Data Protection

PortalX Flow School is the data controller for personal data collected through portalxflow.digital and related enrollment flows. Questions: hello@portalxflow.digital · +82-7-925-1616 · 117-1, Gyeokpori, Byeonsan-myeon, Buan-gun, Jeollabuk-do, Korea.

We collect identity and contact data (name, email, optional company), billing-related data processed by payment partners when applicable, technical data (IP, device, cookies—see Cookie Preferences), and content you submit in forms or coursework.

Data is used to deliver courses, communicate schedules, improve materials, secure the platform, comply with law, and analyze aggregated usage. Marketing messages, if any, rely on consent or soft opt-in where permitted.

Processing rests on contract performance (providing enrolled services), legitimate interests (security, product improvement with balancing tests), consent where required (non-essential cookies, certain communications), and legal obligations.

We retain enrollment records and communications as needed to administer programs and meet tax or audit requirements, typically for the duration of the relationship plus statutory periods. Logs may be kept for shorter security cycles.

We use infrastructure, email, analytics (if consented), and payment processors bound by contracts requiring appropriate safeguards. A list of categories is available on request; specific sub-processors may change with operational needs.

If data is processed outside Korea, we implement safeguards such as standard contractual clauses or equivalent mechanisms where required, in addition to Korean cross-border transfer rules applicable to our operations.

We apply administrative, technical, and organizational measures including access controls and encryption in transit. No method is perfectly secure; report suspected incidents promptly.

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or portability. You may withdraw consent for optional processing. You may lodge a complaint with Korean authorities (PIPC) or your local regulator where available.

Services are directed to adults and professionals; we do not knowingly collect children's data. We may update this notice with a revised date. Material changes will be highlighted where practicable.