Privacy Policy | Spread The Flow

Last updated October 8, 2026

Spread The Flow LLC ("Spread The Flow", "we", "us") runs spreadtheflow.com, our flow jams and events, and The Forge store. This policy explains what personal information we collect, how we use it, and the choices you have. If anything here is unclear, email us at contact@spreadtheflow.com.

What we collect

When you buy from The Forge: your name, email address, phone number, shipping address, billing address (if different), what you ordered, and a gift message if you add one. Your card details go straight to our payment processor, Square. They never reach our servers and we never see or store them.

When you sign in to your Forge account: your email address. We email you a one-time code instead of using a password, and set a cookie that keeps you signed in for up to 30 days.

When you use our contact, booking, or newsletter forms: whatever you enter, such as your name, email, phone number, and event details.

Automatically, when you visit the site: your IP address, browser and device type, the pages you visit, and how you got here. This comes from the analytics and advertising tools listed below and from our hosting provider. We also use your IP address briefly to limit repeated sign-in attempts and block spam.

How we use it

To process, ship, and support your orders, including order confirmation and shipping emails.
To sign you in and show you your order history.
To answer your questions and booking requests.
To send you emails about flow jams, events, promotions, and new products, but only if you ask for them (see "Marketing emails" below).
To understand how people use the site and to measure our advertising, so we can improve both.
To keep the site secure and prevent fraud and abuse.
To keep records we're required to keep, such as sales and tax records.

Marketing emails

We only add you to our mailing lists if you ask: by ticking one of the "Stay in the loop" boxes at checkout, or by signing up through a newsletter form. The checkout boxes start unticked, and buying something never signs you up on its own. Every marketing email has an unsubscribe link, and you can also email us to be removed.

If you buy from us or create an account, we keep a customer record with what you bought and when, so we can follow up about your order or send you relevant information you've asked for. Having a record does not put you on a mailing list.

Who helps us handle your information

We use a small number of service providers to run the site and the store. They handle your information on our behalf, for the purposes above:

Square processes payments and manages orders. See Square's privacy notice.
Postmark sends our transactional emails, such as order confirmations, sign-in codes, and form replies.
ActiveCampaign stores our customer and subscriber records and sends our marketing emails.
Cloudflare hosts the site and stores our order and account records. Cloudflare Turnstile helps protect our forms from bots.
Google Analytics tells us how visitors use the site. You can opt out with the Google Analytics opt-out add-on.
Meta Pixel helps us measure and improve our ads on Facebook and Instagram. Meta may use this information to show you ads. You can control this in your Meta ad preferences.
Google Fonts serves the fonts on this site, which means your browser connects to Google to load them.

We don't sell your personal information. We share it only with the providers above, or when the law requires it.

Cookies

We use one cookie of our own, to keep you signed in to your Forge account. Your cart is saved in your browser's local storage, not on our servers. Google Analytics and the Meta Pixel set their own cookies to recognize returning visitors. You can block or delete cookies in your browser settings; the store still works, but you'll need to sign in again each visit.

Photos at our events

We sometimes photograph and film our jams and events and share them on our website and social media. If you'd rather not be featured, tell us at the event or email us, and we'll take down any photo of you we've posted.

How long we keep it

We keep order records for as long as we need them for support, returns, and tax and accounting purposes. We keep your account and customer record until you ask us to delete them. Marketing subscriptions last until you unsubscribe.

Your choices

You can ask us to show you the personal information we hold about you, correct it, or delete it. Email contact@spreadtheflow.com from the address you used with us. We may need to keep some records, such as past orders, where the law requires it.

Security

We use encrypted connections across the site, never handle card details ourselves, and limit who can access customer information. No system is perfectly secure, but we take reasonable steps to protect your information.

Children

Our website and store are not directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has given us their information, email us and we'll delete it.

Changes to this policy

If we change this policy, we'll update it here and change the "Last updated" date at the top.

Contact us

Questions or requests about your privacy: contact@spreadtheflow.com or (772) 678-0688.