without a response, we'll delete most personal information after 30 months, keeping only anonymized data for statistical purposes.

Legal Obligations

Financial records and tax-related information must be kept for seven years as required by Vietnamese accounting regulations. Course completion certificates are maintained indefinitely for verification purposes.

International Data Transfers

Your data is primarily stored and processed in Vietnam. However, some of our service providers operate globally, which may involve transferring your information to servers in other countries.

When we transfer data internationally, we ensure appropriate safeguards are in place through standard contractual clauses approved by Vietnamese authorities and international data protection frameworks.

Countries where your data might be processed include Singapore (cloud hosting), the United States (email services), and members of the European Union (analytics tools). Each provider must meet our strict security and privacy standards.

Children's Privacy

Our services are designed for adults aged 18 and older. We don't knowingly collect personal information from anyone under 18 without parental consent.

If you're under 18 and interested in our programs, a parent or legal guardian must complete the registration process on your behalf. They'll need to provide consent and manage your account until you reach 18.

If we discover we've collected information from someone under 18 without proper consent, we'll delete it within 48 hours of discovery.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you via email at least 30 days before the new policy takes effect.

Minor updates, like clarifying existing language or fixing errors, may be made without advance notice. We'll always post the updated version on our website with a new "last updated" date at the top.

We encourage you to review this policy periodically. Your continued use of our services after changes take effect means you accept the updated policy.