1. Introduction
This Privacy Policy describes how Goamazing (“we,” “us,” or “our”) collects, uses, stores, and discloses information about individuals who access or use our platforms and services, including our Learning Management System, Documentation Portal, and Help Center (collectively, the “Services”).
We primarily provide Services to educational institutions, universities, schools, and training organizations (“Institutions”). In many cases, we process personal data on behalf of those Institutions, acting as a data processor under their instructions. This Privacy Policy applies to our own data collection activities as a data controller, as well as our general obligations as a processor.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please discontinue use of the Services and contact your institutional administrator.
2. Information We Collect
We collect information in the following categories:
Personal Information
When individuals register for or access our Services, we may collect:
- Full name;
- Institutional email address;
- Institutional affiliation and role (e.g., administrator, instructor, learner);
- Account credentials (username and securely hashed password);
- Profile information provided voluntarily by the user.
Usage Data
We automatically collect technical information when you use our Services, including:
- Log data including date, time, and duration of access;
- IP address and approximate geographic location;
- Browser type and version, device type, and operating system;
- Pages visited and features used within the platform.
Course Activity Data
For users accessing the Learning Management System, we collect:
- Course enrollment and completion records;
- Assignment submissions and assessment results;
- Progress milestones and learning path status;
- Interaction logs within course modules.
3. How We Use Information
We use the information collected for the following purposes:
- To provide, operate, and maintain our Services;
- To authenticate users and manage account access;
- To track and display learning progress to authorized users and institutional administrators;
- To generate reports and analytics for institutional administrators;
- To diagnose technical issues and improve platform performance;
- To send service-related communications, including system notifications and policy updates;
- To comply with legal obligations and enforce our Terms & Conditions;
- To detect and prevent unauthorized access, fraud, or misuse of the platform.
4. Legal Basis for Processing
Where applicable data protection law requires a lawful basis for processing, we rely on the following:
- Contract performance: Processing is necessary to deliver the Services under our agreement with the Institution or with the individual user.
- Legitimate interests: We process certain data to maintain platform security, improve service quality, and prevent fraud, where such interests are not overridden by the rights of the data subjects.
- Legal obligations: We process data as required to comply with applicable laws and regulations.
- Consent: Where required by applicable law, we will seek consent before processing personal data for specific purposes, such as optional communications.
5. Data Sharing and Disclosure
We do not sell personal data. We may share data only in the following circumstances:
Service Providers
We engage third-party vendors and service providers who assist us in operating our platform, including hosting infrastructure and email delivery. These parties are bound by contractual data protection obligations and are not permitted to use data for their own independent purposes.
Institutional Administrators
Authorized administrators within your Institution may have access to data associated with users under their institutional account, including enrollment records, course progress, and assessment outcomes. This access is governed by the Institution's own privacy practices and data governance policies.
Legal Compliance
We may disclose personal data where required to do so by law, court order, or regulatory authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Goamazing, our users, or the public.
6. Data Retention
We retain personal data for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, or as required by applicable law.
Upon termination of an institutional agreement, we retain data for a reasonable transition period before deletion or anonymization, in accordance with our data retention schedule and any applicable contractual obligations. Institutions may request earlier deletion of their institutional data by contacting us directly.
7. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include encrypted data transmission, access controls based on the principle of least privilege, and regular security reviews.
No method of electronic transmission or storage is entirely secure. While we take the protection of personal data seriously, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights, we will notify affected parties in accordance with applicable legal requirements.
8. Your Rights
Depending on applicable law, you may have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you.
Right to Correction
You have the right to request correction of inaccurate or incomplete personal data.
Right to Deletion
You have the right to request deletion of your personal data, subject to applicable legal retention requirements.
Right to Restriction
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
Where technically feasible and legally applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
How to Exercise Your Rights
To exercise any of the above rights, please submit a written request to contact@goamazing.org. We will respond within a reasonable timeframe and in accordance with applicable law. Note that some rights may be subject to limitations where processing is carried out on behalf of your Institution.
10. Children's Privacy
Our Services are not intended for direct use by individuals under the age of 13 without the involvement of a parent, guardian, or an authorized educational institution.
Where our Services are deployed by schools or institutions serving minors, the Institution is responsible for ensuring appropriate consent and oversight in accordance with applicable law. We process data relating to minor learners solely on behalf of and under the instructions of the deploying Institution.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform functionality. We will indicate the date of the most recent revision at the top of this page.
When we make material changes, we will notify affected Institutions by email or by posting a prominent notice on our platform. Continued use of the Services following notification of changes constitutes acceptance of the revised Policy.
12. Contact Information
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:
- Email:contact@goamazing.org
- Phone:(+84) 093-362-6293
- Address: 245 Nam Kỳ Khởi Nghĩa, Xuân Hòa Ward, Ho Chi Minh City, Vietnam
If you believe we have not adequately addressed your concern, you may have the right to lodge a complaint with a relevant data protection authority in accordance with applicable law.