Privacy Policy
Last Updated August 28th, 2026
1. Introduction
onFlume (“we,” “us,” or “our”) respects your privacy. This Privacy Policy describes the categories of personal information we collect, how we use and disclose it, and the privacy rights available to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (collectively, the “CCPA”).
This Policy applies to personal information we collect through our website at www.onflume.com (collectively, the “Services”). It does not apply to personal information we collect from job applicants, employees, or individuals acting in a business-to-business capacity, which is addressed in a separate notice.
Parts of our website will redirect you to a third party service called Satellite Deskworks. Their privacy policy can be viewed here. Any links or information provided by Satellite Deskworks is not covered under onFlume’s privacy policy.
2. Personal Information We Collect
In the preceding twelve (12) months, we have collected the following categories of personal information, as defined under Cal. Civ. Code §1798.140(v)(1). [Confirm each Y/N entry against the client’s actual practices; delete rows that don’t apply.]
Category | Examples | Collected? (Y/N) | Source(s) |
A. Identifiers | Name, alias, email, IP address | [Y ] | You; cookies |
B. Customer Records | Signature, physical characteristics, telephone number, bank/credit/debit card number, other financial information, medical or health insurance information | [N] | N/A |
C. Protected Classifications | Age, race, ancestry, religion, sex/gender, sexual orientation, veteran/military status, genetic information | [N] | N/A |
D. Commercial Information | Records of products or services purchased, obtained, or considered; purchasing histories and tendencies | [Y] | You; order history |
E. Biometric Information | Fingerprints, voiceprints, facial geometry, other physiological/behavioral characteristics | [N] | N/A |
F. Internet/Network Activity | Browsing history, search history, interactions with our website, app, or advertisements | [Y] | Cookies; pixels; SDKs |
G. Geolocation Data | Precise or approximate physical location | [Y] | You |
H. Sensory Data | Audio, electronic, visual, or similar information | [N] | N/A |
I. Professional/Employment Info | Current or past job history, performance evaluations | [N] | N/A |
J. Non-Public Education Info | Education records protected under FERPA | [N] | N/A |
K. Inferences | Profile reflecting preferences, characteristics, behavior, or attitudes | [Y] | Derived internally |
L. Sensitive Personal Information | SSN, driver’s license/state ID/passport number; account log-in credentials; precise geolocation; racial/ethnic origin; religious beliefs; union membership; contents of mail, email, or text messages (unless we are the intended recipient); genetic data; biometric data used for identification; health data; sex life or sexual orientation data; neural data | [Y] | You |
3. Sources of Personal Information
We collect personal information from the following sources:
- Directly from you — when you create an account, make a purchase, contact customer support, or otherwise interact with us.
- Automatically — through cookies, pixels, software development kits (SDKs), and similar technologies as you use the Services.
- From third parties — including service providers, marketing partners, social media platforms, data analytics providers, and publicly available sources.
4. How We Use Personal Information
We use personal information for the following business and commercial purposes:
- Providing, operating, and maintaining the Services
- Processing transactions, orders, and payments
- Responding to inquiries and providing customer support
- Marketing and advertising our products and services
- Detecting, investigating, and preventing fraud, security incidents, and illegal activity
- Complying with legal obligations and enforcing our agreements
- Internal research, analytics, and improving the Services
5. How We Disclose Personal Information
We disclose personal information to the following categories of recipients for a business purpose:
- Service providers and contractors: companies that perform services on our behalf (e.g., payment processing, hosting, customer support, analytics) under a written contract limiting their use of personal information.
- Third parties for business purposes: [e.g., payment networks, shipping carriers, professional advisors] under contracts restricting their use of the information.
- Legal and safety disclosures: to comply with law, respond to legal process, or protect the rights, property, or safety of onFlume, our users, or others.
- Selling or sharing: onFlume does not sell personal information as those terms are defined under the CCPA. We are required to share information with third parties providing additional services to our business.
6. Your California Privacy Rights
If you are a California resident, you have the following rights with respect to your personal information, subject to certain exceptions:
- Right to Know: request that we disclose the categories and specific pieces of personal information we have collected, used, disclosed, sold, or shared about you, and the categories of sources, purposes, and recipients involved. As of January 1, 2026, this right is no longer limited to the preceding 12 months — you may request information from earlier periods, except for personal information collected before January 1, 2022.
- Right to Delete: request deletion of personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction or comply with a legal obligation).
- Right to Correct: request that we correct inaccurate personal information we maintain about you.
- Right to Opt-Out of Sharing: direct us not to sell or share your personal information, including for cross-context behavioral advertising. See Section 10.
- Right to Limit Use of Sensitive Personal Information: direct us to limit our use of sensitive personal information to what is necessary to perform the Services or as otherwise permitted by the CCPA.
- Right to Non-Discrimination: we will not deny goods or services, charge different prices, or provide a different level of quality because you exercised your privacy rights.
- Right to Data Portability: receive a copy of your personal information in a portable, readily usable format, where technically feasible.
7. Sensitive Personal Information
Sensitive personal information includes: Social Security, driver’s license, state ID, or passport numbers; account log-in credentials; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; the contents of mail, email, or text messages (unless we are the intended recipient); genetic data; biometric information used for identification; health information; information about sex life or sexual orientation; and neural data. We use sensitive personal information only for the limited business purposes permitted under the CCPA, and you may exercise your right to limit such use as described in Section 9.
8. How to Exercise Your Rights
You may submit a request to know, delete, correct, or obtain a portable copy of your personal information by:
- Calling our office:(530) 592-0303
- Submitting a request through our online form: [Click Here]
We will verify your identity before processing your request, using a method reasonably proportionate to the sensitivity of the information requested (e.g., matching information you provide against information we already maintain). You may designate an authorized agent to submit a request on your behalf by providing [written permission / power of attorney], subject to our ability to verify the agent’s authority and your identity.
9. Do Not Sell or Share My Personal Information
You may opt out of the sale or sharing of your personal information at any time by clicking the “Your Privacy Choices” link in our website footer. We honor opt-out preference signals, including the Global Privacy Control (GPC), as a valid request to opt out of sale and sharing for the browser or device on which the signal is sent. Once we process your opt-out request, we will display a confirmation indicating the request has been honored.
10. Financial Incentives
onFlume does not offer financial incentives to our customers or partners.
11. Retention of Personal Information
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, taking into account the length of our relationship with you, legal and regulatory retention requirements, and the resolution of disputes.
12. Children’s Privacy
Our Services are not directed to people under the age of 18, and we do not knowingly collect personal information from people under 18 without verifiable parental consent.
13. Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. No security measure is completely secure, and we cannot guarantee the absolute security of your information.
14. Other California Privacy Rights
California’s “Shine the Light” law (Cal. Civ. Code §1798.83) permits California residents to request information about the disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact us using the information in Section 17.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will revise the “Last Updated” date above and, for material changes, [provide additional notice via website banner. We encourage you to review this Policy periodically.
16. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
onFlume
527 Flume St, Chico, CA 95928
(530) 592-0303