Privacy Policy
Last Updated: October 23, 2026
Effective Date: October 23, 2026
This Privacy Policy describes how Char Systems LLC (doing business as "FlavrQ," and referred to herein as "Company," "we," "us," or "our") collects, uses, protects, and discloses personal information when you visit flavrq.com (the "Site"), purchase our products, communicate with our customer service team, or otherwise interact with us.
Please read this Privacy Policy carefully. By accessing or using our Site, you acknowledge that you have read and understood the collection, use, and disclosure practices described herein.
1. Notice at Collection: Categories of Personal Information Collected
Within the preceding twelve (12) months, we have collected the following categories of personal information from consumers:
| Category of Personal Information | Specific Examples | Source of Collection | Business / Commercial Purpose | Categories of Third Parties Receiving Data |
| Identifiers | Full name, billing address, shipping address, email address, phone number, unique online identifiers, and IP address. | Directly from you; automatically via cookies/pixels. | Order fulfillment, fraud screening, customer support, account management, and transactional communications. | E-commerce platform (Shopify), shipping carriers, fulfillment partners, and customer service tools. |
| Commercial Information | Records of products viewed, cart additions, purchase history, order amounts, and return history. | Directly from you via your interactions with the Site. | Processing transactions, inventory management, customer support, and internal sales analytics. | Shopify, enterprise resource planning systems, and analytics providers. |
| Internet & Network Activity | Browser type and version, operating system, time zone, referring/exit URLs, clickstream data, search terms, and interaction metrics. | Automatically collected via server logs, cookies, web beacons, and tracking tags. | Website performance optimization, technical security, diagnosing server errors, and marketing attribution. | Analytics vendors (Google Analytics) and advertising partners (Meta, Google Ads). |
| Payment & Financial Data | Credit card number, debit card number, card expiration date, and billing postal code. | Directly from you at checkout. | Processing transactions and preventing fraud. (Note: Complete payment card details are tokenized and processed directly by our PCI-compliant payment processors; we do not store full card numbers on our servers). | Payment processors (Shopify Payments, credit card networks). |
| Inferences & Preferences | Consumer preferences, purchasing trends, and response rates to promotional offers. | Derived from browsing and order history. | Personalizing site experience, optimizing product offerings, and conducting targeted marketing. | Advertising and marketing network partners. |
We do not knowingly collect or process Sensitive Personal Information (such as Social Security numbers, precise biometric data, or racial/ethnic origin), nor do we collect information from individuals under the age of sixteen (16).
2. How We Use Your Personal Information
We process personal information for the following operational and commercial purposes:
-
Fulfilling Orders & Contracts: To verify payment, process orders, ship physical products, provide order confirmations, and handle returns or warranty claims.
-
Customer Support: To answer questions, resolve technical or shipping issues, and maintain communication records.
-
Fraud Prevention & Security: To detect, prevent, and protect against fraudulent, unauthorized, or illegal activities, chargebacks, and security incidents.
-
Marketing & Targeted Advertising: To deliver newsletters, special promotions, and targeted behavioral advertisements across third-party platforms (subject to your statutory opt-out rights).
-
Analytics & Performance Optimization: To evaluate store traffic, improve product listings, and refine site layout and functionality.
-
Legal Compliance: To comply with applicable tax, commercial, accounting, and legal reporting obligations, or respond to valid subpoenas and law enforcement requests.
3. Disclosures, "Sales," and "Sharing" of Personal Information
We do not sell personal information for direct monetary compensation. However, under modern state privacy statutes (including the California Consumer Privacy Act / CPRA), our use of third-party tracking pixels, cookies, and digital advertising tags (e.g., Meta Pixel, Google Ads, Bing Ads) to deliver cross-context behavioral advertising constitutes a "sale" or "sharing" of personal information.
Within the preceding twelve (12) months, we have disclosed or shared personal information as follows:
-
Service Providers: We share personal data with service providers (such as Shopify, fulfillment centers, shipping couriers, payment processors, and IT vendors) who perform business functions strictly on our behalf under written contractual agreements that prohibit them from retaining, using, or disclosing your information for any purpose other than providing the contracted services.
-
Digital Advertising Networks: We transmit online identifiers and network activity to third-party ad networks (such as Google and Meta) for targeted behavioral advertising. You may opt out of this sharing at any time as described in Section 6.
-
Corporate Transactions: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of company assets, personal information may be transferred as part of the business assets.
-
Legal Compulsion: We may disclose personal information when required to do so by law, court order, or governmental authority.
4. Tracking Technologies, Cookies, and Browser Signals
Our Site uses first-party and third-party cookies, tracking pixels, and web beacons to function properly and analyze customer interactions.
-
Managing Cookies: You can control, filter, or disable cookies through your web browser preferences. Note that disabling essential cookies may impact store checkout and functionality.
-
Global Privacy Control (GPC) & Browser Signals: We recognize and honor browser-based opt-out signals, including the Global Privacy Control (GPC). When our Site detects a valid GPC signal from your browser, we automatically suppress marketing and targeting tags, treating the signal as a valid request to opt out of the "sale" or "sharing" of personal information for that browser or device.
5. Data Retention Schedules
We do not retain personal information indefinitely. We retain personal data only for as long as reasonably necessary to fulfill the specific purposes outlined in this Policy, according to the following criteria:
-
Order and Transaction Records: Retained for seven (7) years following completion of the transaction to comply with federal and state tax, accounting, audit, and commercial warranty obligations.
-
Customer Support Inquiries: Retained for up to three (3) years from resolution to address recurring inquiries or potential disputes.
-
Marketing Records: Retained until you unsubscribe or revoke consent, after which your email address is maintained solely on an internal suppression list to ensure ongoing compliance with CAN-SPAM regulations.
-
Technical Logs and Cookie Data: Web analytics and session tracking records are generally expired or anonymized within fourteen (14) months of collection.
6. State-Specific Consumer Privacy Rights
Depending on where you reside (including, but not limited to, California, Colorado, Connecticut, Florida, Texas, Virginia, and other states with comprehensive consumer data privacy laws), you may possess some or all of the following statutory rights regarding your personal information:
-
Right to Know / Access: The right to request the specific categories and pieces of personal information we have collected about you, the categories of sources, the commercial purposes for collection, and the categories of third parties with whom it was shared.
-
Right to Delete: The right to request the deletion of personal information we have collected from you, subject to statutory exemptions (such as completing an existing transaction, detecting security incidents, or complying with legal record-retention duties).
-
Right to Correct: The right to request that we correct inaccurate or incomplete personal information that we maintain about you.
-
Right to Opt-Out of the "Sale" or "Sharing": The right to direct us not to sell or share your personal information for cross-context behavioral advertising. You can exercise this right by enabling the Global Privacy Control (GPC) on your browser, clicking the "Do Not Sell or Share My Personal Information" link in our website footer, or submitting a written request.
-
Right to Non-Discrimination: We will never deny goods, charge different prices, or provide a different level or quality of products because you exercised any of your privacy rights.
How to Exercise Your Rights
To submit an access, deletion, correction, or opt-out request, contact us via one of the following methods:
-
By Email:
support@flavrq.com -
By Mail:
Char Systems LLC
Attn: Privacy Compliance Department
107 N. 11th Street, Suite 446
Tampa, FL 33602
We will verify your request by matching the name and email address provided in your submission against the records in our customer database. You may designate an authorized agent to submit requests on your behalf; authorized agents must provide written proof of authorization signed by you, and we may verify your identity directly before acting on the request. We will acknowledge and respond to verifiable consumer requests within the statutory deadlines (generally forty-five (45) days).
7. European and International Data Protection (GDPR / UK GDPR)
If you access our Site from the European Economic Area (EEA) or the United Kingdom:
-
Legal Bases for Processing: We process personal data under the lawful bases of: (a) Contractual Necessity (processing orders and delivering products); (b) Legitimate Interests (preventing fraud, securing our IT infrastructure, analyzing website traffic); (c) Legal Obligation (tax and regulatory accounting); and (d) Consent (for direct email marketing and non-essential cookies).
-
Cross-Border Transfers: Personal data collected by Char Systems LLC is transferred to, stored, and processed in the United States. Where personal data is transferred across international borders, we utilize appropriate safeguards recognized under EU and UK data protection frameworks.
-
Right to Complain: You have the right to lodge a formal complaint with your local Data Protection Supervisory Authority if you believe our data processing violates applicable law.
8. Third-Party Links & Integrations
Our Site may contain links to third-party websites, plug-ins, and applications (such as social media platforms or embedded review widgets). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party platforms and are not responsible for their independent privacy practices. We encourage you to read the privacy statements of every website you visit.
9. Modifications to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect updates to our operational practices, technological developments, or applicable legal standards. When material changes are made, we will update the "Last Updated" date at the top of this policy and, where required by law, provide prominent notice on our homepage or via direct email communication.
10. Contact Us
If you have any questions, comments, or requests regarding this Privacy Policy or our data management practices, please contact our privacy compliance department at:
Char Systems LLC
Attn: Legal & Privacy Department
107 N. 11th Street, Suite 446
Tampa, FL 33602
Email: support@flavrq.com