Turnstile verifies website visitors without cross-site tracking
Flo lists Cloudflare Turnstile for IP addresses used in fraud detection and validation, time on the website or interaction signals, and browser/device information. Its purpose is distinguishing real visitors from bots and keeping the website secure. Flo says this use does not use cookies or track people across websites.
Supporting quotations
Security and verification of web users Cloudflare Turnstile Cloudflare's Privacy Policy IP address for fraud detection and validation, time spent on the Website or interaction signals (such as clicks), and Browser and device information To help keep our Website safe and secure. Cloudflare Turnstile confirms our Website visitors are real and blocks unwanted bots without slowing down web experiences for real users. This does not use cookies or track users across websites.
Not stated here
The linked Cloudflare policy is not supplied; this no-cookie and no-cross-site-tracking statement concerns Turnstile’s described use, not all Flo processing.
Cross-references
contrast (model-proposed): Usage and transaction data may be collected using cookies — contrast: Flo may use cookies for collection generally, but specifically says its Turnstile visitor verification does not use cookies or cross-site tracking. The statements cover different operations.
Security & Safeguards · Company commitment
Flo lists security safeguards but does not guarantee absolute security
Flo describes technical and organisational measures reflecting the data and risks, including sensitive-data risks: encryption in transit and at rest, regular vulnerability scans and penetration testing, integrity measures, necessary-only employee access with accountability, and regular privacy impact assessments. It also commits to a privacy audit upon merger or takeover. Despite these measures, Flo does not guarantee absolute security or that data will not be intercepted during transmission.
Supporting quotations
We take various technical and organisational steps to protect your personal data from loss, theft, misuse, and unauthorised access, disclosure, alteration, and destruction. These measures are designed based on the nature of the personal data we handle and the risks associated with special categories of personal data we collect. This includes:
encryption: your personal data is encrypted both in transit and at rest;
vulnerability scanning: we conduct regular scans and penetration testing;
data integrity protection: we have measures in place to protect the integrity of your data;
organisational and legal measures: for example, our employees have different levels of access to your personal data, limited to what is necessary for operating the Services. We hold our employees strictly accountable for any disclosure, unauthorised access, alteration, destruction or misuse of your personal data; and
privacy assessments: we conduct regular data protection impact assessments to ensure that the Services comply with privacy principles. We also commit to a privacy audit in the event of Flo’s merger or takeover.
While we strive to protect your information, we cannot guarantee absolute security, nor can we ensure that your personal data won’t be intercepted during transmission to us.
Cross-references
qualifies (model-proposed): Flo reports privacy and security certifications — qualifies: The detailed security disclaimer qualifies the opening security and certification assurances: absolute security and interception prevention are not guaranteed.
Security & Safeguards · Procedure
Keep credentials private and consider an additional device lock
Flo asks you to keep your password secure and not share it. It suggests adding a passcode or Face ID for extra protection.
Supporting quotations
Please keep your password secure and don’t share it with others. Consider adding a passcode or enabling face ID for an extra layer of protection.
Security & Safeguards · Procedure
Breach notice depends on law; Flo may reset access to address incidents
For a security breach, where law requires, Flo will post a notice or try to contact you by email and take reasonable steps to fix the issue under law and this policy. For potential personal-data breaches it may log you out of all devices, reset your password or take other necessary measures. Its security provision also permits some data deletion when necessary for service or member security consistently with law. Report service security incidents at security@flo.health.
Supporting quotations
If there is a security breach and where required by law, we will either post a notice or try to contact you by email. We will take reasonable steps to fix the issue according to applicable laws and this Privacy Policy. For potential personal data breaches, we may take additional actions, such as logging you out from all the devices, resetting your password and other necessary steps to address the situation.
If you want to report a security incident related to the Services, please email us at security@flo.health.
when necessary to maintain the security and integrity of the Services or to protect any member’s security, consistent with applicable laws. In such cases, we may also delete some of your personal data (e.g., by resetting your password to prevent unauthorised access);
Security & Safeguards · Company commitment
Flo reports privacy and security certifications
Flo reports independent ISO/IEC 27001 information-security and ISO/IEC 27701 privacy certifications. It promises transparency about data use and protection of users’ rights. These are Flo’s statements in the policy, not an independent verification of its security. The detailed security section says it cannot guarantee absolute security or prevent all interception during transmission.
Supporting quotations
We are proud to hold two certifications for internationally recognised privacy and security standards. Flo has obtained independent certifications called:
ISO/IEC 27001 for Information Security; and
ISO/IEC 27701 in Privacy.
Our certifications show our promise to keep your information secure and manage your privacy to a high standard. When you use Flo, you trust us with your personal data. We promise to always be clear about how your personal data is used, protect your rights and respect your data.
While we strive to protect your information, we cannot guarantee absolute security, nor can we ensure that your personal data won’t be intercepted during transmission to us.