Privacy Policy

Last updated: June 11, 2026

Flamingo Flow ("we", "us") provides a done-for-you Google review service for local businesses in Canada and the United States. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It applies to flamingoflow.ca, our free tools (including the Google review QR code generator), our onboarding and booking workflows, and the review outreach we run on behalf of client businesses.

Our commitment: your data is never sold and never shared with anyone for their own use. We do not sell, rent, trade, or give away personal information, and we do not share customer lists with any third party for marketing or any other independent purpose. The only parties that ever touch your data are the service providers (like our payment processor) that act strictly on our instructions to deliver the service to you, and they are contractually barred from using it for anything else.

Information We Collect

Information you give us directly. When you submit a form, book a call, start a trial, or contact us, we collect details such as your name, email address, phone number, business name and website, appointment preferences, and the content of your messages.

Customer lists provided by client businesses. To send review requests on a client's behalf, the client provides us with contact details of their real past and new customers (typically name, phone number or email, and service date). We process this information only as a service provider to that business, only to request honest Google reviews, and we never sell it or use it to market unrelated products.

QR code and scan data. When someone scans a tracked Google review QR code created with our tool, we may record scan time, campaign ID, placement, IP address, user agent, referrer, first-party visitor ID, browser-created device ID, device type, browser, operating system, screen details, timezone, language, connection details, and location signals supplied by hosting or security providers.

Payment information. Payments are processed by Stripe. We do not store full card numbers on our servers; we keep records of plan, billing status, and transaction references.

Website usage data. We use cookies and similar technologies, including analytics tools such as Microsoft Clarity and the Meta (Facebook) Pixel, to understand how visitors use our pages and to measure advertising. These tools may collect device identifiers, pages viewed, and interaction data.

How We Use Information

When we send commercial electronic messages, we do so in accordance with Canada's Anti-Spam Legislation (CASL) and, for US recipients, applicable US laws. Review request messages are sent on behalf of the business you actually dealt with, and you can opt out at any time by replying or using the unsubscribe option in the message.

Who Can Access Information

Your data is never sold and never shared for any third party's own use. Access is limited to the service providers that help us run the service, acting only on our instructions and under contracts that bar them from using it for anything else:

We may also disclose information if required by law or to protect our rights, users, or the public.

Your Rights

Canada (PIPEDA). You may request access to, or correction of, the personal information we hold about you, withdraw consent (subject to legal or contractual limits), and ask how your information has been used or disclosed. You may also complain to the Office of the Privacy Commissioner of Canada.

United States (including CCPA/CPRA for California residents). Depending on your state, you may have the right to know what personal information we collect, request deletion or correction, and opt out of the sale or sharing of personal information. We do not sell personal information and we do not use sensitive personal information for purposes that require an opt-out under the CPRA.

If you received a review request. The business you dealt with asked us to contact you. You can opt out of further messages at any time, and you can ask us to delete your contact details by emailing us.

To exercise any right, email info@flamingoflow.ca. We will verify your request and respond within the time required by applicable law.

Data Retention

We keep personal information only as long as needed for the purposes above: client and billing records for the duration of the relationship plus the period required for tax and legal compliance; customer outreach lists for as long as the client's campaign is active; and scan analytics for as long as the related QR campaign exists. We delete or anonymize information when it is no longer needed.

Security

We use HTTPS across the site, restrict access to systems holding personal information, process payments through Stripe rather than storing card data, and apply server-side protections such as rate limiting and access controls. No method of transmission or storage is completely secure, but we work to protect your information with measures appropriate to its sensitivity.

Cookies

You can control cookies through your browser settings. Blocking some cookies may affect parts of the site such as the QR code generator and booking calendar. Analytics cookies are used to improve the site and measure campaigns, not to identify you personally.

Children

Our services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

If we make material changes, we will update this page and the date at the top. Continued use of the site after changes take effect means you accept the updated policy.

Contact

Questions about privacy can be sent to info@flamingoflow.ca or by phone at +1 (365) 889-8810. See also our Terms of Service and Review Compliance standards.