FlowFitness Data Subject Request Form
NovaRidge Commerce LLC ("FlowFitness," "we," "us," or "our") values your privacy rights.
As required under applicable law, including the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively "CCPA"), the Virginia Consumer Data Protection Act of 2021 ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), and the Utah Consumer Privacy Act ("UCPA") (collectively "Data Protection Laws"), individual consumers are permitted to make certain requests and exercise certain rights regarding their Personal Data or Personal Information (as defined under the applicable Data Protection Laws) depending on their jurisdiction.
To submit a request to exercise individual rights under the Data Protection Laws, please complete this form and send it to:
Upon receipt of your completed request, we will process it and respond within the timelines required under applicable Data Protection Laws. If additional information is necessary, we will contact you using the contact information you provided in this form.
Information provided in connection with this request will be processed only for the purpose of processing and responding to your request and will be deleted thereafter in accordance with our retention obligations.
For more information, please review our Privacy Policy.
1. Contact Information
Full Name:
Email Address:
If applicable, US State:
2. What is Your Relationship with Us?
☐ Merchant
☐ End-User
☐ Prospect/Website Visitor
☐ Vendor
☐ Other: ________
3. Your Request
Below are the rights and requests you may submit depending on your residence. Please check the applicable right you are requesting to execute.
A. California
Note: Under the CCPA, your rights apply to Personal Information collected within the 12 months prior to the request, and you may not submit more than two requests in a 12-month period.
Please check the applicable right you are requesting to execute:
☐ Right to Know or Access
☐ Right to Deletion
☐ Right to Data Portability
☐ Right to Non-Discrimination
☐ Right to Rectification
☐ Right to Limit the Use and Disclosure of Sensitive Personal Information
☐ Right to Opt-Out of Sale
☐ Right to Opt-Out of Sharing for Cross-Contextual Behavioral Advertising
☐ Opt-Out of the Use of Automated Decision Making
CCPA Opt-Out Rights
You can execute certain opt-out rights without filling out this form:
Through Device-Level Choices: Limit the collection of certain information through your device settings if you do not want to receive interest-based advertisements.
Use Global Privacy Control ("GPC") signals.
Opting out of interest-based advertising does not mean that you will not receive advertising. You may still receive ads that may be less relevant to your interests.
Authorized Agency
An authorized agent may submit the request on your behalf, as detailed in the CCPA Notice available on our website.
We will aim to complete CCPA verifiable consumer requests within 45 days as required by law. If additional time is needed, we will inform you in writing of the reason and extension period.
B. Virginia
☐ Right to Confirm if the Data is Being Processed and to Access That Personal Data
☐ Right to Deletion
☐ Right to Data Portability
☐ Right to Correct Inaccuracies
☐ Right to Opt-Out of Processing for Targeted Advertising, Sale of Personal Data, or Profiling
☐ Other
We will complete VCDPA authenticated consumer requests within 45 days. If we refuse to act on your request, you may appeal our decision by contacting us. We will respond within 60 days of receiving your appeal.
C. Colorado
☐ Right of Access
☐ Right to Correction
☐ Right to Deletion
☐ Right to Data Portability
☐ Right to Opt-Out of Processing for Targeted Advertising, Sale, or Profiling
☐ Other
We will complete CPA consumer requests within 45 days and may extend the response period by an additional 45 days if necessary.
D. Connecticut
☐ Right to Confirm if the Data is Being Processed
☐ Right to Correction
☐ Right to Deletion
☐ Right to Data Portability
☐ Right to Opt-Out of Processing for Targeted Advertising, Sale, or Profiling
☐ Other
Where consent is required and subsequently revoked, we will cease processing as soon as practicable, but no later than fifteen days after receipt of your request.
We will respond within 45 days, subject to extension if necessary.
E. Utah (Effective January 2024)
☐ Right to Confirm if the Data is Being Processed
☐ Right to Access
☐ Right to Deletion
☐ Right to Data Portability
☐ Right to Opt-Out of Processing for Targeted Advertising or Sale
☐ Other
We will respond within 45 days and may extend if necessary.
F. Notice
Deletion rights under U.S. data protection regulations are not absolute.
We may deny your deletion request if retaining the information is necessary for reasons including:
Completing the transaction or providing requested services
Detecting security incidents
Debugging and repairing errors
Complying with legal obligations
Engaging in lawful research
Internal uses aligned with consumer expectations
Other lawful purposes compatible with the context of collection
We will delete or de-identify Personal Information not subject to one of these exceptions and will direct our service providers to do the same.
4. Validation
To process your request, we need sufficient information to verify your identity.
We cannot respond if we cannot verify your identity or authority.
Please describe your request with sufficient detail:
Thank you for completing this form. Please send it to:
We will process your request within the timeframe required under applicable Data Protection Laws.
We reserve the right to extend the response period if the request is complex, numerous, or requires additional information.
