Privacy policy.
Kayla Wells Therapy PLLC DBA “Forward Flow Therapy” Privacy Policy
Last updated: 5/4/2026
This Privacy Policy describes how Forward Flow Therapy (“we” or “us”) collects, uses, and shares your personal information when you use our website forwardflowtherapy.com and any of our subdomains (the “Website”).
Topics:
● Personal information we collect
● How we use your personal information
● How we share your personal information
● How we store your data
● No Processing Children’s Data
● Email marketing
● Behavioral advertising
● Your data protection rights
● Third-party websites
● Changes
● Contact Us
Personal Information We Collect
When you visit the Website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Website, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Website, and information about how you interact with the Website. We refer to this automatically collected information as “Device Information”.
We collect Device Information using the following technologies:
● “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org
● “Log files” track actions occurring on the Website, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
● “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Website.
We use Device Information for:
● Functionality: To recognize you on our website and recognize your previously selected preferences, including your preferred language and your location.
● Advertising: To collect information about your visit, the content you viewed, the links you followed, and information about your web browser, device, and IP address. We sometimes share limited aspects of this data with third parties for advertising purposes.
● Affiliate Marketing: To track which member of our affiliate team referred you to us for the purpose of granting commissions to them if you purchase from us
You can set your browser not to accept cookies, and the website above tells you how to remove cookies from your browser. Some of our website features may not function if you disable cookies. Please note that we do not alter our Website’s data collection and use practices when we see a Do Not Track signal from your browser.
We also collect data you provide to us directly. We refer to the data you provide as “Provided Information.” We collect and process data you provide when you:
● Fill out our contact form to express interest or request more information about our products or services
● Book a call with us, whether through a form on our website or through a third-party scheduling software
● Register for an account on our website
● Place an order for any of our products or services
● Voluntarily complete a customer survey or provide feedback on any of our message boards or community features, via our contact or feedback form, or via email
● Provide your email address in exchange for access to a free resource
● Sign up for our email newsletter or subscribe to any of our regular content
● Submit an intake form or application form for any of our services or programs
The Provided Information we collect may include:
● Personal identification information (name, email address, phone number, etc.)
● Billing information (billing address, shipping address, payment information, including credit card numbers, etc.)
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Provided Information.
We may also receive your Personal Information from third parties. In particular:
● We may receive Personal Information from a third party connected to you or dealing with us, for example business partners, sub-contractors, service providers, merchants, referral partners, etc.
● We may collect personal data from our payment processors if personal data is received while executing payment operations
● We may receive Personal Information from third-party tools we use to collect such information from you, such as form tools
● We may receive Personal Information from other entities that we collaborate with
How we use your Personal Information
We use the Provided Information that we collect generally to provide requested services and/or fulfill any orders placed through the Website (including processing your payment information, delivering products, providing free content, initiating onboarding for services, and providing you with invoices and/or order confirmations). Additionally, we use Provided Information to:
● Communicate with you;
● Screen our orders for potential risk or fraud; and
● When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Website (for example, by generating analytics about how our visitors browse and interact with the Website, and to assess the success of our marketing and advertising campaigns).
I collect this personal information directly from you, from your browser or device, use of cookies, service providers, our business partners, affiliates, or from third parties. We do not sell your personal information to third parties.
I use the information I collect for various purposes depending on how you interact with me. These purposes include:
• To provide our services or products to you including invoices and statements
• To create, maintain or secure your account with us
• To process your requests, purchases, transactions and payments
• To communicate with you about your account and our products/services
• To market or advertise our new products and promotions to you via email or other social media, to answer your questions, and to understand your needs and preferences.
• To improve our website, products, services, content and advertising and personalize them to your interests and preferences
• To better understand the demographics of our users, analyze data and usage trends
• To help you share our content, products, services, and your experience working with us with your friends and followers on social media
• To hire or evaluate you as a candidate when you seek employment with us
• To protect our website, products and services from misuse and to ensure security
• To process payments or to prevent theft and fraud
• To transfer business in any merger, acquisition, reorganization, sale of assets, bankruptcy where we may sell, transfer or share some of our business assets including information related to our customers. In those instances, you will be notified of such ownership changes as well as the rights you have regarding your personal information.
• To comply with legal requirements and to enforce our terms and agreements with you
• To assess or carry out a merger, dissolution, restructuring, reorganization, or other sale or transfer of some or all of our assets, whether as part of a bankruptcy or similar proceeding, in which personal information about our website users, including our email list, is one of the assets transferred.
We may also use your information in other ways for which we provide specific notice at the time of collection. We may combine different types of information that we collect about you for any of the purposes described above.
Please be advised we DO NOT SELL YOUR PERSONAL INFORMATION to third parties and have never sold your personal information. We do not intend to sell your personal information in the future either.
Under the CCPA and CPRA, you still have the right to opt-out of sharing your personal information and send us a “do not sell or share my personal information” request. If you would like to exercise any of your rights under California law, please submit a verifiable consumer request to us by calling 541-215-8740.
Only you, as the person registered with the California Secretary of State, or someone you authorize to act on your behalf, can make such verifiable consumer requests related to your personal information.
Your verifiable consumer request must provide sufficient information that allows us to verify that you are the person you are claiming to be or that you are the authorized representative of such person about whom we had collected personal information. You must describe your request with enough details such as your first and last name, address and your country that allow us to properly understand the request and respond to it. Please note we cannot respond to your request or provide you with personal information unless we first verify your identity or authority to make such a request and confirm that the personal information relates to you. We will make all attempts to respond to your request within 30 days of receipt.
The above-mentioned California privacy rights are not absolutely guaranteed because there are some exceptions that allow us to refuse your request. We are only required to respect these rights if we are acting as a business under the CCPA/CPRA and the requested rights have been granted and applied to you under the CCPA/CPRA.
CALIFORNIA’S “SHINE THE LIGHT” ACT
Pursuant to California’s “Shine the Light Act,” you are permitted to request information about the manner in which we share certain categories of information with third parties for their marketing use. We may disclose your personal information to our affiliates or other related third parties such as service providers, vendors for their use in marketing to you, so we can provide the products and/or services offered on this website to you. When we disclose such information, your personal information is still kept confidential and between us and that third party. It is not used for any other purpose that’s not permitted under the laws.
DO NOT TRACK SIGNALS
This privacy notice for California residents supplements the information included in the previous sections of this privacy policy. California and Delaware law also requires us to state whether we honor “Do Not Track” settings in your browser regarding targeted advertising, and please note we do not monitor or respond to Do Not Track browser requests.
You can also enable or disable Do not Track in your browser. This is a setting that tells websites not to track your online activities. To enable or disable it, go to the "Privacy" or "Security" tab in your browser's settings menu. Depending on which browser you're using, you may find the option under "Do Not Track Requests" or something similar.
DATA RETENTION
We will retain your information as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We may also retain and use your information to continue offering you our products and services, comply with our legal and accounting obligations, resolve disputes and enforce our agreements.
SECURITY
The security of your personal information is important to us, and we strive to follow generally commercial industry standards to protect your personal information submitted to us voluntarily and automatically. However, no method of transmission over the Internet is 100% secure and we cannot guarantee the absolute security of your information. When you make a credit card purchase or purchase through any means on the website, you will be directed to a third-party vendor to complete the transaction. Any information you provide during the checkout process is not stored on our website but instead provided to the third-party vendor that completes the purchase transaction.
By using this website, you agree to hold us harmless for any security breach and for any unauthorized use of your personal information by third parties. You also agree that we cannot be held responsible for any disclosure of your information through our website without our knowledge and consent.
How we share your Personal Information
We share your Personal Information with third parties to help us use your Personal Information, as described above. [If applicable: For example, we use Google Analytics to help us understand how our visitors use the Website - you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.]
The types of third parties with whom we might share elements of your Personal Information include:
● Payment processors engaged by us to securely store and handle payment information, such as credit or debit card information
● Providers of email management and distribution tools
● Providers of security and fraud prevention tools and services
● Providers of advertising services and marketing tools for the purpose of targeted advertising and marketing optimization
● Providers of data aggregation and analytics software services that allow us to effectively monitor and optimize our site
● Providers of affiliate marketing tracking and analytics software services that allow us to provide an affiliate program and grant commissions to affiliates
● Providers of client management systems to help us track and communicate with potential clients
● Providers of scheduling and videoconferencing services to help us schedule and conduct meetings with potential clients or customers
See below for a list of third-party providers we may use to process your data.
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
How we store your data
We process and store your data using the following third-party providers:
• Just like other websites, this website automatically collects certain information about you through Log Data and Google Analytics. Log Data is information about your computer’s Internet Protocol Address, which is your “IP” address, browser information, Internet Service Provider’s information, your operating system, and your browser type. Similarly, Google Analytics collects certain information about your location, browsing history, the pages you visit, the equipment you used to access the website, traffic patterns, and other general patterns related to your use of the website.
• This information is used to analyze website statistics related to user behavior and interests, improve our performance and your use of the website and to further enhance our products and services offered to you. Please see Google’s Privacy and Terms to learn more about their privacy practices. Please visit their individual websites for information on the physical location of their servers where your information is stored.
We use commercially reasonable security measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of any information that may be stored on our servers. Of course, no computer network or data transmission on the internet can be guaranteed to be 100% secure, so you submit your information at your own risk.
We will maintain your Personal Information for our records unless and until you ask us to delete this information.
No Processing Children’s Data
The Website is not intended for use by anyone under the age of 18. We do not intend to process children’s data and will delete it if we become aware of it.
I respect the privacy of children and “child” means an individual under the age of 13. This policy is in accordance with the Children's Online Privacy Protection Act (“COPPA”). This website's information and content are only intended for people over the age of 18. This website is not intended for children under the age of 13. Without prior parental or guardian consent, we do not knowingly collect, use, or disclose personal information from children under the age of 13. If you believe that personal information was collected without parental or guardian consent from a child under the age of 13, please contact us to have that information deleted.
LEGAL BASIS FOR PROCESSING DATA UNDER THE GDPR
Under the GDPR, we may process your data under the following legal basis:
Consent: when you give us clear consent to process your personal data for one or more specific purpose.
Contractual Necessity: when processing your personal data is necessary to fulfill a contract with you.
Legal Obligation: when processing of your personal data is necessary to comply with the law such as data related to taxes or employee records.
Vital Interests: when processing of your personal data is necessary to protect your life or health.
Public Interests: when processing of your personal data is necessary for the performance of a task carried out in the public interest or for official functions.
Legitimate Interests: when processing of your personal data is necessary to further our legitimate interests such as marketing activities.
YOUR STATE PRIVACY RIGHTS
State consumer privacy laws may give their residents additional rights in terms of how we use their personal information. These privacy rights vary depending on the local laws that apply to you.
California, Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:
Confirm whether we process their personal information.
Access and delete certain personal information.
Data portability.
Opt-out of personal data processing for targeted advertising and sales.
California, Colorado, Connecticut, and Virginia also provide their state residents with rights to:
Correct inaccuracies in their personal information, taking into account the information's nature processing purpose.
Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
Nevada provides its residents with a limited right to opt-out of certain types of personal information being sold by a business. The opt-out option does not apply to all types of data, however; it does protect sensitive medical or financial data, for example. Please note that we do not currently sell data that triggers the opt-out requirements of that statute.
To exercise any of these rights above under different states, please contact me with your request at 541-215-8740 and please include your name, email address, and mailing address.
CALIFORNIA CONSUMER PRIVACY ACT (CCPA) AND CALIFORNIA PRIVACY RIGHTS ACT (CPRA) COMPLIANCE AND YOUR LEGAL RIGHTS
If you live in California, you have additional rights under California law, and we comply with the CCPA and CPRA because we may have visitors from California on our website. Here are your legal rights under CCPA/CPRA:
1.You have the right to know the categories of personal information we have collected, sold or disclosed about you to third parties.
2.You have the right to opt-out of the sale and sharing of your personal information with third parties. If you are under the age of 16, you have the right to opt in to such sales, or to have a parent or guardian opt in on your behalf.
3.You also have the right to access your personal information, which we will provide within 30 days of such request.
4.You have the right to know what personal information is collected from you and how it is used, which we explained in this Privacy Policy.
5.You have the right to correct your personal information.
6.You have the right to have your personal information deleted, subject to some exceptions.
7.You have the right to equal service, price and no discrimination
8.You have the right to data portability and right to request your personal information and use it for your own purposes.
9.You have the right to consent and/or limit the use and disclosure of your sensitive personal information.
CATEGORIES OF PERSONAL INFORMATION COLLECTED AND DISCLOSED FOR A BUSINESS PURPOSE
The types of personal information we collect and how we use it have already been listed above, but under the CCPA/CPRA, the following categories of personal information may have been collected and disclosed for business purposes in the previous 12 months:
• Identifiers such as your name, address, phone number, email address and other similar identifiers
• Protected classification characteristics such as your age, gender, religion and disability information
• Commercial information such as your use of our products and services
• Internet/Network information such as your IP address, search history, browser and device information
• Geolocation data such as the information about your physical location or movements
• Sensory information such as audio, electronic, photos or other visual information
• Professional or Employment Information such as your job history including previous employer and performance evaluations
• Biometric information such as fingerprints, faceprints, voiceprints, genetic and physiological activity patterns. I do not collect any biometric information from you.
• Education information such as records related to your educational institution (grades, transcripts, class lists, student schedules and so forth). I do not collect any such education information.
• Inferences such as information reflecting your interests, preferences, characteristics, physiological trends, and abilities.
• Other Personal Information such as information provided by you directly when you fill a form on our website, register for an event scheduled by us, post a comment on our website or social media, make a purchase from us, your account login or credentials allowing you to access a product or account, telephone number, and any other information you provide to us.
• Sensitive personal information such as your social security, driver’s license, state identification card or passport number. I do collect this sensitive personal information from you.
Email Marketing
If you make a purchase on this Website, download a free resource in exchange for your email address, submit our contact form, and/or opt in to receive emails, you agree to receive email communications from us, including but not limited to newsletters, site updates, promotions, product or service updates, and other announcements and correspondence. We are not responsible for the receipt of any such emails. You are responsible for ensuring that our email address(es) are not blocked or forwarded to your spam folder.
You have the right at any time to stop us from contacting you for marketing purposes. If you opt to unsubscribe from receiving emails, you understand that you may no longer receive information or updates from us, including promotions or product updates.
Behavioral Advertising
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://thenai.org/about-online-advertising/
You can opt out of targeted advertising by using the links below:
● Meta: https://accountscenter.facebook.com/ads
● Google: https://www.google.com/settings/ads/anonymous
● Bing: https://account.microsoft.com/privacy/ad-settings/signedout
● TikTok: https://www.tiktok.com/support/faq_detail?id=7543597461579881016&category=web_account
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at http://optout.aboutads.info/
Your Data Protection Rights
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. Under certain conditions, you may also have the right to restrict or object to our processing of your data, and to request that we transfer your Personal Information to another organization. If you would like to exercise any of these rights, please contact us through the contact information below.
Additionally, if you are a European resident, we note that we are processing your information to fulfill contracts we might have with you (for example, if you make an order through the Website), or otherwise to pursue our legitimate business interests listed above. Please note that your information will be transferred outside of Europe, including to Canada and the United States.
For United States residents, depending on the applicable law in your jurisdiction, you may have additional rights, such as rights to access, correction, and deletion of your Personal Information. If you have any questions about what rights and choices apply in your jurisdiction or wish to exercise those rights, please feel free to contact us.
Third Party Websites
Our privacy policy applies only to our website. We are not responsible for the data collection, privacy practices or policies of any third-party site to which we may provide a link or that may link to our site. We encourage you to read the privacy statement and terms of use of other sites.
Changes
We may update this privacy policy from time to time to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. The date of the last revision will be indicated by the “Last updated” date at the top of this page. Any such changes are effective immediately upon publication on our Website.
Complaints
Please contact us if you have any complaints about how we use your Personal Information so we can resolve the issue whenever possible. Residents of the European Union also have the right to lodge a complaint with your local data protection regulator, such as the Information Commissioner’s Office in the UK. California residents can contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N 112, Sacramento, California 95834 or by telephone at (800) 952-5210 or (916) 445-1254.
Contact us
For more information about our privacy practices, if you have questions, or if you would like to exercise your data protection rights, please do not hesitate to contact us.
Email us: admin@forwardflowtherapy.com