FLOTE Labs
Privacy Policy
This Privacy Policy describes how FLOTE Labs Inc. collects, uses, and shares information about you when you use our website and purchase our products. We are committed to protecting your personal data and being transparent about how we use it.
Last updated 7 August 2026
1. Information We Collect
1.1 Information you provide directly
| Category | Examples | When collected |
|---|---|---|
| Identity | First name, last name | Checkout, account creation |
| Contact | Email address, phone number | Checkout, newsletter signup, hair screener |
| Payment | Billing address (card details go to Shopify Payments — we never see or store them) | Checkout |
| Shipping | Delivery address | Checkout |
| Communications | Emails and support messages | When you contact us |
| Preferences | Marketing opt-in and opt-out choices | Signup, email preferences |
1.2 Information collected automatically
| Category | Examples | Source |
|---|---|---|
| Device | Browser type, operating system, device type | Server logs |
| Usage | Pages visited, time on site, interactions | Google Analytics |
| Location | IP address, approximate location | Server logs |
| Referral | How you arrived — search, social, direct | Google Analytics, URL parameters |
| On-device storage | Referral code, campaign attribution, whether you have dismissed a signup prompt | Your browser's local storage |
1.3 Information from third parties
- Shopify: order and transaction confirmation, fraud signals.
- Klaviyo: email engagement data such as opens and clicks.
- Social media platforms: if you interact with our content, platforms may share limited aggregate data under their own policies.
2. How We Use Your Information
| Purpose | Legal basis (GDPR) | Data used |
|---|---|---|
| Process and fulfill your orders | Contract performance | Identity, contact, payment, shipping |
| Send order, shipping, and pre-order status updates | Contract performance | Identity, contact |
| Send marketing emails | Consent | Contact, preferences |
| Improve our website and products | Legitimate interest | Usage, device |
| Prevent fraud and secure transactions | Legitimate interest | Payment, device, location |
| Respond to support enquiries | Contract performance | Contact, communications |
| Comply with legal obligations | Legal obligation | As required |
3. How We Share Your Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. This site runs no advertising or retargeting pixels.
We share information only with the following:
| Recipient | Purpose | Data shared |
|---|---|---|
| Shopify | Checkout, payment processing, order management | Identity, contact, payment, shipping |
| Klaviyo | Transactional and marketing email | Email, name, purchase history |
| Supabase | Our records of orders and enquiries | Identity, contact, order details |
| Vercel | Website hosting and delivery | Server log data |
| Google Analytics | Aggregate site usage measurement | Usage and device data |
| Shipping carriers | Delivering your order | Name, shipping address |
| Legal authorities | Where required by law | As legally required |
We require all service providers to protect your data and use it only for the purposes we specify.
4. Data Retention
| Data | Retention | Reason |
|---|---|---|
| Order records | 7 years | Tax and legal compliance |
| Account information | Until deletion is requested | Providing the service |
| Marketing preferences | Until consent is withdrawn | Marketing |
| Support communications | 3 years | Service quality |
| Analytics data | 26 months | Site improvement |
| Payment card details | Never stored by us | Handled by Shopify Payments |
5. Your Rights
5.1 Everyone
- Access: request a copy of the personal data we hold about you.
- Correction: request that inaccurate data be corrected.
- Deletion: request deletion, subject to legal retention requirements.
- Marketing opt-out: unsubscribe from marketing email at any time using the link in any email.
- Portability: request your data in a machine-readable format.
5.2 California residents (CCPA/CPRA)
- Know what personal information we collect, use, and disclose.
- Request deletion of your personal information.
- Opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of; if that ever changes, we will publish a “Do Not Sell or Share My Personal Information” link before it does.
- Non-discrimination for exercising your privacy rights.
- Limit the use of sensitive personal information.
To exercise these rights, email support@flotelabs.com with “Privacy Request” in the subject line. We verify your identity and respond within 45 days.
5.3 Virginia, Colorado, Connecticut, Texas, and other US state laws
You have comparable rights to access, correct, delete, and opt out of targeted advertising and profiling. We honor the Global Privacy Control browser signal as an opt-out request. Email support@flotelabs.com to exercise these rights.
5.4 EU and UK residents (GDPR)
We ship only within the United States, but if you visit the Site from the EU or UK you have the right to access, rectify, erase, restrict processing of, and port your data; to object to processing based on legitimate interest; to withdraw consent at any time; and to lodge a complaint with your local supervisory authority.
The data controller is FLOTE Labs Inc. Contact support@flotelabs.com for any of these requests.
6. Security
We use appropriate technical and organizational measures, including:
- TLS encryption for all data in transit.
- PCI-DSS compliant payment processing through Shopify Payments — card details never reach our systems.
- Access controls limiting who can view personal data.
- Encrypted data storage at rest.
No method of transmission over the internet is completely secure. We work to protect your data but cannot guarantee absolute security.
7. Children's Privacy
This Site is intended for adults and you must be 18 or older to order. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.
8. International Transfers
Your information is processed in the United States. If you access the Site from outside the United States, you consent to that transfer. For EU and UK visitors we rely on Standard Contractual Clauses where applicable.
9. Changes to This Policy
We may update this Privacy Policy. Changes are posted on this page with a revised date, and material changes are communicated by email to customers.
10. Contact
FLOTE Labs Inc., 7901 4th Street North, Suite #100, St. Petersburg, FL 33702. Email support@flotelabs.com. We respond within 30 days, or 45 days for verifiable privacy requests.
Questions about this policy? Email support@flotelabs.com.