Privacy Notice

The Flow Function is responsible for personal information under its control. Our Privacy Officer oversees our privacy practices and responds to access, correction, and complaint requests.

Depending on how you interact with us, personal information may include:

• name, email address, phone number, and service address;
• inquiry, booking, service, availability, and communication details;
• intake, accommodation, access, emergency-contact, consent, signature, photo, and document information you choose to provide;
• account, invoice, order, payment-status, and transaction information; and
• technical and security information, such as browser, device, page-performance, session, and request information.

Please do not include health, access, financial, identity-document, or other sensitive information in the public contact form. We can arrange a more appropriate channel when it is needed.

Before giving us another person's emergency-contact details, confirm that they have agreed to you providing that information for this purpose.

We collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate. When you voluntarily send an inquiry, you are asking us to use the submitted details to respond and keep an inquiry record.

We seek additional consent when a new purpose requires it. You may withdraw consent for optional uses on reasonable notice by contacting the Privacy Officer. Uses that the law permits or requires may continue; if withdrawn information is necessary to provide a requested service, we will explain why that service may not be able to continue.

We use service providers only for functions needed to operate the business. These may include Supabase for authentication, databases, and file storage; Vercel for hosting, analytics, and performance monitoring; Resend for email; Stripe for payments; and Google services for maps, address support, and calendar operations.

We provide each service only the information needed for its function. Providers may process or store information outside British Columbia or Canada, where it may be subject to the laws of that jurisdiction. We may also disclose information when required or permitted by law, or with your consent.

We retain personal information only as long as reasonably needed for the purposes described here and for applicable legal, tax, accounting, insurance, security, and dispute-resolution needs.

When personal information is used to make a decision that directly affects someone, we retain it for at least one year after that use so the individual has a reasonable opportunity to obtain access. When information is no longer required, we securely delete it or remove identifying details, subject to limited backup and legal-hold requirements.

You may ask to access your personal information, request a correction, ask us to remove or de-identify information we no longer need, or make a privacy complaint by contacting the Privacy Officer. Requests remain subject to legal, tax, accounting, insurance, and dispute-resolution recordkeeping requirements. Describe the records or concern clearly and provide contact information for our response. Please do not email government identification or other sensitive verification documents unless we first provide appropriate instructions.

We may need to verify your identity. We will review the request, respond within the time required by law, and explain any lawful limit on access or correction. If a concern is not resolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia.