California Privacy Policy

Enhanced Privacy Rights Under the California Consumer Privacy Act / California Privacy Rights Act

California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)

Effective January 1, 2020 (CCPA) / January 1, 2023 (CPRA): This policy supplements our general privacy policy with California-specific rights and protections under the CCPA/CPRA.

1. CCPA/CPRA Overview

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide California residents with the most comprehensive data privacy rights in the United States. California was the first state to enact comprehensive consumer privacy legislation.

Your Enhanced Rights Under CCPA/CPRA

As a California resident, you have 7 fundamental privacy rights under the CCPA/CPRA, plus the right to appeal our decisions and receive detailed responses to your requests.

2. Your California Privacy Rights

Right to Know and Access

You have the right to know what personal data we collect, how we use it, and to receive a copy of your data.

What You Can Request:

  • Categories of personal data we collect about you
  • Specific pieces of personal data we have collected
  • Categories of sources from which we collected your data
  • Business or commercial purposes for collecting your data
  • Categories of third parties with whom we share your data
  • How long we retain your personal data

Right to Correct

You can request that we correct inaccurate personal data about you, taking into account the nature and purposes of processing.

What We'll Do:

  • Review the accuracy of the data in question
  • Make corrections where we determine data is inaccurate
  • Notify third parties if we've shared the corrected data
  • Provide you with confirmation of corrections made

Right to Delete

You can request that we delete personal data we have collected about you, subject to certain legal exceptions.

Legal Retention Exceptions

We may retain your data when necessary for:

  • Completing transactions or providing requested services
  • Complying with legal obligations
  • Exercising free speech or ensuring others can exercise free speech
  • Engaging in public or peer-reviewed research
  • Ensuring security and integrity of our systems

Right to Opt-Out of Data Sales

You have the right to opt out of the sale of your personal data to third parties. Note: FlowLegalPartners does not sell personal data for monetary consideration.

Right to Opt-Out of Targeted Advertising

You can opt out of targeted advertising based on your personal data.

What You Can Request:

  • Behavioral advertising based on your browsing history
  • Cross-device tracking for advertising purposes
  • Advertising based on personal data collected from third parties
  • Retargeting ads based on your website activity

Right to Opt-Out of Profiling

You can opt out of profiling in furtherance of automated decisions that produce legal or similarly significant effects concerning you.

What You Can Request:

  • Automated lead scoring systems
  • Algorithmic attorney matching decisions
  • Automated case value assessments
  • Predictive analytics for legal outcomes

Right to Data Portability

You can request your data in a portable, readily usable format that allows you to transmit it to another entity.

What We'll Do:

  • Provide your data in a commonly used format (CSV, JSON)
  • Make the data available for download
  • Transmit directly to another entity where technically feasible

FlowLegalPartners Position on Data Sales

We do not sell personal data to third parties for monetary consideration. When we share your information with attorneys, this is part of our legal referral service, not a data sale. However, you can still exercise this right to ensure future protection.

3. How to Exercise Your Rights

Online Portal (Recommended)

Use our secure California Consumer Rights Portal for fastest processing:

Access Portal →

Email Contact

You can also contact us directly via email:

privacy@flowlegalpartners.com

Identity Verification Required

To protect your privacy, we may need to verify your identity before processing certain requests. This may involve providing additional information or documentation. We will only use verification information for this purpose and will delete it after verification is complete.

4. Our Response Process

Response Timeline

  • Acknowledgment: Within 24 hours of receipt
  • Identity Verification: 2-5 business days (if required)
  • Standard Response: Within 45 days of receipt
  • Complex Requests: Up to 90 days (we'll notify you if extension needed)
  • No Fee: No fee for up to 2 requests per year

5. Right to Appeal

If we deny your request, you have the right to appeal our decision. The CCPA/CPRA provides you with this important protection to ensure your rights are properly respected.

How to Appeal

  1. Contact us at privacy@flowlegalpartners.com within 30 days of our decision
  2. Include your original request confirmation number
  3. Explain why you believe our decision was incorrect
  4. We'll review your appeal and respond within 60 days
  5. If we uphold our decision, we'll provide information about contacting the state Attorney General

6. Sensitive Personal Data

Under the CCPA/CPRA, certain types of personal data receive enhanced protection and require your explicit consent before processing.

Sensitive Data Categories:

  • Social Security numbers
  • Financial account information
  • Health and medical information
  • Biometric identifiers
  • Precise geolocation data
  • Information about children under 13
  • Racial or ethnic origin
  • Religious or philosophical beliefs
  • Union membership
  • Genetic data
  • Sexual orientation

Our Commitment:

  • We obtain explicit consent before processing sensitive data
  • We provide clear notice about sensitive data collection
  • We implement additional security measures
  • We limit sensitive data processing to necessary purposes

7. Global Privacy Control (GPC)

The CCPA/CPRA recognizes Global Privacy Control signals as a valid method for exercising your opt-out rights. When we detect a GPC signal from your browser, we automatically:

  • Opt you out of data sales (if applicable)
  • Opt you out of targeted advertising
  • Respect your privacy preferences across our services

How to Enable GPC

Visit globalprivacycontrol.org to learn how to enable GPC in your browser or privacy tools. This provides an automated way to exercise your privacy rights across participating websites.

8. Data Controller Information

FlowLegalPartners acts as the data controller for personal data collected through our services. We are responsible for determining the purposes and means of processing your personal data.

Contact Our Data Protection Officer

Mailing Address

Data Protection Officer

FlowLegalPartners

202 N Cedar Ave STE #1

Owatonna, MN 55060

9. California Attorney General

The Attorney General has enforcement authority under the CCPA/CPRA. If you have concerns about our privacy practices that we cannot resolve, you may contact:

California Attorney General's Office

Website: oag.ca.gov

Address: 1300 I Street, Sacramento, CA 95814

Phone: (916) 210-6276

Privacy Enforcement: California Privacy Protection Agency (CPPA)

10. Relationship to General Privacy Policy

This California-specific policy supplements our general Privacy Policy. In case of any conflict between this policy and our general policy, this California policy takes precedence for California residents.

For all other privacy practices not specifically addressed in this California policy, please refer to our general Privacy Policy.

Last Updated: December 22, 2025 | CCPA/CPRA Version