The short version
- We collect only what we need to deliver your purchase and run the site.
- We never sell your data to anyone.
- We use privacy-first analytics with no third-party cookies.
- You can request access, deletion, or export of your data at any time.
- We retain data only as long as we have a legal reason to.
Who we are
HuaFlow ("we", "us") is the data controller for personal data processed via huaflow.co. Contact: privacy@huaflow.co.
What we collect and why
When you buy a course
We collect your name, email address, billing country, and order details. We share payment details with our payment processors (Stripe, PayPal). We never see or store your full card number.
When you contact us
We keep your email and message in our support system to answer you and improve the service.
When you use the site
We use a privacy-first analytics tool (no cookies, no third-party tracking) to count anonymous page views and aggregate referrer information. No personal profile is built.
Cookies
We use a minimal set of first-party cookies for: language preference, login session (if you sign in), and basic functionality. No advertising cookies. No third-party trackers.
Data retention
- Order records: kept for 7 years for tax compliance.
- Support emails: kept for 2 years from last contact.
- Analytics: aggregated only, no personal identifiers.
Your rights (GDPR / UK GDPR / equivalent)
You can request: a copy of your data, correction of inaccurate data, deletion (subject to legal retention obligations), or export in a portable format. Email privacy@huaflow.co with your request and we'll respond within 30 days.
Data location and transfers
Our primary data is stored on EU-based servers. Some sub-processors (e.g. Stripe, PayPal) are based in or transfer data to other regions under standard contractual clauses.
Security
HTTPS everywhere. Encryption at rest. Access to personal data is limited to staff who need it. We've never had a known breach; if one ever occurs, we'll notify affected users within 72 hours.
Children
HuaFlow is not aimed at children under 13. We don't knowingly collect their data.
Changes to this policy
We post material changes here and notify customers by email when changes affect them.