Don't Sell or Share My Personal Information
Do Not Sell or Share
My Personal Information
FlowWells is committed to your privacy. This page explains exactly what personal information we collect, how it is used, and how you can exercise your rights to limit or stop the sharing of your data — including rights under California, Virginia, Colorado, Connecticut, Utah, and other applicable US state privacy laws.
Your Personal Data
Understanding Your Privacy Rights at FlowWells
FlowWells is a US-based direct-to-consumer wellness store headquartered at 1051 148th St W, APT 208, Rosemount, MN 55068. We operate flowwells.com as a Shopify-powered e-commerce store, shipping exclusively within the United States. This page is specifically dedicated to your rights regarding personal information — in particular, your right to direct us not to sell or share your data.
Several US states have enacted comprehensive privacy laws that give consumers specific rights over how businesses handle personal information. These laws include the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), as well as privacy laws in Virginia, Colorado, Connecticut, Utah, Texas, Montana, Oregon, and other states. Where any of these laws apply to you, this page tells you exactly how to exercise your rights.
Under the CCPA and similar state laws, "selling" or "sharing" personal information can include transmitting customer data to third-party advertising platforms, data brokers, or analytics providers in exchange for money or other value — even where no direct monetary payment changes hands. FlowWells uses certain advertising and analytics tools standard to e-commerce operations, and we are transparent about how they work and how you can opt out.
To submit a formal Do Not Sell or Share request, to request deletion of your personal data, or to ask us what information we hold about you, please use the form at the bottom of this page or contact us directly at support@flowwells.com.
Business Information
Rosemount, MN 55068, USA
Privacy Rights You May Exercise at Any Time
Depending on the US state where you reside, you may have one or more of the following rights regarding your personal information. FlowWells honors all rights where legally applicable — and in many cases, we honor them for all customers regardless of state.
Right to Opt Out of Sale or Sharing
You have the right to direct FlowWells not to sell your personal information to third parties and not to share your personal information for cross-context behavioral advertising purposes. This right applies whether or not a direct monetary payment is involved in the data transfer. Submitting this request will instruct us to disable third-party advertising cookies tied to your browser session and to exclude your identifiers from any advertising audience data transmitted to ad platforms. This request does not affect our ability to process your order or provide you with customer support.
CA · VA · CO · CT · UT · TX · OR · MT & All StatesRight to Know What We Collect
You have the right to ask FlowWells to disclose the categories and specific pieces of personal information we have collected about you over the past 12 months. This includes the categories of sources from which the information was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it. You can make this request once per 12-month period at no charge. We will provide a disclosure within 45 days of verifying your identity, with the possibility of a 45-day extension where reasonably necessary.
CA · VA · CO · CT · UT · TX · OR · MTRight to Delete Your Personal Information
You have the right to request that FlowWells delete personal information we have collected from you, subject to certain exceptions. We may deny deletion where the information is necessary to complete a transaction you requested, to detect security incidents, to comply with a legal obligation, or to fulfill other purposes permitted under applicable law. Where we can honor your deletion request, we will also direct our service providers who received your data from us to delete it as well. You will receive confirmation of the outcome of your request.
CA · VA · CO · CT · UT · TX · OR · MTRight to Correct Inaccurate Information
If you believe that personal information FlowWells holds about you is inaccurate, you have the right to request that we correct it. This right applies to identifiable inaccuracies in records such as your name, shipping address, email address, or order history. To request a correction, contact us at support@flowwells.com with your order details and the specific information you believe is incorrect. We will investigate and respond within 45 days. Note that this right does not extend to opinions, assessments, or information derived by FlowWells through its own analysis.
CA (CPRA) · VA · CO · CT · OR · MTRight to Data Portability
You have the right to receive a copy of the personal information you have provided to FlowWells in a portable, readily usable format — to the extent technically feasible. This means you can ask us to provide your order history, account information, and contact details in a structured digital format (such as CSV or PDF) so that you may transmit it to another service if you choose. You may submit one portability request per 12-month period. We will provide this within 45 days of verifying your identity.
CA (CPRA) · VA · CO · CT · OR · MTRight to Non-Discrimination
FlowWells will never discriminate against you for exercising any of your privacy rights. Specifically, we will not: deny you access to our products or services; charge you a different price or rate; provide you a different level or quality of service; suggest that you will receive a different price, rate, or quality of service; or take any retaliatory action against you because you submitted a privacy request. Your right to shop, to receive customer support, and to a full refund under our return policy is in no way affected by any privacy election you make on this page.
All US States — Universal CommitmentWhat Personal Information We Collect & How It Is Used
The table below discloses every category of personal information FlowWells collects, why we collect it, who may receive it, and whether it is sold or shared in a manner that may constitute "sale" or "sharing" under applicable US state privacy law. We are committed to full transparency.
| Category of Personal Information | Examples Collected | Purpose of Collection | Third Parties Receiving This Data | Sold? | Shared for Advertising? |
|---|---|---|---|---|---|
| Identifiers | Name, email address, shipping address, billing address, IP address | Order fulfillment, shipping, fraud prevention, customer support | Shopify (platform), shipping carriers (UPS, USPS, FedEx, DHL) | No | No |
| Payment & Financial Information | Payment card type, last four digits, billing zip code (not full card numbers — never stored by FlowWells) | Processing payment for purchases | Shopify Payments, PayPal, Apple Pay, Google Pay, Shop Pay (PCI-DSS compliant processors) | No | No |
| Commercial & Transaction Information | Products purchased, order amounts, order dates, return history | Order management, refund processing, customer service, legal compliance | Shopify (platform), customer support tools | No | No |
| Internet & Network Activity | Browsing history on flowwells.com, pages viewed, time spent, click patterns, device type, browser type | Site analytics, product improvement, measuring effectiveness of our website | Shopify Analytics, Google Analytics (anonymized) | No | Limited — Opt-Out Available |
| Advertising & Remarketing Identifiers | Browser cookie IDs, ad click identifiers, pixel data collected via Facebook Pixel, Google Ads tag, or similar tools | Measuring ad campaign effectiveness; showing ads to users who have visited our site on third-party platforms | Meta (Facebook/Instagram), Google Ads — only when advertising tools are active | No monetary sale | Yes — Opt-Out Available Below |
| Communications Data | Content of emails, live chat messages, or contact form submissions you send to us | Responding to customer inquiries and resolving support tickets | Email service providers used to deliver and manage support communications | No | No |
| Geolocation Data | General location derived from IP address (state and city level only; no GPS or precise location) | Determining applicable sales tax at checkout; verifying US-only shipping eligibility | Shopify (tax calculation) | No | No |
| Sensitive Personal Information | FlowWells does not intentionally collect sensitive personal information such as health data, race, religion, government IDs, or biometric data. | N/A | N/A | Not Collected | Not Collected |
Note on Advertising Tools: FlowWells may use standard e-commerce advertising pixels (such as the Meta Pixel or Google Ads Conversion Tag) to measure the effectiveness of our advertising campaigns. These tools may transmit certain browsing identifiers to third-party ad platforms, which some privacy laws classify as "sharing" for cross-context behavioral advertising. No monetary payment is made by FlowWells to receive your data in return — these are standard analytics integrations. You may opt out of this type of sharing by submitting a Do Not Sell or Share request using the form below or by activating opt-out signals such as the Global Privacy Control (GPC) in your browser, which flowwells.com is configured to recognize and respect.
Privacy Laws That May Apply to You
Multiple US states have enacted comprehensive consumer privacy laws. Below is a summary of each law and the rights it grants to residents of those states. FlowWells honors all applicable rights and extends best-effort compliance to residents of all US states, even where no specific state law currently mandates it.
California
California residents have the most comprehensive US privacy rights, including: the right to know, delete, correct, and obtain a portable copy of personal information; the right to opt out of sale and sharing; the right to limit use of sensitive personal information; and the right to non-discrimination. The California Privacy Protection Agency (CPPA) enforces these rights. FlowWells recognizes the Global Privacy Control (GPC) opt-out signal. To exercise California rights, use the form below or email support@flowwells.com.
Virginia
Under the Virginia Consumer Data Protection Act, Virginia residents have the right to access, correct, delete, and obtain a portable copy of personal data. Virginia residents also have the right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. FlowWells will respond to Virginia consumer requests within 45 days, with the option to extend up to 45 additional days upon notice to the consumer.
Colorado
The Colorado Privacy Act grants Colorado residents rights to access, correct, delete, and obtain a portable copy of their personal data. Colorado consumers may opt out of targeted advertising, sale of personal data, and profiling. Uniquely, Colorado law requires FlowWells to recognize universal opt-out mechanisms, including the Global Privacy Control (GPC). FlowWells honors GPC signals from Colorado residents automatically. Requests must be responded to within 45 days, extendable once by 45 days with notice.
Connecticut
The Connecticut Data Privacy Act provides Connecticut residents with rights to access, correct, delete, and obtain a portable copy of personal data. Connecticut consumers may opt out of the sale of personal data, targeted advertising, and profiling for solely automated decisions. Connecticut law also requires recognition of universal opt-out signals (GPC). A 60-day cure period applies before the Attorney General can bring an enforcement action. FlowWells processes Connecticut privacy requests within 45 days of receipt and identity verification.
Utah
The Utah Consumer Privacy Act gives Utah residents the right to access and obtain a copy of their personal data, the right to delete personal data provided by or obtained about the consumer, the right to data portability, and the right to opt out of the sale of personal data and targeted advertising. Utah's law has narrower applicability thresholds than some other state laws, but FlowWells extends Utah residents full opt-out rights. Requests must be responded to within 45 days, extendable by an additional 45 days with notice.
Texas
The Texas Data Privacy and Security Act grants Texas residents rights to access, correct, delete, and obtain a portable copy of their personal data. Texas consumers may also opt out of the sale of personal data and processing for targeted advertising or profiling. Texas enforces its law through the Texas Attorney General's Office, with a 30-day cure period for violations. FlowWells honors Texas resident rights upon verified request and responds within 45 calendar days.
Montana
Montana's privacy law grants Montana residents rights to access, correct, delete, and obtain a portable copy of personal data. Montana consumers may opt out of the sale of personal data, targeted advertising, and profiling. Montana requires recognition of universal opt-out signals. FlowWells extends full privacy rights to Montana consumers and responds to verified requests within 45 days, extendable by an additional 45 days with advance notice of the extension.
Oregon
Oregon's Consumer Privacy Act grants Oregon residents rights to access, correct, delete, and obtain a portable copy of personal data, along with a list of specific third parties to whom their data has been disclosed. Oregon consumers may opt out of targeted advertising, sale, and profiling. Oregon law has one of the broadest definitions of "sale" among US state privacy laws. FlowWells responds to Oregon consumer requests within 45 days, with a possible 45-day extension with prior notice to the consumer.
All Remaining US States
Additional US states including Delaware (DPDPA — Jan 1, 2025), Iowa (ICDPA — Jan 1, 2025), Indiana (IDCPA — Jan 1, 2026), Tennessee (TIPA — July 1, 2025), New Hampshire (NHPDA — Jan 1, 2025), and New Jersey (NJDPA — Jan 15, 2025) have enacted or are enacting privacy laws. FlowWells monitors developments in all US states and extends opt-out rights to all US residents as a matter of policy, regardless of whether your state has yet enacted a comprehensive privacy law. Contact us to exercise any of the rights described on this page.
Three Ways to Exercise Your Privacy Rights
Submitting a privacy rights request is simple. You may use any of the following methods. All requests require identity verification before we act on them — this protects you from unauthorized changes to your account.
Submit the Form Below
Use the privacy request form on this page to submit your request. Select your request type, verify your identity with your order email, and we will process it within 45 days.
Email Us Directly
Send an email to support@flowwells.com with the subject line "Privacy Rights Request." Include your full name and the email address associated with your order.
Use Your Browser's GPC Signal
If your browser sends a Global Privacy Control (GPC) opt-out signal, flowwells.com is configured to automatically detect and honor it as a valid Do Not Sell or Share instruction.
Privacy Rights Request Form
Use this form to submit a formal Do Not Sell or Share request, a deletion request, an access request, or any other privacy rights request. All submissions are treated confidentially. We will verify your identity before taking any action and respond within 45 calendar days.
Submit Your Privacy Rights Request
All fields marked with an asterisk (*) are required. Your submission is secure and confidential.
This must match the email address used at the time of purchase so we can verify your identity.
By submitting this form, your request will be logged and reviewed by the FlowWells team. We may contact you at the email address you provided to verify your identity before taking action. All requests are handled in accordance with our Privacy Policy.
Request Submitted Successfully
Thank you. We have received your privacy rights request and will verify your identity and respond within 45 calendar days. Please check the inbox of the email address you provided for a confirmation message from support@flowwells.com.
What Happens After You Submit a Request
We want the process of exercising your privacy rights to be as clear and stress-free as possible. Here is exactly what happens after you submit a request to FlowWells.
Identity Verification
We will verify your identity by matching the name and email address you provide against our order records. For deletion and data access requests, we may ask for one additional piece of identifying information, such as your order number or the shipping address on a recent order. We take verification seriously to protect you from unauthorized requests made in your name. We will never ask for sensitive identifiers such as your Social Security number or financial account details.
Response Timeline
FlowWells will respond to all verified privacy rights requests within 45 calendar days of receipt. Where a request is complex or where we receive a high volume of requests, we may extend our response time by up to an additional 45 calendar days. If we need an extension, we will notify you of the extension and the reason for it within the initial 45-day period. All responses will be provided free of charge, unless a request is manifestly unfounded or excessive.
What Happens to Your Data
If you submit a Do Not Sell or Share request, we will immediately flag your account to exclude your identifiers from any advertising audience data transfers going forward. If you submit a deletion request and we verify it and approve it, we will delete your personal information from our active systems and instruct our service providers to delete it from theirs. We may retain certain records as required by law — for example, transaction records for tax compliance purposes — but these will not be used for marketing or advertising.
Authorized Agents
You may designate an authorized agent to submit a privacy rights request on your behalf. If you use an authorized agent, we may require you to: (a) provide the authorized agent with signed written permission to submit the request; and (b) verify your own identity directly with FlowWells. We may deny a request from an authorized agent who does not submit proof of authorization. These requirements are in place to protect consumers from fraudulent requests submitted by third parties without your knowledge or consent.
How to Appeal a Denial
If FlowWells denies your privacy rights request in whole or in part, we will provide you with a written explanation of the reason for the denial within the applicable response period. If you believe our denial was in error, you may appeal by sending an email to support@flowwells.com with the subject line "Privacy Request Appeal" and a description of why you believe the denial should be reconsidered. We will respond to appeals within 60 days. If your appeal is denied, certain state laws allow you to submit a complaint to your state's Attorney General office.
Policy Updates
FlowWells will update this page when our data practices change or when additional US state privacy laws take effect. The effective date at the top of this page reflects when the page was last meaningfully updated. We encourage you to review this page periodically. If changes to our data practices materially affect your privacy rights, we will take reasonable steps to notify you — for example, via email to the address associated with your account — prior to the changes taking effect. Your continued use of flowwells.com following any update constitutes acceptance of the updated terms.
Questions About Your Privacy Rights?
Our team in Rosemount, Minnesota is available to answer your privacy questions, help you understand your rights, or assist you with submitting a request. Reach us at support@flowwells.com or through our Contact Us page. We respond within one business day, Monday through Friday, 9:00 AM to 6:00 PM Central Standard Time.