1. In short
#We use cookies and similar technologies to make the pages work, to remember your choices and to protect the pages against automated abuse. On the booking, webshop, event and client pages that clinics run with FlowDule, and in the app, we use only what is necessary, so there is no statistics, advertising, profiling or marketing. On our own website flowdule.com we also use statistics, but only once you have said yes in the consent banner. You can change or withdraw your consent whenever you want.
2. What cookies and similar technologies are
#A cookie is a small file that a website stores in your browser. The same can be done with localStorage, sessionStorage and IndexedDB, which store information on your device, with tokens that show that you are signed in, and with pixels, SDKs and other identifiers. A script from a third party can also send, for example, your IP address and information about your browser, even when it stores nothing with you.
Some of the technologies are necessary for the page to work, or to deliver what you have asked for yourself. Others, for example statistics, may only be used once you have given your consent.
3. How we use them
#FlowDule consists of several parts: our own website flowdule.com and the help centre; the booking, webshop, event and client pages as well as the widget that clinics run with FlowDule; and the app at app.flowdule.com, which the clinic’s staff use. We look at each part and each language version separately. Below you can see what applies, depending on where you are.
Flowdule.com and the help centre
Usercentrics shows the consent banner and stores your choice. Google Tag Manager loads the site’s tags, and Google Analytics gives us statistics about visits to the site. The statistics only set cookies and only send information once you have given consent in the banner. Cloudflare sets the security cookie __cf_bm, which protects the site against bots. Your own choices of language, theme and currency are stored in your browser, and the help centre stores your most recent searches locally in the tab. We serve the fonts from our own server.
Booking, webshop, events and the client portal at a clinic
Here we use only what is necessary, and there is no statistics, advertising, profiling or marketing. If you actively choose a language, a currency or a theme, we store the choice in the cookie flowdule-prefs, and if you choose nothing, we store nothing. If you sign in, a login token is set. If you put something in the basket or start a registration, it is stored on your device until you are finished or clear it. Stripe is loaded only once you start paying yourself. Cloudflare Turnstile is used on selected forms, namely the step where a booking or event registration is submitted, the contact form and the webshop’s back-in-stock notification form, and Cloudflare sets the security cookies __cf_bm and cf_clearance. A map is loaded only once you click on it yourself, and address lookups go through FlowDule’s own server, so your browser does not contact a third party in advance.
Because none of this requires consent, we do not show a consent banner on the pages, and Usercentrics is used only on www.flowdule.com. The clinic determines its own purposes for booking, events and client pages, while FlowDule supplies the technology. If the clinic adds its own analytics or marketing tools to its booking page or its own website, the clinic is itself responsible for informing you and for obtaining your consent.
The app
In the app at app.flowdule.com we use technologies for login, your settings, your local drafts, encrypted communication and the video background you choose yourself. Drafts may contain record data, so use secure devices only. Cloudflare sets the security cookie __cf_bm in the app and on api.flowdule.com. There is no statistics, advertising, profiling or marketing in the app.
4. Overview of cookies and storage
#The table shows what we use, where you meet it, how long it is stored and whether it requires your consent.
| Name | Where | What it is used for, and who sets it | Lifetime | Requires consent? |
|---|---|---|---|---|
| language-preference, theme, currency-preference | Flowdule.com and the help centre; localStorage | Remembers the language, the theme and the currency you choose. Set by FlowDule. | Until you clear it | No, only following your own choice, and it is not written before you choose |
| docs-recent-searches | The help centre; sessionStorage | Remembers your most recent searches locally in the tab. Set by FlowDule. | The tab session | No, necessary for the search function, and the information stays local |
Usercentrics (ucData, ucString) | Flowdule.com and the help centre; localStorage written by the consent banner | Stores your consent choice. Set by FlowDule and Usercentrics. | Until you clear it | No, necessary in order to remember your choice |
| Google Tag Manager (GTM-5RCTVWXJ) | Flowdule.com and the help centre; third-party script | Loads the site’s tags. From FlowDule and Google. | Sets no cookies itself | Yes, for the tags that are not necessary |
Google Analytics (_ga, _ga_JQQ724MY6Q) | Flowdule.com and the help centre; cookies set via Google Tag Manager | Statistics about visits to the site. Set by FlowDule and Google. | Up to 2 years | Yes, statistics |
| flowdule-prefs | The clinic’s booking and widget pages; cookie | Remembers language, currency and theme. Set by the clinic and FlowDule. | Up to 1 year | No, only following your own choice, otherwise nothing is stored |
| Login token and pending token | The clinic’s pages and the app; cookie, localStorage or keychain | Signs you in and handles the two-step flow. Set by the clinic and FlowDule. | The lifetime of the token, pending approx. 5 min. | No, necessary for the login you have asked for yourself |
| shop-cart-* | The clinic’s webshop; localStorage | Remembers your shopping basket. Set by the clinic. | Until purchase or clearing | No, necessary for the basket, and the content is not reused |
| event-reg:* | The clinic’s event pages; sessionStorage | Retains the registration you have in progress. Set by the clinic. | The tab session | No, necessary for the registration you have in progress |
Cloudflare cf_clearance | The clinic’s booking pages; cookie set by Cloudflare after a passed security check | Remembers that the check was passed. Set by the clinic and FlowDule together with Cloudflare. | Up to 1 year, set by Cloudflare’s security setting | No, necessary for security |
| Cloudflare Turnstile | The clinic’s booking pages; third-party technology on the step where a booking or event registration is submitted, on the contact form and on the webshop’s back-in-stock notification form | Protects the forms against bots. From the clinic and FlowDule together with Cloudflare. Other pages do not call Turnstile. | Set by the supplier | No, necessary for security |
| CARTO | The clinic’s pages with maps; third-party call after your click | Retrieves map tiles for the map you open. The source is shown with the map. | Set by the supplier | No, only following your own click |
| Nominatim/OpenStreetMap | The clinic’s pages; address lookup via FlowDule’s own server | Finds the clinic’s address on the map. Your browser does not call the service, and the answers are stored temporarily at FlowDule. | Set by the supplier | No, your browser does not contact the service |
| @flowdule/ and @flowdule/draft/ | The app; localStorage | Stores settings and local drafts. Set by the clinic and FlowDule. Drafts may contain record data, so use secure devices. | Per key until logout, use or clearing | No, necessary for settings and drafts in progress |
| flowdule-comm, flowdule.video | The app; IndexedDB | Stores the communication key and the video background you choose. | Until cleared or removed | No, necessary or only following your own choice |
| Postcode.nl | The app, behind login; address lookup via FlowDule’s own server | Looks up clinic, location and event addresses. No client data is sent, and your browser does not call the supplier. | Set by the supplier | No, your browser does not contact the supplier |
Cloudflare __cf_bm | Flowdule.com, the clinic’s booking pages, the app and api.flowdule.com; cookie set by Cloudflare | Protects the pages against bots. Set by the clinic and FlowDule together with Cloudflare. | 30 minutes of inactivity | No, necessary for security |
Stripe (__stripe_mid, __stripe_sid, m) | Payment for booking, event, checkout and gift card; third-party cookies set by Stripe.js | Completes the payment and prevents fraud. Set by Stripe together with the clinic and FlowDule. | __stripe_mid about 1 year, __stripe_sid about 30 minutes, m about 2 years | No, loaded only when you start paying yourself |
5. Your consent, and how you change it
#On flowdule.com you meet the consent banner. It is just as easy to reject everything as to accept everything, and you can choose the purposes one by one. Nothing is selected in advance, and nothing that is not necessary is loaded, set or sent before you have chosen. If you reject, you can still use the site. Your choices are not used to recognise you across clinics, websites or purposes, and we store as little and for as short a time as possible.
You can always open the privacy settings again via the Usercentrics button at the bottom of the page and change or withdraw your consent. It is just as easy to withdraw consent as to give it. Withdrawal stops future use, but does not affect the use that was lawful beforehand. If we change our purposes or technologies materially, we ask you again.
You can also clear cookies and local storage in your browser or device settings. You are then signed out, and your language choice, your basket, a registration in progress and your local drafts disappear.
6. Who receives data
#Cloudflare protects the pages and the app against bots and therefore receives the information your browser sends when you visit them. Google receives statistics about visits to flowdule.com through Google Tag Manager and Google Analytics, but only if you have given consent. Stripe receives information about your payment when you pay. Usercentrics helps store your consent choice. If you open a map, your browser retrieves map tiles from CARTO.
Nominatim/OpenStreetMap and Postcode.nl are used for address lookups, but your browser never contacts them. The lookups go through FlowDule’s own server, and the answers are stored temporarily at FlowDule, so that the same lookup does not have to be made again.
7. Personal data
#Where the technologies process personal data, the Privacy Policy applies. There you can read about purposes, recipients, retention and your rights. On a clinic’s own pages, the clinic is responsible for the purposes it determines itself, and FlowDule is responsible for the technology and for giving the clinic the right settings and texts. The clinic shows its own privacy information on its client pages.
8. Contact and complaints
#If you have questions about cookies or about your personal data, you can write to privacy@flowdule.com. If you want to complain about the cookie rules, you can contact the Danish Agency for Digital Government (Digitaliseringsstyrelsen), and if you want to complain about the processing of your personal data, you can contact the Danish Data Protection Agency (Datatilsynet).
The Trust Center explains security and GDPR in plain language: Go to the Trust Center. Every document in force has a date and a version: See all documents.