Privacy Policy
This Privacy Policy explains how Flora Academy collects, uses, and protects personal information when you visit or use our learning platform.
Table of contents
Jump to a section. Each section has a “Copy link” button.
1. Data We Collect
What we collect depends on how you interact with Flora Academy.
- Account details (name, email, password hash, role).
- Profile preferences (language, learning goals).
- Messages sent to support or instructors.
- Billing details if you purchase services (processed by payment providers; we do not store full card numbers).
- Device and browser information (user agent, OS version, viewport).
- Approximate location derived from IP address.
- Usage signals (pages visited, time on page, clicks, course progress).
- Security logs (failed sign-ins, abuse prevention signals).
2. How We Use Data
We use data to operate the platform and improve learning outcomes.
- Deliver courses, track progress, and provide certificates where applicable.
- Personalize your experience (e.g., remembering preferences and recent activity).
- Provide customer support and respond to requests.
- Maintain platform security, detect fraud/abuse, and ensure availability.
- Comply with legal obligations (tax, accounting, and regulatory requirements).
- Contract performance (providing the service you request).
- Legitimate interests (security, service improvement).
- Consent (for non-essential cookies and certain communications).
- Legal obligation (recordkeeping, compliance).
- We do not sell personal data.
- We do not run sensitive profiling for high-risk decisions.
- We do not intentionally collect data from children without appropriate consent mechanisms.
3. Cookies
We use cookies and similar technologies to keep the site working and understand performance.
Required for core features like login sessions, saving privacy preferences, load balancing, and basic security protections. These cannot be disabled from within the platform.
Used to understand usage patterns (e.g., which pages are most helpful) so we can improve content and UX. You can opt out at any time.
4. Your Rights
You can control your data and request specific actions.
To submit a request, use the “Request data actions” button above or contact us using the details in Section 6. We may ask for additional information to verify your identity and protect your account.
5. International Transfers
We may process data in different countries depending on infrastructure and partners.
- We use contractual and technical safeguards appropriate to the transfer context.
- We limit access on a need-to-know basis and apply strong security controls.
- We retain information only for as long as necessary for the purposes described.
If you are located in regions with cross-border data transfer restrictions, you can contact us to learn more about the safeguards used for your data.
6. Contact
Questions, concerns, or privacy requests.
We typically respond within 72 hours. Complex requests may take longer if additional verification is required.