Privacy Policy
Effective Date: August 10, 2026 | Last Updated: August 10, 2026
Introduction
FlowWin, a brand operated by Macheng Yida Labor Services Co., Ltd. (hereinafter referred to as the Company, we, us, or our), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website at https://www.flowwin.mom, engage with our services, or otherwise interact with us in the course of our business operations. The developer of this website is FlowWin.
We understand that privacy is a fundamental right and that transparency about our data practices is essential to earning and maintaining your trust. This document is designed to provide you with a clear and comprehensive understanding of our information handling practices in plain, accessible language. We encourage you to read this policy carefully and to contact us if you have any questions or concerns.
The Company provides computer systems design and related services, operating within the Professional, Scientific, and Technical Services sector. As part of our business, we may process certain categories of personal data from our clients, prospective clients, website visitors, and other stakeholders. This policy applies regardless of the device or method you use to access our services.
Scope of This Policy
This Privacy Policy applies to all personal information we collect through our website, including any subdomains and related landing pages, as well as through our email communications, telephone interactions, client onboarding processes, and any other channel through which you may provide information to us. It also covers data we may receive from third-party sources in connection with our service delivery.
This policy applies to all individuals whose personal data we process, including but not limited to prospective clients, current clients, former clients, website visitors, job applicants, business partners, and vendors. If you are an employee or contractor of the Company, your personal data is governed by separate internal policies that are not covered by this document.
Please note that this policy does not apply to information collected by third-party websites, applications, or services that may link to or be accessible from our website. We are not responsible for the privacy practices of such third parties, and we encourage you to review their respective privacy policies before providing any personal information.
Information We Collect
We collect several categories of information depending on the nature of your interaction with us. The types of personal data we may collect include, but are not limited to, the following categories.
Contact and Identification Information: When you fill out a contact form, request information, or initiate a business relationship with us, we may collect your full name, email address, telephone number, company name, job title, physical mailing address, and any other identifiers you choose to provide.
Professional and Business Information: In the context of our client engagements, we may collect information related to your business, including organizational structure, technology infrastructure details, project requirements, system specifications, business goals, and any documentation or materials you share with us for purposes of service delivery.
Technical and Usage Data: When you visit our website, our servers automatically collect certain technical information. This includes your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages visited, time and date of your visit, time spent on each page, clickstream data, and other diagnostic information. This data is typically aggregated and does not directly identify you.
Communication Data: If you communicate with us via email, telephone, contact forms, or other messaging channels, we may retain copies of those communications, including any information you share within them. We may also collect metadata associated with those communications, such as timestamps and delivery status.
Financial and Transaction Data: If you engage us for paid services, we may collect billing information, including company billing address, tax identification numbers where applicable, and transaction records. We do not directly collect or store full credit card numbers; payment processing is handled by secure third-party payment processors.
How We Collect Information
We collect personal information through a variety of methods and channels, always with the goal of transparency and with your awareness. The primary collection methods are described below.
Direct Collection from You: The majority of the personal data we hold is provided directly by you through voluntary actions. This includes when you fill out and submit our website contact form, when you send us an email message, when you speak with our team members by telephone, when you participate in a consultation or project briefing, when you register for any event we may host, and when you provide information as part of a service engagement.
Automated Collection via Technology: As you navigate our website, certain information is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. These technologies help us understand how visitors use our site, which pages are most useful, and how we can improve the user experience. Detailed information about our use of cookies is provided in the Cookies and Similar Technologies section of this policy.
Collection from Third Parties: In limited circumstances, we may receive information about you from third-party sources. This could include information from publicly available business databases, professional networking platforms, referral partners, or service providers that assist us with business development and market research. When we receive information from such sources, we take reasonable steps to ensure the data was obtained lawfully.
How We Use Your Information
We use the personal information we collect for a range of business purposes, all of which are designed to enable us to deliver our services effectively, communicate with you meaningfully, and operate our business in compliance with applicable laws. The specific purposes for which we use your data are outlined below.
Service Delivery and Client Engagement: Your information is used to provide the computer systems design, systems integration, consulting, and related professional services that you have requested from us. This includes using your data to understand your requirements, develop proposals, design solutions, manage projects, communicate project status, and deliver final work products.
Communication and Customer Support: We use your contact information to respond to your inquiries, provide requested information about our services, send administrative updates related to your engagement, and offer ongoing support. We may also use your information to send you service-related announcements that are necessary for the proper functioning of our business relationship.
Website Improvement and Analytics: The technical and usage data we collect helps us analyze how visitors interact with our website. We use this aggregated and anonymized data to identify areas for improvement, optimize page layouts, enhance navigation, fix technical issues, and ensure our website remains accessible and performant for all users.
Marketing and Business Development: With your consent where required by law, we may use your contact information to send you newsletters, industry insights, case studies, service updates, and information about events or webinars that we believe may be relevant to your interests. You may opt out of marketing communications at any time by using the unsubscribe link provided in each email or by contacting us directly.
Legal Compliance and Protection: We may process your personal data as necessary to comply with applicable laws and regulations, to respond to lawful requests from public authorities, to enforce our terms of service, to protect our rights and property, to prevent fraud or other illegal activities, and to protect the safety and security of our systems, our clients, and the public.
Legal Basis for Data Processing
Where required by applicable data protection laws, we rely on one or more legal bases to process your personal information. The specific basis depends on the nature of the processing activity and your relationship with us.
Contractual Necessity: We process personal data where it is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. This includes processing necessary for us to deliver our services, manage client relationships, and fulfill our obligations under service agreements.
Legitimate Interests: We may process your data where we have a legitimate business interest that is not overridden by your data protection rights. Our legitimate interests include improving our website and services, conducting business development activities, ensuring network and information security, preventing fraud, and managing our business operations efficiently.
Consent: In certain circumstances, we process personal data on the basis of your freely given, specific, informed, and unambiguous consent. This applies particularly to direct marketing communications and to the use of non-essential cookies on our website. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Legal Obligation: We may process your personal data where necessary to comply with a legal obligation to which we are subject, such as tax reporting requirements, regulatory compliance obligations, or court orders and other binding legal demands.
Data Storage and Security
We implement and maintain appropriate technical, administrative, and physical security measures designed to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures are continuously reviewed and updated to address emerging threats and evolving best practices.
Our security measures include, but are not limited to, encryption of data in transit and at rest, firewalls and intrusion detection systems, access controls and authentication mechanisms, regular security assessments and vulnerability scanning, employee training on data protection and confidentiality, and physical security controls at our facilities and data centers.
While we strive to protect your personal information using industry-standard security practices, please understand that no method of electronic storage or transmission over the Internet is completely secure. We cannot guarantee absolute security, but we are committed to taking prompt action in the event of any data breach and to notifying affected individuals and relevant authorities as required by applicable law.
Data Retention Practices
We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period varies depending on the nature of the data and the context in which it was collected.
For client engagement records, we typically retain data for the duration of the client relationship plus a period of seven years following the conclusion of the engagement, to comply with applicable tax, accounting, and legal requirements. For marketing contact information, we retain data until you unsubscribe or opt out, after which your information is removed from our active marketing databases. For website usage analytics, we retain aggregated and anonymized data indefinitely. For data collected through cookies, retention periods are set in accordance with the specific cookie type, as detailed in our cookie consent mechanism.
When the retention period expires, we take steps to securely delete or permanently anonymize your personal data. If secure deletion is not immediately technically feasible, we isolate the data from further processing until deletion can be completed.
International Data Transfers
The Company is based in China and operates globally. As a result, your personal information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.
When we transfer personal data across international borders, we take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include the use of standard contractual clauses approved by relevant regulatory authorities, obtaining your explicit consent for the transfer, relying on adequacy decisions where available, or implementing binding corporate rules for intra-group transfers.
By using our website and services, you acknowledge that your personal information may be transferred to and processed in countries outside your country of residence. If you have questions about the safeguards we use for international data transfers, please contact us using the information provided at the end of this policy.
Your Data Protection Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information. We are committed to respecting and facilitating the exercise of these rights to the extent required by applicable law. The rights that may be available to you include the following.
Right of Access: You have the right to request confirmation of whether we process your personal data and, if so, to obtain a copy of that data along with information about how and why we process it. This enables you to verify the lawfulness of our processing.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. We will make corrections without undue delay upon verifying the accuracy of the new information provided.
Right to Erasure: In certain circumstances, you may request that we delete or remove your personal data where there is no compelling reason for us to continue processing it. This right is sometimes referred to as the right to be forgotten.
Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of data you have contested or while we consider whether our legitimate grounds override your objection to processing.
Right to Data Portability: Where processing is based on consent or a contract and is carried out by automated means, you may request that we provide your personal data to you or to another controller in a structured, commonly used, and machine-readable format.
Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, including for direct marketing purposes. We will comply with your objection unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
To exercise any of these rights, please contact us using the details provided in the Contact Information and Complaints section. We will respond to your request within the timeframes required by applicable law, typically within thirty calendar days. We may need to verify your identity before processing your request.
Privacy for Children
Our website and services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. We take the protection of the privacy of children very seriously, and our practices are designed to comply with applicable laws regarding the online privacy of minors.
If we become aware that a child under the age of 16 has provided us with personal information without verified parental consent, we will take prompt steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately using the contact information provided in this policy so that we can take appropriate action.
We do not engage in targeted advertising directed at children, nor do we knowingly allow third parties to collect personal information from children through our website or services. We encourage parents and guardians to monitor the online activities of their children and to educate them about protecting their personal information online.
Third-Party Services and Links
Our website may contain links to third-party websites, plug-ins, and applications that are not operated or controlled by us. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices or content.
When you leave our website, we encourage you to read the privacy policy of every website you visit. Our inclusion of a third-party link does not imply our endorsement of the linked website or its privacy practices. We recommend that you exercise caution and review the privacy policies of any third-party services before providing your personal information to them.
We may use third-party service providers to display advertisements on our behalf across the Internet. These providers may use cookies and similar technologies to collect information about your visits to our website and other websites in order to provide advertisements about goods and services that may be of interest to you. You can learn more about opting out of interest-based advertising through industry self-regulatory programs such as the Network Advertising Initiative and the Digital Advertising Alliance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or business operations. When we make changes, we will revise the Effective Date and Last Updated date at the top of this page and post the updated policy on our website.
If the changes are material in nature, we will provide additional notice, which may include sending an email notification to registered users, displaying a prominent notice on our website, or obtaining your consent where required by law. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Your continued use of our website and services after the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms, subject to any consent requirements that may apply under applicable law. If you do not agree with the revised policy, you should discontinue use of our website and services.
Contact Information and Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, or if you wish to exercise any of your data protection rights, please contact us using the information below. We take all privacy inquiries seriously and will respond to your communication as promptly as reasonably possible.
Company Name: Macheng Yida Labor Services Co., Ltd. (FlowWin)
Address: No. 11, South Side of Taiwan Street, Yuanlin Community, Longchi Office, Huanggang — 431600, China (CN)
Email: service@flowwin.mom
Phone: +1 (747) 946-2536
Website: https://www.flowwin.mom
If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or place of the alleged infringement. We would, however, appreciate the opportunity to address your concerns before you approach any regulatory authority, and we invite you to contact us first so that we can work toward a satisfactory resolution.
For data protection inquiries specific to European Union or United Kingdom residents, please direct your communications to the email address listed above, and we will route your inquiry to the appropriate internal team for timely handling in accordance with GDPR or UK GDPR requirements, as applicable.