Virginia Privacy Policy
Effective as of December 22, 2025
This policy supplements our general Privacy Policy with Virginia-specific rights and protections under the Virginia Consumer Data Protection Act (VCDPA), effective January 1, 2023.
FlowLegal Partners (“FlowLegal Partners,” “we,” “us” or “our”) operates as an attorney advertising and marketing platform. We are not a law firm and do not provide legal advice.
Index
VCDPA overview
The Virginia Consumer Data Protection Act provides Virginia residents with comprehensive privacy rights over personal data processed by covered businesses.
As a Virginia resident, you have 7 fundamental privacy rights under the VCDPA, plus the right to appeal our decisions and receive detailed responses to your requests.
Your Virginia privacy rights
Right to Know and Access
You have the right to know what personal data we collect, how we use it, and to receive a copy of your data.
What you can request:
- Categories of personal data we collect about you
- Specific pieces of personal data we have collected
- Categories of sources from which we collected your data
- Business or commercial purposes for collecting your data
- Categories of third parties with whom we share your data
- How long we retain your personal data
Right to Correct
You can request that we correct inaccurate personal data about you, taking into account the nature and purposes of processing.
What we'll do:
- Review the accuracy of the data in question
- Make corrections where we determine data is inaccurate
- Notify third parties if we've shared the corrected data
- Provide you with confirmation of corrections made
Right to Delete
You can request that we delete personal data we have collected about you, subject to certain legal exceptions.
Legal retention exceptions. We may retain your data when necessary for:
- Completing transactions or providing requested services
- Complying with legal obligations
- Exercising free speech or ensuring others can exercise free speech
- Engaging in public or peer-reviewed research
- Ensuring security and integrity of our systems
Right to Opt-Out of Data Sales
You have the right to opt out of the sale of your personal data to third parties. Note: FlowLegal Partners does not sell personal data for monetary consideration.
Right to Opt-Out of Targeted Advertising
You can opt out of targeted advertising based on your personal data.
What you can request:
- Behavioral advertising based on your browsing history
- Cross-device tracking for advertising purposes
- Advertising based on personal data collected from third parties
- Retargeting ads based on your website activity
Right to Opt-Out of Profiling
You can opt out of profiling in furtherance of automated decisions that produce legal or similarly significant effects concerning you.
What you can request:
- Automated lead scoring systems
- Algorithmic attorney listing decisions
- Automated case value assessments
- Predictive analytics for legal outcomes
Right to Data Portability
You can request your data in a portable, readily usable format that allows you to transmit it to another entity.
What we'll do:
- Provide your data in a commonly used format (CSV, JSON)
- Make the data available for download
- Transmit directly to another entity where technically feasible
FlowLegal Partners position on data sales. We do not sell personal data to third parties for monetary consideration. When we share your information with attorneys, this is part of our directory service that you requested, not a data sale. However, you can still exercise this right to ensure future protection.
How to exercise your rights
Use our secure Virginia Consumer Privacy Rights page for fastest processing. You can also contact us directly at privacy@flowlegalpartners.com.
Identity verification. To protect your privacy, we may need to verify your identity before processing certain requests. This may involve providing additional information or documentation. We will only use verification information for this purpose and will delete it after verification is complete.
Our response process
- Acknowledgment: Within 24 hours of receipt
- Identity verification: 2-5 business days (if required)
- Standard response: Within 45 days of receipt
- Complex requests: Up to 90 days (we'll notify you if extension needed)
- No fee: No fee for up to 2 requests per year
Right to appeal
If we deny your request, you have the right to appeal our decision. The VCDPA provides you with this important protection to ensure your rights are properly respected.
How to appeal:
- Contact us at privacy@flowlegalpartners.com within 30 days of our decision
- Include your original request confirmation number
- Explain why you believe our decision was incorrect
- We'll review your appeal and respond within 60 days
- If we uphold our decision, we'll provide information about contacting the state Attorney General
Sensitive personal data
Under the VCDPA, certain types of personal data receive enhanced protection and require your explicit consent before processing.
Sensitive data categories:
- Social Security numbers
- Financial account information
- Health and medical information
- Biometric identifiers
- Precise geolocation data
- Information about children under 13
Our commitment:
- We obtain explicit consent before processing sensitive data
- We provide clear notice about sensitive data collection
- We implement additional security measures
- We limit sensitive data processing to necessary purposes
Global Privacy Control (GPC)
The VCDPA recognizes Global Privacy Control signals as a valid method for exercising certain opt-out rights. When we detect a supported GPC signal from your browser, we will treat it as a privacy preference request consistent with applicable law.
- Opt you out of data sales (if applicable)
- Opt you out of targeted advertising
- Respect your privacy preferences across our services
Visit globalprivacycontrol.org to learn how to enable GPC in your browser.
Data controller information
FlowLegal Partners acts as the data controller for personal data collected through our services. We are responsible for determining the purposes and means of processing your personal data.
Data Protection Officer
Email: dpo@flowlegalpartners.com
Mailing address:
Data Protection Officer
FlowLegal Partners
202 N Cedar Ave STE #1
Owatonna, MN 55060
Virginia Attorney General
The Virginia Attorney General has enforcement authority under the VCDPA. If you have concerns about our privacy practices that we cannot resolve, you may contact:
Virginia Attorney General's Office
Website: oag.state.va.us
Address: 202 North 9th Street, Richmond, VA 23219
Phone: (804) 786-2042
Relationship to general Privacy Policy
This Virginia-specific policy supplements our general Privacy Policy. In case of any conflict between this policy and our general policy, this Virginia policy takes precedence for Virginia residents.
For all other privacy practices not specifically addressed here, please refer to our general Privacy Policy.