At CastlyByte, we take your privacy
seriously. This policy explains how we handle your personal
information when you use our educational platform focused on
geopolitical risks in trading.
We operate in Vietnam and comply with
applicable Vietnamese data protection laws, including Decree
13/2023/ND-CP on Personal Data Protection. We've written this in
plain English because nobody enjoys reading legal jargon.
When you interact with our
platform, we collect different types of information. Some you provide
directly, and some we gather automatically as you browse.
Information You Give Us
- Your name, email address, and phone
number when you register for our learning programs or contact
us
- Professional background details you
choose to share, such as your trading experience level or career
goals
- Payment information when you enroll
in paid courses (processed through secure third-party payment
providers)
- Communications you send us, including
support requests and feedback
- Profile information if you create an
account, including your learning preferences and progress
Information We Collect
Automatically
Like most websites, we
automatically collect certain technical information when you
visit:
- Your IP address and general location
(city level, not your exact address)
- Browser type, device information, and
operating system
- Pages you visit on our site and how
long you spend on them
- Referring website that brought you to
us
- Course completion rates and learning
patterns to improve our curriculum
We're not in the business of
selling your data. Here's what we actually do with the information we
collect:
| Course Delivery |
Provide access to learning
materials, track your progress, and send course-related
updates |
| Communication |
Respond to your inquiries,
send program information, and share relevant updates about
geopolitical risks affecting traders |
| Platform Improvement |
Analyze how students use our
platform to enhance course content and user experience |
| Security |
Protect against fraud,
unauthorized access, and ensure platform safety |
| Legal Compliance |
Meet our obligations under
Vietnamese law and maintain proper business records |
Marketing Communications
We'll occasionally send you
information about new courses or updates to our curriculum. You can
unsubscribe anytime using the link in every email. We won't bombard
you with messages, and we definitely won't share your email with
third parties for their marketing purposes.
We keep your information within our
organization whenever possible. However, running an online
educational platform means working with some trusted partners:
Service Providers
- Hosting providers who keep our
website running and secure
- Payment processors who handle
transactions (we never see your full credit card details)
- Email service providers who help us
send course materials and updates
- Analytics tools that help us
understand how students use our platform
All these partners are
contractually required to keep your information confidential and use
it only for the specific services they provide to us.
Legal Requirements
We may disclose your information if
required by Vietnamese law, legal process, or government request.
We'll notify you when legally permitted to do so.
What We Don't Do
We don't sell, rent, or trade
your personal information to third parties. We don't share your
data with advertisers. We don't send your information outside
Vietnam unless you explicitly consent or it's necessary for
providing our services (like using international cloud
infrastructure with proper safeguards).
Under Vietnamese data protection
law, you have several rights regarding your personal information.
Here's what you can do and how to exercise these rights:
Access Your Data
You can request a copy of the
personal information we hold about you. We'll provide this in a
readable format within 30 days of your request.
Correct Inaccurate
Information
If any of your personal details are
incorrect or outdated, you can update them through your account
settings or contact us directly. We want your information to be
accurate as much as you do.
Delete Your Data
You can request deletion of your
personal information. We'll honor this request unless we need to
retain certain information for legitimate business purposes or legal
requirements, such as:
- Completing transactions you've
initiated
- Maintaining financial records as
required by Vietnamese tax law
- Detecting and preventing fraud or
security incidents
- Complying with legal
obligations
Withdraw Consent
If we process your data based on
your consent (like for marketing emails), you can withdraw that
consent anytime. This won't affect the lawfulness of processing
before withdrawal.
Object to Processing
You can object to how we process
your data in certain situations. We'll stop unless we have compelling
legitimate grounds to continue.
How to Exercise Your
Rights
Send us an email at
support@castlybyte.com with your request. We'll need to verify your
identity before processing requests to protect your information. We
respond to most requests within 15 business days, though complex
requests might take up to 30 days.
We implement reasonable technical
and organizational measures to protect your personal information.
While no system is completely secure, we take this responsibility
seriously:
- All data transmissions are encrypted
using industry-standard SSL/TLS protocols
- Our servers are protected by
firewalls and intrusion detection systems
- Access to personal data is restricted
to employees who need it to perform their jobs
- We regularly update our security
practices and conduct vulnerability assessments
- Payment information is processed
through PCI-DSS compliant payment processors
- We maintain backup systems to prevent
data loss
If we experience a data breach that
affects your personal information, we'll notify you and relevant
authorities as required by Vietnamese law, typically within 72 hours
of becoming aware of the incident.
We don't keep your information
longer than necessary. Here's our general approach to data
retention:
- Account information: Retained while
your account is active and for 2 years after account closure
- Course enrollment data: Kept for 5
years to maintain academic records and comply with educational
regulations
- Payment records: Retained for 10
years as required by Vietnamese tax and accounting laws
- Marketing communications data:
Deleted within 90 days after you unsubscribe
- Website analytics: Aggregated and
anonymized after 26 months
- Support communications: Retained for
3 years to maintain service quality
After these periods, we securely
delete or anonymize your information so it can no longer identify
you.
Our primary operations are in
Vietnam, but some of our service providers operate globally. When
your information is transferred outside Vietnam, we ensure
appropriate safeguards are in place:
- We use cloud services with data
centers that meet international security standards
- Contractual agreements require
overseas processors to maintain Vietnamese-equivalent data
protection standards
- We limit international transfers to
situations where they're necessary for service delivery
- Your sensitive financial information
remains within Vietnam-based systems whenever possible
If you have concerns about
international data transfers, contact us to discuss specific
arrangements.
We use cookies and similar
technologies to improve your experience on our platform. Here's what
you should know:
Essential Cookies
These are necessary for the website
to function properly. They enable core features like security,
network management, and accessibility. You can't opt out of these
while using our platform.
Functional Cookies
These remember your preferences and
choices to provide a personalized experience, like your language
preference or login information.
Analytics Cookies
We use these to understand how
visitors interact with our website. This helps us improve course
content and platform usability. The data is aggregated and doesn't
identify individual users.
You can control cookies through
your browser settings. Keep in mind that blocking certain cookies may
affect your ability to use some features of our platform.
Our educational platform is
designed for adults interested in trading and geopolitical risk
analysis. We don't knowingly collect personal information from
individuals under 18 years old.
If you're under 18 and interested
in our programs, please have a parent or guardian contact us. If we
discover we've inadvertently collected information from someone under
18, we'll delete it promptly.
We update this privacy policy
occasionally to reflect changes in our practices or legal
requirements. When we make significant changes, we'll notify you
through:
- Email notification to your registered
address
- Prominent notice on our website
homepage
- In-platform notifications when you
log into your account
The "Last Updated" date at the top
of this policy shows when the most recent changes were made. We
encourage you to review this policy periodically.
Our platform may contain links to
third-party websites, articles, or resources related to geopolitical
risks and trading. We're not responsible for the privacy practices of
these external sites.
When you click on third-party
links, you leave our platform and should review the privacy policies
of those websites. This is especially important when accessing
financial news sources or trading platforms we reference in our
courses.
