Flex Ltd.
Information Technology
20
out of 100. Number 494 of 512, counting from the worst.
Where Flex Ltd. does well
- Arbitration 0 of 20. Nothing found.
- Renewals 0 of 20. Nothing found.
- Flex explicitly states it does not sell or share the Personal Information of California residents and has not done so in the past twelve months.
- There is no public website Terms of Use on flex.com at all, so site visitors face no forced arbitration clause or class-action waiver.
- The site runs a cookie consent declaration covering categories like Act-On marketing tracking, and its VWO analytics cookies are fully anonymized.
- Erasure, portability, objection, and do-not-sell/opt-out rights are all described with a working contact channel (Global Data Privacy Officer / 1-866-772-7470).
Browse flex.com anonymously, then fill in one contact form, and Flex links all your earlier anonymous browsing (pages visited, device info, ad interactions, inferred interests) back to your name and email — and builds a user profile from it.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Browse flex.com anonymously, then fill in one contact form, and Flex links all your earlier anonymous browsing (pages visited, device info, ad interactions, inferred interests) back to your name and email — and builds a user profile from it.
If a website user does submit their data via one of our forms and they have cookies installed on their browser, all behavioural and web log data will be associated back to them.
-
Flex shares visitor behavior with third-party ad companies so you can be tracked and re-targeted with ads after leaving flex.com, including via 'web beacons placed by third party advertisers' on their pages.
We may use other cookies to target and re-target visitors to our websites with digital advertising that is most relevant to the user... Using existing cookies from many sites already on your computer, we partner with 3rd party companies to deliver advertising to specific computers.
-
Flex can change its privacy terms at any time without notifying you — the changes are effective the moment they're posted, and the burden is on you to keep checking back.
From time to time, we may change and/or update this Notice. If this Notice changes in any way, we will post an updated version on this website. We recommend you regularly review this website to ensure that you are always aware of our information practices and any changes to such. Any changes to this Notice will go into effect on posting to this page.
-
There's no concrete deletion schedule — Flex keeps your data indefinitely as long as any legal claim is still possible, and the internal retention schedule it mentions isn't published anywhere.
We will retain your Personal Information for as long as required to perform the purposes for which the data was collected... your Personal Information will be kept for the duration of our relationship with you and... as long as it is necessary for you to be able to bring a claim against us and for us to be able to defend ourselves against any legal claims. This will generally be the length of the relationship plus the length of any applicable statutory limitation period under local laws.
-
Your personal data can be moved to servers in places like Bermuda, the Cayman Islands, Mauritius and other jurisdictions Flex openly admits don't protect data as strongly as Europe or the UK.
The countries to which we transfer data outside of the EEA, outside the UK and outside Switzerland include: Bermuda, British Virgin Islands, Cayman Islands, China, Costa Rica, Hong Kong, India, Indonesia, Labuan, Malaysia, Mauritius, Mexico, Philippines, Saudi Arabia, Singapore, Taiwan, Ukraine and the USA. ... Some of these countries may not have the equivalent level of protection under their data protection laws as in the EEA, as in the UK and as in Switzerland.
-
Even if you never give Flex your data, it buys it — your details can arrive from marketing lists, credit bureaus, and social-media scraping — including criminal proceedings data in some circumstances.
We collect personal data from our business contacts directly or from the following sources: ... Social media sites such as LinkedIn and other public internet sites; ... Credit reference agencies, insurance information bureaus, and government or financial institutions; and ... commercially available marketing lists, registries, or public records.
How these were found
Flex Ltd. is a B2B electronics manufacturer with a thin corporate website, so there is little consumer-facing legal text to evaluate; the score is intentionally modest. Sources read directly via browser_open on 2026-10-01: flex.com/other/privacy-policy and flex.com/company/policies/california-privacy-policy (both current, no effective-date line published; the California notice references rights effective January 1, 2023). No Website Terms of Use was found anywhere on flex.com (checked footer links and flex.com/company/policies) — hence arbitration 0 and autorenew 0. Early searches returned unrelated companies (getflex.com rent-payment fintech, Indeed Flex, flex.so, etc.); those were excluded.
These notes come from the original draft and are not independent verification.