Flow Mineral Spring Water (“Flow,” “we,” “our,” or “us”) is committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.

Personal information means any information about an identifiable individual. This may include your name, email address, mailing and billing address, phone number, purchase history, payment details, marketing preferences, IP address, device information, and browsing activity.

We collect personal information when you place an order, create an account, subscribe to emails, enter a promotion, complete a survey, contact us, or otherwise interact with our website. We also collect certain information automatically through cookies and similar technologies to improve website performance, analyze traffic, personalize content, and support advertising efforts.

We use personal information for purposes that are reasonable and necessary in the circumstances, including processing orders, delivering products, providing customer service, communicating with you, administering promotions, improving our products and website, conducting analytics, preventing fraud, and complying with legal obligations. With your consent, we may also send marketing communications about Flow products and promotions.

In accordance with CASL, we send commercial electronic messages only where we have obtained your express consent or where permitted by law due to an existing business relationship. All marketing emails include identification of Flow and a clear unsubscribe mechanism. You may withdraw your consent to receive marketing communications at any time.

By providing your personal information, you consent to its collection, use, and disclosure as described in this Policy. Where required, including for sensitive personal information, we obtain express consent. You may withdraw your consent at any time, subject to legal or contractual restrictions.

We do not sell personal information. We may share personal information with trusted third-party service providers who assist us with payment processing, order fulfillment, shipping, website hosting, analytics, email distribution, and advertising. These providers are required to protect personal information and use it only for the purposes for which it was disclosed. We may also disclose personal information where required by law.

Personal information may be stored or processed outside your province of residence or outside Canada. Where required under Québec Law 25, we conduct privacy impact assessments before transferring personal information outside Québec and implement appropriate safeguards to ensure adequate protection.

We retain personal information only as long as necessary to fulfill the purposes for which it was collected and to comply with legal requirements. We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, or misuse.

You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate. Québec residents may also request deletion of personal information, request information about how their data is processed, and request that computerized personal information be provided in a commonly used technological format, subject to legal limitations.

If a confidentiality incident occurs that presents a risk of serious injury, we will notify affected individuals and relevant regulatory authorities as required by law.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us at hello@flowhydration.com