Who is responsible
The data controller is FLIPTON LIMITED, a company registered in Hong Kong SAR, 3/F, 200 Hennessy Road, Wan Chai, Hong Kong, Hong Kong SAR. We apply the GDPR to people in the EU/EEA and the Hong Kong Personal Data (Privacy) Ordinance (PDPO) to everyone else. Questions about this policy and requests about your data go to [email protected].
What we collect and why
We only collect what you type into a form on this site, plus a small amount of technical data to keep the forms working.
- Course applications: name, email, optional phone, location and profile link, your current role and experience, target track, goal, level, availability, start preference and anything you write in the message field. Used to profile you and place you in a cohort.
- Mentor applications: name, email, optional phone, profile link, role, experience, areas, availability, teaching background and message. Used to assess and roster you as a mentor.
- Company training requests: company, your name, role, work email, optional phone, team size, track, timeline and the description of what the team needs. Used to scope and propose a team cohort.
- Contact messages: name, email, topic and message. Used to answer you.
- Technical data with every submission: the page you sent it from, your browser’s user-agent string and a salted hash of your IP address. Used to stop spam and abuse. The IP address itself is not stored.
Legal basis
Your consent, given by ticking the box on the form (GDPR art. 6(1)(a)), and our legitimate interest in responding to requests you send us and in protecting the site from abuse (art. 6(1)(f)). You can withdraw consent at any time by emailing us; we then stop processing and delete your submission unless we are legally required to keep it.
How long we keep it
Submissions are kept for up to 24 months from the date we receive them, then deleted. If you join a cohort, the cohort agreement sets its own retention for the data needed to run and invoice it. If you ask us to delete your submission earlier, we do.
Who else sees it
Your data is stored on servers we control, hosted in the European Union. We use an email provider to send notifications to ourselves about new submissions, and that email contains what you typed. We do not sell data, share it with advertisers or use it for marketing lists. Mentors see the anonymised cohort profile, not your application.
Cookies and tracking
The public site sets no tracking cookies and runs no third-party analytics. The admin area uses a browser authentication prompt, which is not visible to visitors.
Your rights
Under the GDPR and the PDPO you can ask us to confirm what we hold about you, correct it, delete it, restrict or object to processing, or hand it over in a portable format. Email [email protected]; we answer within one month. You can also complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk) or to the data protection authority in your own country.
Changes
If this policy changes, the date at the top changes with it. Material changes to how we use data you already gave us will be announced by email.