Cookie Policy
FlowWells Cookie Policy
& Tracking Disclosures
This page explains exactly what cookies and tracking technologies flowwells.com uses, why each one exists, how long it lasts, and what controls you have as a visitor — including your rights under applicable US state privacy laws.
Covered
Platform
Rights
Compliant
A cookie is a small text file that a website places on your computer, tablet, smartphone, or other internet-connected device when you visit that site. Cookies are stored locally on your device and are sent back to the originating website each time you return, or to any other website that recognizes that cookie.
Cookies are not programs and cannot carry viruses or install software on your device. They cannot access other files on your hard drive. A cookie contains only the information that is placed into it by the website — nothing more.
Temporary cookies that exist only for the duration of your visit to the Site and are automatically deleted when you close your browser. They allow the Site to link your actions during a single browsing session — for example, keeping items in your shopping cart as you browse.
Cookies that remain on your device for a specified period of time (or until you delete them). They allow the Site to recognize you on return visits, remember your preferences, and provide a more consistent experience across sessions.
In addition to traditional cookies, we and our third-party service providers may also use web beacons (also known as pixel tags or clear GIFs), local storage objects, and JavaScript tracking to collect information about your interactions with the Site. These technologies function similarly to cookies and are covered by this Cookie Policy.
First-party cookies are set directly by flowwells.com. Third-party cookies are set by external services — such as Shopify, Google, PayPal, or other analytics and payment providers — whose technology operates on our Site. Both types are disclosed in this policy.
FlowWells uses flowwells.com as a direct-to-consumer Shopify store. Cookies and similar technologies are an integral part of how this type of e-commerce platform operates. We use them for the following core purposes:
- Essential store operation: To allow the shopping cart to function, to process secure checkout transactions, to maintain your session as you navigate between pages, and to prevent fraud during payment processing.
- Performance and analytics: To understand how visitors interact with our Site — which pages are viewed most, how long visitors stay, where they come from, and what actions they take — so we can improve the experience for future customers.
- Functional preferences: To remember choices you make — such as your region, currency, or previously viewed products — so you do not have to re-enter them each visit.
- Payment processing: Our payment providers (including Shopify Payments, PayPal, Apple Pay, and Google Pay) use cookies and scripts to verify transactions, prevent fraudulent activity, and enable express checkout features.
- Marketing and advertising: To help us understand the effectiveness of any advertising we run and to show relevant advertisements on other platforms to people who have previously visited our Site, where applicable. You have the right to opt out of this use.
- Security: To protect the Site and its users from malicious bots, fraudulent transactions, and unauthorized access attempts.
FlowWells operates a single-product wellness e-commerce store. We do not use cookies to build large-scale advertising profiles, sell your data to data brokers, or track your behavior across unaffiliated websites beyond what is standard for Shopify's platform and the analytics/payment tools described in this policy. If you have questions about how a specific cookie is used, contact us at support@flowwells.com.
Six Types of Cookies We Use
Each category below explains what type of cookie it is, what it does on our Site, and whether it is required for the Site to function or optional for you to accept.
Strictly Necessary
These cookies are essential for the Site to function. They enable core features like the shopping cart, secure checkout, session management, and fraud prevention. Disabling these cookies would prevent the Site from working properly. They do not require your consent to be set.
Functional
These cookies remember choices you make to provide a more personalized experience. Examples include remembering your preferred currency (USD), country/region selection, and previously viewed product pages. Without these, some personalization features will not persist between visits.
Analytics & Performance
These cookies help us understand how visitors use the Site by collecting information about page views, time on site, traffic sources, and navigation paths. The data is aggregated and anonymized; it is not used to identify you personally. This information helps us improve the Site's design and content.
Marketing & Advertising
These cookies are used to track visitors across websites so that relevant advertisements can be shown on other platforms (such as social media or search engines). They help measure the effectiveness of our marketing campaigns. You have the right to opt out of these cookies at any time.
Preference & Personalization
These cookies track products you have viewed, items added to your wishlist or cart, and your browsing history within the Site. They allow us to show you relevant products and ensure your cart contents are preserved between sessions. They operate only within flowwells.com.
Third-Party Service Cookies
These are cookies set by external service providers whose technology is embedded in our Site, including Shopify's platform infrastructure, payment processors (PayPal, Stripe, Apple Pay, Google Pay), and analytics tools. Each provider's data practices are governed by their own privacy policies, links to which are provided below.
The table below lists the specific cookies used on flowwells.com, their category, duration, and purpose. This list reflects the cookies present on the Site at the time of this policy's last update. Because FlowWells operates on Shopify's platform, the exact set of cookies may vary slightly based on Shopify's infrastructure updates.
| Cookie Name | Provider | Category | Duration | Purpose |
|---|---|---|---|---|
| _shopify_session | Shopify | Essential | Session | Maintains your shopping session, keeps cart items intact, and enables checkout functionality throughout your visit. |
| _shopify_y | Shopify | Analytics | 1 year | Tracks unique visitor identity for Shopify analytics. Helps distinguish new vs. returning visitors and understand overall traffic patterns. |
| _shopify_tm | Shopify | Analytics | 30 minutes | Short-duration tracking for Shopify internal analytics. Captures session start times and activity windows. |
| _shopify_fs | Shopify | Analytics | 1 year | Records the date and time of the visitor's first session on the Site. Used to calculate how long a customer has been visiting the store. |
| cart | Shopify | Essential | 2 weeks | Stores the contents of your shopping cart so your selections are preserved between visits and browser sessions. |
| cart_sig | Shopify | Essential | 2 weeks | A security cookie that verifies the integrity of the cart data to prevent unauthorized cart manipulation. |
| cart_ts | Shopify | Essential | 2 weeks | Timestamps the cart cookie to track when items were added and enforce cart expiry logic. |
| secure_customer_sig | Shopify | Essential | 20 years | If you create a customer account, this cookie securely identifies your account to maintain login status between visits. |
| _ab | Shopify | Analytics | 2 years | Used by Shopify for internal A/B testing experiments to optimize platform performance. No personal data is collected. |
| _shopify_ga | Shopify / Google | Analytics | 2 years | Links Shopify analytics with Google Analytics data when both are active. Used to understand traffic sources and conversion pathways. |
| _ga | Google Analytics | Analytics | 2 years | Google Analytics primary cookie. Distinguishes users by assigning a randomly generated client ID. Data is used in aggregate and anonymized form to analyze Site traffic and behavior. |
| _gid | Google Analytics | Analytics | 24 hours | Google Analytics session cookie. Used to distinguish users within a single day for reporting purposes. |
| _gat | Google Analytics | Analytics | 1 minute | Used to throttle the request rate to Google Analytics — prevents excessive data logging during high-traffic periods. |
| keep_alive | Shopify | Essential | 2 weeks | Maintains your customer session during checkout to prevent session timeout while you complete payment details. |
| checkout_token | Shopify | Essential | 1 year | Stores a unique token for the checkout process to ensure your order is correctly processed and to prevent duplicate orders. |
| XSRF-TOKEN | Shopify | Essential | Session | A security cookie that prevents cross-site request forgery (CSRF) attacks during form submissions, including checkout and account actions. |
| NID / ANID | Google Pay | Third-Party | 6 months | Used by Google Pay to enable express checkout functionality and remember your Google account preference for payment. Governed by Google's Privacy Policy. |
| ts / ts_c | PayPal | Third-Party | 3 years / Session | PayPal security and fraud prevention cookies used during payment processing. They help PayPal verify your identity during the checkout flow. Governed by PayPal's Privacy Policy. |
| enforce_policy | Shopify | Essential | 1 year | Stores your cookie consent preferences so the Site respects your choices on return visits without asking again unnecessarily. |
| localization | Shopify | Functional | 1 year | Stores your selected country/region and currency (USD for US customers) so you do not need to reselect it each visit. |
This table represents known cookies at the time of this policy's last update. Shopify may add or modify platform cookies as part of routine infrastructure updates. For the most current list of Shopify cookies, visit shopify.com/legal/cookies.
FlowWells operates on Shopify Inc., a leading e-commerce platform headquartered at 151 O'Connor Street, Ground Floor, Ottawa, Ontario, Canada K2P 2L8. Because flowwells.com is built on Shopify's infrastructure, a number of cookies are set automatically by the platform to enable core store functionality. These cookies are integral to running any Shopify-powered store.
Shopify's cookies power the following critical features on flowwells.com:
- Shopping cart persistence: Ensuring your cart is preserved when you navigate between pages or return to the Site later
- Secure checkout: Maintaining a secure, encrypted checkout session as you enter payment and shipping information
- Fraud prevention: Shopify uses cookies and device fingerprinting to detect and block fraudulent transactions, protecting both buyers and the store
- Customer account authentication: If you create a FlowWells customer account, Shopify sets cookies to keep you securely logged in between visits
- Store performance analytics: Shopify collects aggregate data about how visitors interact with the store to help Shopify improve its platform
- Platform security: CSRF protection tokens, session validation, and other security mechanisms are implemented through Shopify cookies
Shopify acts as a data processor on behalf of FlowWells. Shopify's own data practices — including how it uses data collected through its platform cookies — are governed by Shopify's Privacy Policy, available at shopify.com/legal/privacy, and its Cookie Policy at shopify.com/legal/cookies. FlowWells has a Data Processing Agreement (DPA) with Shopify in accordance with applicable data protection standards.
The following third-party services operate on flowwells.com and may set their own cookies or use other tracking technologies. Each provider's data practices are governed by its own privacy policy. FlowWells discloses each provider and links to their privacy documentation below so you can make informed choices.
Google Analytics (Google LLC)
Google Analytics is used to collect anonymized, aggregate data about how visitors use the Site — including page views, session duration, geographic region (state/country level only), device type, and traffic sources. We have enabled IP anonymization, meaning the last octet of your IP address is masked before data is sent to Google. Google Analytics does not allow us to identify you as an individual. Data collected is retained for 26 months.
Privacy Policy: policies.google.com/privacy — Opt out: Google Analytics Opt-Out Browser Add-On
PayPal (PayPal Holdings, Inc.)
When you choose PayPal as a payment method at checkout, PayPal's scripts and cookies are loaded to authenticate your PayPal account, verify your identity, and process the transaction securely. PayPal may set cookies to recognize your device, prevent fraud, and enable features like PayPal Express Checkout. FlowWells does not have access to your PayPal account credentials or your full card number.
Privacy Policy: paypal.com privacy policy
Google Pay (Google LLC)
If you use Google Pay at checkout, Google's payment scripts are executed to authenticate your Google account and process your payment. Google may set cookies for identity verification and fraud prevention purposes.
Privacy Policy: policies.google.com/privacy
Apple Pay (Apple Inc.)
Apple Pay transactions are processed entirely within Apple's secure infrastructure. Apple may use device-level identifiers for authentication. No Apple Pay transaction data is stored by FlowWells beyond what is needed to fulfill your order.
Privacy Policy: apple.com/legal/privacy
Shop Pay (Shopify Inc.)
Shop Pay is Shopify's accelerated checkout option. If you use Shop Pay, Shopify may set cookies to remember your shipping and payment details across Shopify-powered stores to enable faster future checkouts.
Privacy Policy: shopify.com/legal/privacy
Once you interact with a third-party service embedded on our Site (such as clicking "Pay with PayPal"), that provider's own cookies and tracking technologies are governed entirely by that provider's privacy policy. FlowWells cannot control or disable those third-party cookies directly. To limit third-party cookies, please use your browser settings or the opt-out tools provided by each service provider above.
You have a number of ways to control or limit how cookies are used when you visit flowwells.com. Below we explain each option clearly, along with what impact it may have on your experience.
1. Strictly Necessary Cookies — Cannot Be Disabled
Strictly necessary cookies are required for the Site to work. They include cookies that power the shopping cart, the checkout process, session security, and fraud prevention. These cookies cannot be disabled via a cookie preference center. If you disable them through your browser, core Site functions — including the ability to purchase products — will not work. FlowWells does not require consent to set these cookies under US law because they are functionally necessary to deliver the service you have requested by visiting the Site.
2. Optional Cookies — Managed via Browser Settings
All optional cookies (functional, analytics, marketing, and preference cookies) can be controlled through your browser settings. See Section 8 for browser-specific instructions. Disabling optional cookies will not prevent you from browsing or purchasing on the Site, but some features — such as cart persistence across sessions and personalized product recommendations — may not work as intended.
3. Google Analytics — Direct Opt-Out
You can prevent Google Analytics from collecting data about your visits by installing the Google Analytics Opt-Out Browser Add-On, available at no cost from Google. Once installed, the add-on prevents Google Analytics data from being sent to Google for any website you visit.
4. Interest-Based Advertising Opt-Out
If any marketing or advertising cookies are in use, you may opt out of interest-based advertising from participating companies through the Digital Advertising Alliance (DAA) opt-out tool at optout.aboutads.info, or through the Network Advertising Initiative (NAI) opt-out tool at optout.networkadvertising.org. Note that opting out through these tools does not remove cookies from your browser — it prevents participating companies from using your data for targeted advertising.
5. California Residents — Additional Opt-Out Rights
California residents have the right to opt out of the "sale" or "sharing" of personal information, including information collected through certain cookies, under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Exercise this right by visiting our Do Not Sell or Share My Personal Information page or by contacting us at support@flowwells.com.
If you disable optional cookies, you can still browse and purchase from flowwells.com. Your cart will still work during your active session. However, your cart may not be saved between browser sessions, personalized product recommendations will not appear, and we will be less able to optimize the Site experience based on how visitors use it. Core checkout functionality is unaffected by disabling optional cookies.
Managing Cookies in Your Browser
You can delete or block cookies directly through your browser settings. Below are instructions for the most widely used browsers. Clicking a browser name will take you to that browser's official support page.
Google Chrome
Settings → Privacy and Security → Cookies and other site data. You can block all cookies, block third-party cookies only, or clear all existing cookies.
Mozilla Firefox
Settings → Privacy & Security → Cookies and Site Data. Firefox offers Standard, Strict, or Custom cookie blocking. You can also use Enhanced Tracking Protection.
Apple Safari
Preferences → Privacy → Manage Website Data. Safari's Intelligent Tracking Prevention (ITP) blocks many third-party cookies by default. You can remove stored data per site.
Microsoft Edge
Settings → Cookies and site permissions → Cookies and site data. Edge offers Basic, Balanced, or Strict tracking prevention. You can block or allow cookies per site.
iPhone / iPad (iOS Safari)
Settings → Safari → Privacy & Security → Block All Cookies. You can also clear cookies and website data under Settings → Safari → Clear History and Website Data.
Android (Chrome)
Chrome menu → Settings → Privacy and security → Clear browsing data. You can clear cookies and site data for all time or a selected time range on Android devices.
Do Not Track (DNT) is a signal that some browsers can send to websites requesting that the site not track the user's browsing activity. Currently, there is no universally accepted technical standard for how websites must respond to DNT signals, and most third-party analytics and advertising networks do not alter their data collection practices in response to DNT signals.
At this time, flowwells.com does not alter its data collection practices in response to browser-level Do Not Track signals, because no industry-wide standard for DNT responses has been established that ensures consistent and effective implementation.
Global Privacy Control (GPC) is a newer, legally recognized signal in certain US states — most notably California under the CPRA, and Colorado under the Colorado Privacy Act — that signals a user's preference to opt out of the sale or sharing of their personal data. Unlike DNT, GPC has specific legal force in participating states.
FlowWells respects GPC signals from California and Colorado residents in accordance with the requirements of the CPRA (Cal. Civ. Code § 1798.135) and Colorado Privacy Act. If your browser is configured with a valid GPC signal and you are visiting from California or Colorado, we treat this as a valid opt-out request for the sale or sharing of your personal information. You do not need to take additional steps. You can enable GPC in supported browsers and privacy-focused browsers such as Brave, Firefox (with extension), or DuckDuckGo's browser.
FlowWells's website and products are intended exclusively for adults aged 18 and over. We do not knowingly market to, collect personal information from, or set tracking cookies for children under the age of 13 (or under the age of 16 in states where a higher age threshold applies).
The Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.) prohibits the collection of personal information from children under age 13 without verifiable parental consent. FlowWells does not operate any portion of the Site directed at children, does not knowingly collect data from children, and does not serve targeted advertising to children.
If you believe that a child under 13 has provided personal information to FlowWells or that cookies have been set on a device primarily used by a child under 13, please contact us immediately at support@flowwells.com with the subject line "COPPA Request." We will promptly investigate and delete any such data.
If you are a parent or guardian and are concerned about cookies or tracking technologies on a shared device used by your child, we recommend using your browser's parental controls and cookie management settings, or using a dedicated browser profile for your child with appropriate privacy settings enabled. See Section 8 for browser-by-browser instructions.
Your Rights Under US State Privacy Laws
Cookie-related privacy rights vary by state. Below we detail your specific rights under each state's current privacy law as it relates to cookies, tracking technologies, and data collected through them. Click any state to expand.
Applicable Laws: California Consumer Privacy Act (CCPA, Cal. Civ. Code § 1798.100–1798.199) as amended by the California Privacy Rights Act (CPRA, Prop. 24, effective January 1, 2023). Enforced by the California Privacy Protection Agency (CPPA).
Your Rights Regarding Cookies:
- Right to Know: You have the right to know what categories of personal information (including data collected via cookies) we collect, the purposes for which it is used, and with whom it is shared.
- Right to Delete: You may request that we delete personal information collected through cookies, subject to certain exceptions (e.g., data needed to complete a transaction or comply with legal obligations).
- Right to Opt Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of personal information — including sharing of cookie-derived data with advertising networks — via our Do Not Sell or Share My Personal Information page or by sending a GPC signal.
- Right to Correct: You may request correction of inaccurate personal information we hold about you.
- Right to Limit Use of Sensitive Personal Information: California residents may limit the use of certain sensitive personal data. FlowWells does not collect sensitive personal information as defined under the CPRA through cookies.
- Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA rights.
How to Exercise: Email support@flowwells.com with subject "CCPA Request" or visit our Do Not Sell page. We respond within 45 days, with a possible 45-day extension. Requests are free of charge (up to twice per 12-month period).
Authorized Agents: You may use an authorized agent to submit requests on your behalf with proper written authorization or power of attorney.
Applicable Law: Colorado Privacy Act (CPA, C.R.S. § 6-1-1301 et seq.), effective July 1, 2023. Enforced by the Colorado Attorney General.
Colorado residents have the following rights in relation to personal data collected through cookies and tracking technologies on flowwells.com:
- Right to Access: Confirm whether we process personal data about you and request a copy of that data in a portable format.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Delete: Request deletion of personal data we collected about you, including cookie-derived data.
- Right to Opt Out of Targeted Advertising: Opt out of the processing of personal data for targeted advertising purposes.
- Right to Opt Out of Sale: Opt out of the sale of personal data.
- Right to Opt Out via GPC: FlowWells honors valid Global Privacy Control signals from Colorado residents as an opt-out of targeted advertising and sale.
How to Exercise: Email support@flowwells.com with subject "Colorado Privacy Request." We respond within 45 days (extendable by 45 days with notice). You have 45 days to appeal a denied request.
Applicable Law: Virginia Consumer Data Protection Act (VCDPA, Va. Code § 59.1-571 et seq.), effective January 1, 2023.
Virginia consumers have the following rights with respect to personal data collected through cookies on flowwells.com:
- Right to Access: Confirm whether we process personal data about you and obtain a copy.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Delete: Request deletion of personal data you provided to us or that we collected about you.
- Right to Data Portability: Obtain a portable copy of personal data you provided to us in a readily usable format.
- Right to Opt Out of Targeted Advertising: Opt out of processing personal data for targeted advertising or profiling that produces significant legal effects.
- Right to Opt Out of Sale: Opt out of the sale of personal data to third parties.
How to Exercise: Submit requests to support@flowwells.com with subject "Virginia VCDPA Request." We respond within 45 days (extendable by 45 days). You may appeal a denial within a reasonable time. If your appeal is denied, you may contact the Virginia Attorney General.
Applicable Law: Connecticut Data Privacy Act (CTDPA, Pub. Act 22-15), effective July 1, 2023.
Connecticut residents have rights substantially similar to those under the Colorado Privacy Act, including the right to access, correct, delete, and obtain a portable copy of personal data. Residents may also opt out of processing for targeted advertising and the sale of personal data.
Uniquely, Connecticut's law provides opt-out rights for profiling that produces "solely automated" decisions with legal or similarly significant effects. FlowWells does not engage in automated profiling for decision-making purposes.
How to Exercise: Email support@flowwells.com with subject "Connecticut CTDPA Request." We respond within 45 days (extendable by 45 days). An appeal process is available if your request is denied.
Applicable Law: Texas Data Privacy and Security Act (TDPSA, Tex. Bus. & Com. Code § 541), effective July 1, 2024.
Texas consumers have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling for significant decisions. Controllers must respond to consumer requests within 45 days.
The Texas Attorney General has exclusive enforcement authority over the TDPSA. There is no private right of action for individual consumers under this law.
How to Exercise: Email support@flowwells.com with subject "Texas TDPSA Request." We respond within 45 days (extendable by 45 days with notice). An internal appeal process is available.
Applicable Law: Montana Consumer Data Privacy Act (MCDPA, S.B. 351), effective October 1, 2024.
Montana residents have the right to confirm whether their personal data (including cookie-derived data) is being processed, to access and obtain a copy of that data, to correct inaccuracies, and to delete personal data. Residents may also opt out of targeted advertising and the sale of personal data. The Montana Attorney General enforces this law; there is no private right of action.
How to Exercise: Email support@flowwells.com with subject "Montana MCDPA Request." We respond within 45 days (extendable by 45 days).
Applicable Law: Oregon Consumer Privacy Act (OCPA, S.B. 619), effective July 1, 2024. Oregon's law applies to a broader set of businesses than many other state privacy laws.
Oregon residents have the right to access, correct, delete, and port their personal data. The OCPA also grants the right to opt out of targeted advertising, sale of personal data, and profiling for significant decisions. Oregon's law includes a list of recognized universal opt-out mechanisms (including GPC), which FlowWells honors for Oregon residents.
How to Exercise: Email support@flowwells.com with subject "Oregon OCPA Request." Response time is 45 days (extendable by 45 days).
Applicable Laws: Washington Consumer Protection Act (CPA, RCW 19.86) and the Washington My Health MY Data Act (HB 1155), effective March 31, 2024 for most entities.
Washington's My Health MY Data Act imposes specific requirements around the collection and sharing of "consumer health data" — defined broadly to include any personal information that identifies a consumer's past, present, or future physical or mental health status. FlowWells does not knowingly collect consumer health data through cookies.
Under the CPA, Washington residents are protected from unfair or deceptive trade practices. The Washington Attorney General and consumers (in limited circumstances) may bring claims for violations. Washington consumers may also exercise data subject rights by contacting us directly.
How to Exercise: Email support@flowwells.com with subject "Washington Privacy Request."
Applicable Law: Minnesota Consumer Data Privacy Act (MNDPA, S.F. 2 / H.F. 4), effective July 31, 2025. FlowWells is headquartered in Rosemount, Minnesota and takes compliance with Minnesota's law especially seriously.
Minnesota residents have the right to access personal data (including data collected via cookies), correct inaccuracies, delete personal data, and obtain a portable copy. The MNDPA also grants the right to opt out of targeted advertising, sale of personal data, and profiling for significant automated decisions.
A notable feature of the MNDPA is the requirement for controllers to document and retain records of data processing activities. Minnesota consumers may also appeal a denied request to the Minnesota Attorney General. The MNDPA includes a private right of action for injunctive relief in certain circumstances.
How to Exercise: As a Minnesota-based company, we make it especially easy for Minnesota residents to exercise their rights. Email support@flowwells.com with subject "Minnesota MNDPA Request," or visit our Contact Us page. We respond within 45 days (extendable by 45 days).
Applicable Law: Iowa Consumer Data Protection Act (ICDPA, S.F. 262), effective January 1, 2025.
Iowa consumers have rights to access, delete, and obtain a portable copy of personal data. Iowa residents may also opt out of the sale of personal data and targeted advertising. Unlike some other states, the ICDPA does not provide a general right to correct personal data. Enforcement is by the Iowa Attorney General only; there is no private right of action.
How to Exercise: Email support@flowwells.com with subject "Iowa ICDPA Request." We respond within 90 days.
Applicable Law: Indiana Consumer Data Protection Act (INCDPA, S.E.A. 5), effective January 1, 2026.
Indiana consumers have rights to access, correct, delete, and port personal data, as well as to opt out of processing for targeted advertising, sale of personal data, and profiling for significant automated decisions. The Indiana Attorney General enforces the law. FlowWells honors these rights for Indiana residents.
How to Exercise: Email support@flowwells.com with subject "Indiana INCDPA Request." We respond within 45 days (extendable by 45 days).
Residents of all other US states — including Alabama, Alaska, Arizona, Arkansas, Florida, Georgia, Hawaii, Idaho, Illinois, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Utah, Vermont, West Virginia, Wisconsin, and Wyoming — retain full protections under applicable federal law.
Federal protections that apply to all US residents include:
- FTC Act (15 U.S.C. § 45) — prohibits unfair or deceptive acts in commerce, including misleading privacy representations
- Children's Online Privacy Protection Act (COPPA) — protects children under 13 from unauthorized data collection
- Electronic Communications Privacy Act (ECPA) — governs interception of electronic communications
- Computer Fraud and Abuse Act (CFAA) — prohibits unauthorized access to computer systems
Additionally, several of these states have their own consumer protection statutes that may provide independent rights. Notable examples include Nevada's Privacy of Information Collected on the Internet from Consumers Act (NRS Chapter 603A), New York's SHIELD Act and proposed NYPA, Utah's Consumer Privacy Act (UCPA, effective December 31, 2023), and Florida's Digital Bill of Rights (effective July 1, 2024).
If you reside in any state and wish to exercise data rights, contact us at support@flowwells.com and we will respond in good faith.
FlowWells reviews and updates this Cookie Policy periodically — at minimum once per year, and whenever there is a material change to the cookies we use, the third-party providers we work with, or applicable US law. The effective date of the most recent revision is shown at the top of this page and in the section below.
When we make a material change to this Cookie Policy — such as adding a new category of cookies, engaging a new third-party analytics provider, or changing how we respond to consumer opt-out requests — we will notify you by updating the "Last Updated" date on this page and by posting a notice on the homepage of flowwells.com for a reasonable period following the change.
For non-material changes (such as correcting typographical errors, updating broken links, or clarifying existing practices without changing them), we will update the "Last Updated" date without additional notice.
We encourage you to check this page periodically if you are concerned about how your data is handled through cookies. Continued use of the Site after the effective date of any revised Cookie Policy constitutes your acknowledgment of those changes.
If you have any questions about this Cookie Policy, wish to exercise a state privacy right, want to know exactly which cookies are currently set on your browser, or wish to opt out of any non-essential data processing, please contact us:
FlowWells
1051 148th St W, APT 208
Rosemount, MN 55068
United States
Email: support@flowwells.com
Contact Form: flowwells.com/pages/contact-us
Do Not Sell Page: flowwells.com/pages/dont-sell-or-share-my-personal-information
Support Hours: Monday–Friday, 9:00 AM–6:00 PM CST (GMT-06:00)
Have Questions About Our Cookie Practices?
Our support team is happy to explain exactly what cookies are active on your device when you visit our Site, walk you through opt-out steps, or help you submit a state privacy rights request. Reach us at support@flowwells.com or through our Contact Form. We respond within one business day, Monday–Friday, 9 AM–6 PM CST.
Complete Policy Library — FlowWells
This Cookie Policy is part of FlowWells's full suite of legal and compliance documentation. All policies are publicly available and written in plain language.