Privacy Policy
Last Updated: Nov 10, 2026
Acceptance of Privacy Policy
Welcome to The Tubby Todd Bath Co. (“Tubby Todd” “we” or “us”) and our Privacy Policy (“Privacy Policy”). This Privacy Policy is important and affects your legal rights, so please read carefully.
By accessing or using https://tubbytodd.com/and various related websites and services (collectively, the “Tubby Todd Services”), you agree to be bound by this Privacy Policy and all of the terms incorporated herein by reference. By using the Tubby Todd Services and/or submitting or collecting any personal information via the Tubby Todd Services, you accept and expressly consent and agree to our practices surrounding the collection, use, and sharing of your personal information in accordance with this Privacy Policy. IF YOU DO NOT CONSENT AND AGREE WITH THE TERMS OF THIS PRIVACY POLICY, YOU CANNOT, AND WE DO NOT AUTHORIZE YOU TO, ACCESS, BROWSE, OR USE THE TUBBY TODD SERVICES.
Our processing of personal information, such as your name, address, e-mail address, or telephone number, will be undertaken consistent with the requirements of applicable privacy laws.
Information We Collect
2.1 Personal Information We Collect Directly from You
We receive personal information as described to you at the point of collection, pursuant to your consent, and/or when you voluntarily provide us with personal information, including:
(1) individual information (such as your e-mail address, address and phone number);
(2) company information (such as your company’s address); and
(3) other identifying information that you voluntarily choose to provide to us, including without limitation unique identifiers such as passwords, and personal information in messages you send to us.
We may also collect additional information, which may be personal information, as otherwise described to you at the point of collection or pursuant to your consent.
2.2 Information We Automatically Collect When You Use Our Site
In order to access and use certain areas or features of the Tubby Todd Services, you consent to our collection and use of certain information about your use of the Tubby Todd Services through the use of tracking technologies or by other passive means, including when you receive, open, engage, forward, and/or click through the Services. Your consent to our access and use of this “passively collected” information includes, but is not limited to, the domain name of the website that allowed you to navigate to the Tubby Todd Services, search engines used, the internet protocol (IP) address used, the length of time spent on the Tubby Todd Services, the pages you looked at on the Tubby Todd Services, other webpages you visited before and after visiting the Tubby Todd Services, the type of device and/or internet browser you have, the frequency of your visits to the Tubby Todd Services, and other relevant statistics (collectively “Traffic Data”).
How We Collect Information
3. How We Collect Information
We collect information (including personal information and Traffic Data) when you use and interact with the Tubby Todd Services, and in some cases from third party sources. Such means of collection include:
• When you access, use, or contact us through the Tubby Todd Services.
• When you voluntarily provide information through the Tubby Todd Services.
• If you use a location-enabled browser, we may receive information about your location and device.
• Through Cookies, Web Beacons, analytics services, and other tracking technologies (collectively, “Tracking Tools”).
Tracking Tools, Behavioral Advertising, and Opt Out Options
4.1 Tracking Tools
We may use tools outlined below in order to provide the Tubby Todd Services, advertise to, and better understand users.
• Cookies: “Cookies” are small computer files transferred to your device that contain information such as user ID, user preferences, lists of pages visited and activities conducted while using the Tubby Todd Services. We use Cookies to: (i) improve and tailor the Tubby ToddServices, (ii) customize advertisements, (iii) measure performance, (iv) store authentication so re-entering credentials is not required, (v) customize user experiences, and for (vi) analytics and fraud prevention. For more information on Cookies, including how to control your Cookie settings and preferences, visit http://www.allaboutCookies.org. You can also manage Cookies in your web browser (for example, Edge, Explorer, Chrome, Safari). If you choose to change your settings, you may find that certain functions or features of the Tubby Todd Services will not work as intended. The following details the types of Cookies we use and why we use them:o Essential Cookies. These Cookies are essential to enable you to move around a website and use its features. Without these Cookies, services you have asked for, like adding items to an online order, cannot be provided.o Performance Cookies. These Cookies collect information about how you use the Tubby ToddServices. Information collected includes, the Internet browsers and operating systems used, the domain name of the website previously visited, the number of visits, average duration of visit, and pages viewed. These Cookies do not collect information that personally identifies you and only collect aggregated and anonymous information. Performance Cookies are used to improve the user-friendliness of a website and enhance your experience.o Functionality Cookies. These Cookies allow the Tubby Todd Services to remember choices you make (such as your username, language preference, or the area or region you are in) and provide enhanced, more personal features. These Cookies can also be used to remember changes you have made to text size, fonts, and other customizable parts of the Tubby Todd Services. The information these Cookies collect may be anonymized, and they cannot track your browsing activity on other websites.
• Web Beacons: “Web Beacons” (a.k.a. clear GIFs or pixel tags) are tiny graphic image files embedded in a web page or email that may be used to collect information about the use of the Tubby Todd Services. The information collected by Web Beacons allows us to analyze how many people are using the Tubby Todd Services, using selected publishers’ websites, or opening emails, and for what purpose.
• Web Service Analytics: We may use third-party analytics services in connection with the Tubby Todd Services, including, for example, to register mouse clicks, mouse movements, scrolling activity and text typed into the Tubby Todd Services. We use the information collected from these services to help make the Tubby Todd Services easier to use and as otherwise set forth in Section 5 (How We Use Your Information). These analytics services generally do not collect personal information unless you voluntarily provide it.
• Mobile Device Identifiers: As with other Tracking Tools, mobile device identifiers help Tubby Todd learn more about our users’ demographics and Internet behaviors in order to personalize and improve the Tubby Todd Services. Mobile device identifiers are data stored on mobile devices that may track activities occurring on and through it, as well as the applications installed on it. Mobile device identifiers enable collection of personal information (such as media access control, address, and location) and Traffic Data.
4.2 Behavioral Advertising
We may use a type of advertising commonly known as interest-based or online behavioral advertising. This means that some of our partners use Tracking Tools to collect information about a user’s online activities to display Tubby Todd ads to the user based on the user’s interests (“Behavioral Advertising”). Our partners may include third-party advertisers and other third-party service providers, and such partners may collect information when you use Tubby Todd Services, such as IP address, mobile device ID, operating system, and demographic information. These Tracking Tools help Tubby Todd learn more about our users’ demographics and Internet behaviors.
4.3 Options for Opting out of Cookies and Mobile Device Identifiers
If we process Cookies based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any point in time by contacting us at privacy@tubbytodd.com. Please note, if you exercise this right, you may have to provide your consent on a case-by-case basis to enable you to utilize some or all of the Tubby Todd Services.
You may be able to reject Cookies and/or mobile device identifiers by activating the appropriate setting on your browser or device. Although you are not required to accept Tubby Todd’s Cookies or mobile device identifiers, if you block or reject them, you may not have access to all features available through the Tubby Todd Services.
• You may opt out of receiving certain Cookies by visiting the Network Advertising Initiative (NAI) opt out page or the Digital Advertising Alliance (DAA) opt out page, or by installing the DAA’s AppChoices app (for iOS; for Android) on your mobile device. When you use these opt-out features, an “opt-out” Cookie will be placed on your device indicating that you do not want to receive interest-based advertising from NAI or DAA member companies. If you delete Cookies on your device, you may need to opt out again. For information about how to opt out of interest-based advertising on mobile devices, please visit https://thenai.org/opt-out/mobile-opt-out/. You will need to opt out of each browser and device for which you desire to apply these opt-out features.• Even after opting out of Behavioral Advertising, you may still see Tubby Todd advertisements that are not interest-based (i.e., not targeted toward you). Also, opting out does not mean that Tubby Todd is no longer using Tracking Tools. Tubby Todd still may collect information about your use of the Tubby Todd Services even after you have opted out of Behavioral Advertising and may still serve advertisements to you via Tubby Todd Services based on information it collects through the Tubby Todd Services.
This Privacy Policy does not cover the use of Cookies and other Tracking Tools by any third parties, and we are not responsible for the privacy practices of any third party. Please be aware that some third-party Cookies can continue to track your activities online even after you have left the Tubby Todd Services.
4.4 “Do Not Track” (DNT) and Universal Opt-Out Preference Signals
Some web browsers (including Safari, Internet Explorer, Firefox, and Chrome) incorporate a “Do Not Track” (DNT) or similar feature that signals to web services that a visitor does not want to have their online activity and behavior tracked. If a web service operator elects to respond to a particular DNT signal, the web service operator may refrain from collecting certain personal information about the browser’s user. Not all browsers offer a DNT option and there is currently no industry consensus as to what constitutes a DNT signal. For these reasons, many web service operators, including Tubby Todd, do not proactively respond to DNT signals. For more information about DNT signals, visit https://fpf.org/thank-you-for-visiting-allaboutdnt-com/.
New standards are being developed for a Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC), which allow users with GPC-enabled browsers and devices to send a signal that will communicate the user’s request to opt-out of sales of their personal information and to opt-out of certain sharing of their personal information. The CPRA and other laws allow for the acceptance of Opt-Out Preference Signals such as the GPC, as an option for users to transmit an Opt-Out of selling/sharing personal information. If we detect and recognize such a signal from your device or browser, we will honor it.
Artificial Intelligence & Automated Decision-Making
We may employ artificial intelligence (AI) technologies (“AI Systems”), some of which are provided by third-party service providers, to enhance the performance and functionality of the Tubby Todd Services and/or support certain internal operations and customer facing services, which includes tailoring your experience through automated processing based on your activity using the Tubby Todd Services. For example, our product recommendation features analyze your usage patterns, preferences, and other interactions within our services to predict your interests and preferences. The insights gathered allow us to improve our service offerings, improve efficiency and accuracy, provide personalized content, and enhance user satisfaction and service quality.
This notice explains how we use AI Systems, what information they use, and how you may request additional information or human review. By using the Tubby Todd Services, you consent to the use of AI as described in this Privacy Policy. We encourage you to review your privacy settings regularly to ensure they continue to reflect your preferences.
We regularly monitor and update our use of AI Systems with personal information to ensure accuracy, fairness, and transparency. For more information on your rights and how we use AI, or if you have any concerns about automated decision-making processes, please contact us at privacy@tubbytodd.com.
5.1 How We Use AI Systems
We use AI Systems to:
• Recommend products. Our website uses AI-powered product recommendation features that suggest products you may like based on information such as the products you view, add to your cart, or purchase, and how you otherwise interact with the Tubby Todd Services.
• Improve our website. We may use AI Systems to help design, select, and evaluate tests of different versions of our website content and features (sometimes called “A/B testing”) so we can understand what works best for our customers.
• Assist with customer service. Our customer service chat feature uses an AI-powered automated assistant, provided by a third-party customer service platform, to respond to initial questions. When you use the chat feature, you are communicating with an automated assistant, not a person, unless and until your conversation is transferred to a member of our team. You may ask to speak with a member of our customer service team at any time by typing “agent” in the chat / emailing customercare@tubbytodd.com.
• Help prevent fraud. We and our service providers may use automated tools to analyze transaction and activity patterns to identify and flag potentially fraudulent or unauthorized activity, such as unusual orders or payment activity. Flagged activity is reviewed by our team before any order is canceled or account action is taken.
5.2 Data Collection by AI Systems
Our AI Systems may collect data that you provide directly or indirectly through your interactions with the Tubby Todd Services. The data collected may include, but is not limited to:
• Usage and purchase data, such as the pages and products you view, the links you click on, the searches you conduct on our platform, items added to your cart, and your order history.
• Device and connection information, including your IP address, browser type, language, and cookies that uniquely identify your browser or account.
• Approximate location information, determined through data such as your IP address or device’s GPS signal.
• Customer service communications, such as the content of your chat conversations and information you provide during them.
• Transaction information, such as order details, billing and shipping addresses, and payment-related information used to help prevent fraud.
We and our customer service platform provider collect and store chat conversations. We review them to respond to your requests, monitor quality, and improve our customer service, including the accuracy and helpfulness of our automated assistant. Our automated assistant may also improve over time based on prior customer service interactions with Tubby Todd. Please do not share sensitive information, such as payment card numbers or health information, through the chat feature.
5.3 Automated Decisions
We do not use AI Systems to make decisions based solely on automated processing that produce legal or similarly significant effects concerning you, such as decisions about access to credit, employment, housing, insurance, or essential goods or services . Our AI Systems use automated processing to support the following features and functions:
• Content curation and recommendations based on user preferences and historical activity.
• Fraud detection and prevention through behavior analysis to identify and flag unusual activity that deviates from typical usage patterns.
• Responding to initial customer service questions through an AI-powered automated assistant provided by a third-party customer service platform.
• Designing, selecting, and evaluating tests of different versions of our website content and features.
5.4 User Rights and Control
You have the right to:
• Obtain an explanation of any automated decision and challenge its basis.
• Opt-out of certain uses of your data, including profiling activities for personalized content or advertising.
• Access the personal information that the AI Systems use or contribute to, and request rectification or erasure of such personal information.
• Receive information about the logic involved in any automated decisions, as well as the significance and the envisaged consequences of such processing for you.
5.5 Safeguards and Oversight
We are committed to using AI responsibly. To this end, we implement the following safeguards:
• Regular auditing of our AI Systems for accuracy, fairness, and effectiveness.
• Human oversight to monitor AI decision-making and intervene as necessary to address anomalies or biases.
• Compliance with privacy regulations, ensuring that data used by AI is processed lawfully, transparently, and securely.
How We Use Your Information
We may use information (including information that has been de-identified and/or aggregated) to better understand who uses the Tubby Todd Services and how we can deliver a better user experience. We use information, including personal information, to provide the Tubby ToddServices and to help improve the Tubby Todd Services, to develop new services, and to advertise our services. Specifically, such use may include:
• Providing you with the products, services, and information you request.
• Providing customer support and corresponding with you.
• Sending you promotional communications, such as newsletters, offers, and marketing emails and text messages, in accordance with your preferences.
• Conducting surveys and requesting feedback or reviews.
• Creating customer profiles and tracking purchases and interactions to personalize your experience, including through the product recommendations described in Section 1.
• Showing you advertisements, including interest-based or online behavioral advertising, on our website and on third-party sites and platforms.
• Operating, maintaining, administering, and expanding the Tubby Todd Services, storing, organizing, and managing data, performing business analyses and testing (including A/B testing), and for other internal purposes.
• Combining information received from third parties with information that we have from or about you, and using the combined information for any of the purposes described in this Privacy Policy.
• Preventing, detecting, and investigating fraud, security incidents, and potentially illegal or prohibited activities.
• Meeting our compliance and legal obligations, and enforcing our Privacy Policy and other agreements.
•
By providing your e-mail and/or phone number and checking a box, clicking the “complete” button, or some other affirmative act, you are consenting to receive e-mails and/or calls and text messages, including live, prerecorded, and/or automated calls and messages, to that email or phone number. After signing up, you will receive a confirmation e-mail or text message from Tubby Todd on your mobile number. This agreement is not entered into as a term or requirement of any purchase or promotion. Normal message and data rates may apply. Message frequency may vary. Neither we nor the participating carriers guarantee that messages will be delivered. We may discontinue these programs at any time without notice.
Please see our our Messaging Terms (https://terms.pscr.pt/legal/shop/tubby-todd-bath-co/terms_of_service) and Messaging Privacy Policy (https://terms.pscr.pt/legal/shop/tubby-todd-bath-co/privacy_policy).
How We Share Your Information
Collection and Use of Sensitive Information
We have not collected sensitive personal information as defined under the CCPA from consumers within the last twelve months
We do not use or disclose sensitive personal information for purposes other than those specified in the CCPA/CPRA.
Storage and Security of Information
Any information you send to us electronically, while using the Tubby Todd Services or otherwise interacting with us, may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send us through any means is transmitted at your own risk.
Your Choices
10.1 Information You Provide
You can choose whether or not to provide personal information through the Tubby ToddServices. We will not discriminate against you for exercising any of your rights relating to your personal information and will not (i) deny you goods or services, (ii) provide you with a different level or quality of services, or (iii) charge you different prices for services for doing so.
10.2 California Privacy Disclosures
In the preceding 12 months, we collected and disclosed for a business purpose the following categories of personal information about California consumers:
| Category | Examples | Collected? | Categories of Recipients |
| Identifiers | Name, address, e-mail address, IP address | Yes | Organizations providing services to Tubby Todd |
| Personal information categories listed in the California Customer Records statute | Name, professional-related information; and employment-related information | Yes | Organizations providing services to Tubby Todd |
| Protected classification characteristics under California or federal law | Name, age, citizenship, nationality, ancestry, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, proof of eligibility to work | No | N/A |
| Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes | Organizations providing services to Tubby Todd |
| Internet or other similar network activity | Browsing history, search history, information on a consumer’s interaction with the Tubby ToddServices | Yes | Organizations providing services to Tubby Todd |
| Geolocation data | Location and movement data | Yes | Organizations providing services to Tubby Todd |
| Professional or employment-related information | Proof of eligibility to work, resumé, other professional-related information and employment-related information | No | N/A |
| Biometric information | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | No | N/A |
| Non-Public Education Information | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records | No | N/A |
| Inferences from the foregoing | Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Yes | Organizations providing services to Tubby Todd |
Purposes for Collection, Use, and Sharing. We use and disclose the personal information we collect for our commercial purposes, as further described in this Privacy Policy, including for our business purposes with our partners and service providers as follows:
• Legal compliance and auditing related to our interactions with you.• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and exercising our related rights.• Performing and improving out services (by us or our service provider(s)).• Internal operations.• Other one-time or short-term uses. • We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you. o We "sell" certain personal data to third parties, as that term is defined in the CCPA, including Personal Identifiers and Internet Activity. o You may opt-out of these data practices here: https://privacy.tubbytodd.com/... We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 18 years of age.
10.3 California Financial Incentive Notice
Consumers who sign up for our marketing emails receive a 10% discount on their first purchase. A consumer provides their email address and/or text consents to receive emails in exchange for a discount provided via coupon code. To opt in, a consumer must enter their email address into the form and submit it. A consumer may unsubscribe from our marketing emails by using the unsubscribe link in the email footer at any time. We calculate the offer's value and financial incentive by using the expense related to the offer.
Consumers who sign up for the Club Tub program may receive additional benefits described at https://tubbytodd.com/pages/club-tub. In order to provide you with the incentives described above, we use personal information about you including your [name, phone number, email address, purchase history, birthdate, etc.] to identify you as a member of the program and provide you with relevant messaging, experiences and deals. These financial incentives are reasonably related to the value of the data you provide. This value is based on the expense related to offering those free or discounted product or services. You have to right to withdraw from Club Tub at any time and may do so by emailing privacy@tubbytodd.com.
10.4 Individual Privacy Rights
If you are a California resident or a resident of another state that provides for individual privacy rights, you may have the following rights in relation to personal information we have collected about you, to the extent required by the applicable law and subject to verification:
Right to Know/Access: You have the right to request certain information about our collection and use of personal information about you as described below:
•The specific pieces of your personal information collected.
•The categories of your personal information collected.
•The categories of sources from whom your personal information is collected.
•The purpose for collecting your personal information.
o •The categories of third parties with whom we have shared your personal information.Right to Delete: You have the right to request that we delete certain personal information we have about you.o Freedom from Discrimination: You have the right to be free from unlawful discrimination for exercising any of your privacy rights.o Right to Correct: You have the right to request that we correct inaccurate personal information regarding the information you provide us.o Right to Restrict the Use of Sensitive Personal Information: You have the right to restrict the use of your sensitive personal information. o Right to Access Information on Automated Decision-Making: You have the right to access information collected through automated decision-making. Additionally, you can opt-out of our use of automated decision-making related to your personal information.
To make a request in relation to the above rights, please contact us using the information in Section 15 below or by filing out the following form: https://privacy.tubbytodd.com/.... To fulfil your request, we will need to verify your identity. Only you or someone legally authorized to act on your behalf may make a request related to your personal information. To designate an authorized agent, the authorized agent must provide sufficient information that allows us to reasonably verify that you authorize them to act on your behalf.
10.5 Canada, European Union and United Kingdom Privacy Rights
If our processing of your personal information (used interchangeably with “personal data” and similar terms of art outside the United States) is subject to GDPR, UK GDPR, and/or PIPEDA, and unless subject to an exemption, you may have the following rights with respect to your personal information:
Right of Access: You have the right to view and request copies of your personal information.
Right to Rectification: You have the right to request that your inaccurate or outdated personal information be updated or corrected.
Right to be Forgotten/Right to Erasure: You have the right to request your personal information be deleted, upon providing verification to us.
Right to Restrict Processing: You have the right to request the restriction or suppression of our processing of your personal information.
Right to be Informed: You have the right to be informed about the collection and use of your personal information.
Right to Data Portability: You have the right to ask for your personal information to be transferred to you or to another controller.
Right to Withdraw Consent: You have the right to withdraw previously given consent to process your personal information.
Right to Object: You have the right to object to the processing of your personal information.
Right to Object to Automated Processing: You have the right to object to decisions being made with your personal information solely based on automated decision making or profiling.
We will need to verify your identity to process any requests described in this Section and may deny your request if we are unable to verify your identity. Government or other identification may be required.
If you are a resident of the European Economic Area (“EEA”), when we process your personal information, we will only do so in the following situations:
• We need to use your information to perform our responsibilities under our agreement with you.
• We have a legitimate interest in processing your personal information. For example, we may process your personal information to send you marketing communications, to communicate with you about the Tubby Todd Services, and to provide and improve the Tubby Todd Services.
• We have your consent to do so.
If your personal information is subject to GDPR or UK GDPR, we will transfer personal information from the EEA to a location outside the EEA only when there has been a documented adequacy determination, or where we have confirmed adequate privacy protections. If your personal information is subject to PIPEDA, we will transfer personal information from Canada to locations outside Canada only where we have confirmed adequate privacy protections. If we transfer personal information to a third party acting as our agent, we will also obligate the third party to have adequate privacy protections in place.
How Long We Retain Your Information
We retain personal information about you for as long as necessary to provide you the Tubby Todd Services. In some cases, we retain personal information for longer, if doing so is necessary to comply with our legal obligations, or as otherwise permitted by applicable law. Afterwards, we retain some information in a de-identified and/or aggregated form but not in a way that would identify you personally.
Information Provided on Behalf of Children and Others
The Tubby Todd Services are not intended for use by children. Individuals under the age of 18 may not use the Tubby Todd Services. Tubby Todd does not knowingly collect any information from children. If you are under 18, do not attempt to register for the Tubby Todd Services or send us any personal information. By accessing, using and/or submitting information through the Tubby Todd Services, you represent that you are not younger than 18 and that you have authority to do so. If you are a parent or legal guardian of a minor child, you may, in compliance with this Privacy Policy, use the Tubby Todd Services on behalf of such minor child. Information you provide through the Tubby Todd Services on behalf of a minor child will be treated as personal information as provided herein. If you use the Tubby Todd Services on behalf of another person, regardless of age, you represent and warrant that you have authority to do so.
Shopify Network Intelligence
Our online store is hosted by Shopify, and Shopify collects and processes personal data about store customers for purposes including but not limited to: providing product and store customization, analytics, and advertising services. Information submitted by customers will be shared with Shopify as well as third parties that may be located in other countries. To learn more about Shopify’s data practices, please review their privacy policy.
Depending on your jurisdiction, you may opt out or object to Shopify’s processing of your data for certain use cases on their Privacy Controls page.
Third Party Web Services
The Tubby Todd Services may contain links or content from third party websites. A link or content from a third-party website does not mean we endorse that website, the accuracy of information presented, or the persons or entities associated with that website. If you visit a third-party website, you are subject to the privacy policy of the applicable third party and we are not responsible for the policies and/or practices of any third party. We encourage you to ask questions before you disclose your information to others.
Updates and Changes to Privacy Policy
The effective date of this Privacy Policy is set forth at the top of this webpage. We will notify you of any material change by posting notice on this webpage. Your continued use of the Tubby Todd Services after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the amended Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices. Any amended Privacy Policy supersedes all previous versions. IF YOU DO NOT AGREE TO FUTURE CHANGES TO THIS PRIVACY POLICY, YOU MUST STOP USING THE Tubby Todd SERVICES AFTER THE EFFECTIVE DATE OF SUCH CHANGES.
Contact Us
The data controller for the purposes of GDPR, UK GDPR, PIPEDA or other data protection laws is Tubby Todd. If you have any questions about this Privacy Policy, please contact us at privacy@tubbytodd.com or at:
Name Tubby Todd Bath Co.
Attn: Privacy
Address
Email: privacy@tubbytodd.com
Phone: 1-888-530-8732
US State Privacy Notices
California (CCPA)
This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered "personal information," such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.
Information we collect from you
- Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
- Internet Activity
- Commercial Information, including purchases
- Financial Information, including credit or debit card number
- Location Information, including general location data
- Protected Classifications and Other Personal Characteristics, including age
- Consumer Communications, including direct communications with our consumers
- Inferences from Other Data, including inferences created from other personal information collected
To the extent we process deidentified personal information, we will make no attempt to reidentify such data.
Information from other sources
We may collect personal information about you from third-party sources, including Survey Tool.
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Policy.
We generally retain data according to the guidelines below.| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Name, Email address, Online Identifiers, Internet Activity, General location data | We delete or anonymize data concerning your use of our website within 15 years of collecting it. |
| Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Online Identifiers, Purchases, Credit or debit card number, General location data | We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 15 years from your last purchase with us. We may keep data beyond this period in anonymized form. |
| Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number, Inferences created from other personal information collected | We keep customer feedback and correspondence with our customer service for up to 15 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form. |
| Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Telephone number, Purchases, Inferences created from other personal information collected | Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Purchases | We retain review, survey, and feedback data for up to 15 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers | We retain records related to privacy requests for a minimum of 24 months following the completion of the request. |
| Data we collect for security purposes, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
Why we process your information
We process personal information for the following business and commercial purposes:
- Conducting Surveys
- Creating Customer Profiles
- Data Storage
- Delivering Targeted Ads
- Fulfilling Customer Orders
- Meeting Compliance & Legal Requirements
- Operating our Website or Mobile Apps
- Organizing & Managing Data
- Preventing Fraud
- Processing Payments
- Providing Customer Support
- Sending Promotional Communications
- Tracking Purchases & Customer Data
How we disclose your information
We may disclose personal information about you for business and commercial purposes when you Consumers:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Customer Support Tools, Governance, Risk & Compliance Software, Payment Processors, Sales & Marketing Tools, Shipping Services, Survey Tool, and Web Hosting Services | Ad Networks, Business Operations Tool, Commerce Software Tools, Data Analytics Providers, Data Brokers, Payment Processors, Sales & Marketing Tools, and Shipping Services |
| Internet Activity | Commerce Software Tools, Governance, Risk & Compliance Software, Payment Processors, Sales & Marketing Tools, and Survey Tool | Ad Networks, Commerce Software Tools, Data Analytics Providers, Data Brokers, and Sales & Marketing Tools |
| Commercial Information | Business Operations Tool, Commerce Software Tools, Customer Support Tools, Payment Processors, Sales & Marketing Tools, and Survey Tool | Ad Networks, Commerce Software Tools, and Payment Processors |
| Financial Information | Business Operations Tool, Commerce Software Tools, Customer Support Tools, and Payment Processors | Payment Processors |
| Location Information | Sales & Marketing Tools and Survey Tool | Ad Networks, Commerce Software Tools, Data Analytics Providers, and Sales & Marketing Tools |
| Consumer Communications | Customer Support Tools, Governance, Risk & Compliance Software, Sales & Marketing Tools, and Survey Tool | None |
| Inferences from Other Data | Customer Support Tools | None |
Information “sharing” and “selling”
We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
We "sell" certain personal data to third parties, as that term is defined in the CCPA, including Personal Identifiers, Internet Activity, and Commercial Information.
You may opt-out of these data practices here.
We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.
Opt-out preference signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Your CCPA rights
Your privacy rights under the CCPA are described below. Make a Privacy Request by clicking here or by emailing us at privacy@tubbytodd.com. Alternatively, you can make a request by calling us toll-free at (888) 530 8732.
Right to Access
You have the right to access the specific pieces of personal information we have collected about you.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete your personal information from our records and notify our service providers, contractors, and third parties that you have requested deletion of your personal information.
Right to Non-Discrimination
If you exercise your CCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
You have the right to opt-out of any selling and sharing of your personal information.
You may exercise your right to opt-out here.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Limit the Use of Sensitive Personal Information
The Right to Limit does not apply because we do not use your sensitive personal information to infer characteristics about you.
Request Verification
Before we can respond to a privacy request, we will verify that you are the consumer who is the subject of the CCPA request. Requests to Opt-Out or Limit the Use of Sensitive Data (if applicable) do not require verification.
Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request.
Authorized Agent
A California resident's authorized agent may submit a rights request under the CCPA by emailing us at privacy@tubbytodd.com. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.
If you have trouble accessing this notice, please contact us at privacy@tubbytodd.com.
Contact Us
If you have any privacy-related questions or have trouble accessing this notice, please email privacy@tubbytodd.com.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the California Attorney General’s Office or the California Privacy Protection Agency.
Notice of Financial Incentive
Consumers who sign up for our marketing emails receive a 10% discount on their first purchase. A consumer provides their email address and/or text consents to receive emails in exchange for a discount provided via coupon code. To opt in, a consumer must enter their email address into the form and submit it. A consumer may unsubscribe from our marketing emails by using the unsubscribe link in the email footer at any time. We calculate the offer's value and financial incentive by using the expense related to the offer.
Consumers who sign up for the Club Tub program may receive additional benefits described at https://tubbytodd.com/pages/club-tub. In order to provide you with the incentives described above, we use personal information about you including your [name, phone number, email address, purchase history, birthdate, etc.] to identify you as a member of the program and provide you with relevant messaging, experiences and deals. These financial incentives are reasonably related to the value of the data you provide. This value is based on the expense related to offering those free or discounted product or services. You have to right to withdraw from Club Tub at any time and may do so by emailing privacy@tubbytodd.com.
Colorado (CPA)
This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the CPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the CPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
CPA Rights
Your CPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General's Office.
Connecticut (CTDPA)
This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CTDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@tubbytodd.com.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the CTDPA, including Personal Identifiers, Internet Activity, and Commercial Information. The specific third parties we've sold personal data to are: Google Analytics, Retention.com, Shopify Network Intelligence.
We process personal data for purposes of targeted advertising (as defined in the CTDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Large Language Model Training
We do not process personal data for the purpose of training large language models.
CTDPA Rights
Your CTDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CTDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.
Delaware (DPDPA)
This section provides additional information for Delaware residents under the Delaware Personal Data Privacy Act (DPDPA). The terms used in this section have the same meaning as in the DPDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the DPDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@tubbytodd.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the DPDPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the DPDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
DPDPA Rights
Your DPDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your DPDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to List of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed your personal data. You can also find that information in our Privacy Policy.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Delaware Attorney General's Office.
Florida (FDBR)
This section provides additional information for Florida residents under the Florida Digital Bill of Rights (FDBR). The terms used in this section have the same meaning as in the FDBR.
In general, the FDBR does not apply to our processing of your personal data, but it does require businesses to disclose when they sell consumers’ sensitive personal data.
We do not sell your sensitive personal data.
Montana (MCDPA)
This section provides additional information for Montana residents under the Montana Consumer Data Privacy Act (MCDPA). The terms used in this section have the same meaning as in the MCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MCDPA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MCDPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the MCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
The MCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MCDPA Rights
Your MCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Montana Attorney General’s Office.
Minnesota (MNCDPA)
This section provides additional information for Minnesota residents under the Minnesota Consumer Data Privacy Act (MNCDPA). The terms used in this section have the same meaning as in the MNCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MNCDPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MNCDPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the MNCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MNCDPA Rights
Your MNCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
- Affirm
- Afterpay
- AppLovin
- Aspire
- ChatGPT Ads
- FedEx
- Google Ads
- Google Analytics
- LoyaltyLion
- Meta Ads
- Microsoft Ads
- Microsoft Clarity
- NexPhase Capital
- PayPal - Pay with PayPal, Venmo, Pay Later
- Pinterest Ads
- QuickBooks
- Rebuy
- Reddit Ads
- Retention.com
- Shop Pay
- Skio
- Tiktok Ads
- Triple Whale
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MNCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Minnesota Attorney General's Office.
Iowa (ICDPA)
This section provides additional information for Iowa residents under the Iowa Consumer Data Protection Act (ICDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the ICDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the ICDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in ICDPA.
Sensitive Data
We do not process consumers’ sensitive data.
ICDPA Rights
Your ICDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller. We will respond to your request within 90 days, with a possible 45-day extension if reasonably necessary.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your ICDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the ICDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Sensitive Data:
We do not process consumers’ sensitive data.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Iowa Attorney General's Office.
Indiana (INCDPA)
This section provides additional information for Indiana residents under the Indiana Consumer Data Protection Act (INCDPA). The terms used in this section have the same meaning as in the INCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the INCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the INCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the INCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
INCDPA Rights
Your INCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your INCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the INCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Indiana Attorney General’s Office.
Kentucky (KYCDPA)
This section provides additional information for Kentucky residents under the Kentucky Consumer Data Privacy Act (KYCDPA). The terms used in this section have the same meaning as in the KYCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the KYCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the KYCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the KYCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
KYCDPA Rights
Your KYCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your KYCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the KYCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Kentucky Attorney General’s Office.
Nebraska (NDPA)
This section provides additional information for Nebraska residents under the Nebraska Data Privacy Act (NDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@tubbytodd.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NDPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the NDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NDPA Rights
Your NDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Nebraska Attorney General's Office.
New Hampshire (NHPA)
This section provides additional information for New Hampshire residents under the New Hampshire Privacy Act (NHPA). The terms used in this section have the same meaning as in the NHPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NHPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@tubbytodd.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NHPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the NHPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NHPA Rights
Your NHPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NHPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Hampshire Attorney General's Office.
New Jersey (NJDPA)
This section provides additional information for New Jersey residents under the New Jersey Data Privacy Act (NJDPA). The terms used in this section have the same meaning as in the NJDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NJDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@tubbytodd.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NJDPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the NJDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NJDPA Rights
Your NJDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NJDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Jersey Attorney General's Office.
Maryland (MODPA)
This section provides additional information for Maryland residents under the Maryland Online Data Privacy Act (MODPA). The terms used in this section have the same meaning as in the MODPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MODPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@tubbytodd.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MODPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the MODPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MODPA Rights
Your MODPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Obtain List of Categories of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data. You can also find that information in our Privacy Policy.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed or required by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MODPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Maryland Attorney General’s Office.
Rhode Island (RIDTPPA)
This section provides additional information for Rhode Island residents under the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). The terms used in this section have the same meaning as in the RIDTPPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the RIDTPPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the RIDTPPA, including Personal Identifiers, Internet Activity, and Commercial Information. The specific third parties we've sold personal data to are: Google Analytics, Retention.com, Shopify Network Intelligence.
We process personal data for purposes of targeted advertising (as defined in the RIDTPPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
RIDTPPA Rights
Your RIDTPPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your RIDTPPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Rhode Island Attorney General’s Office.
Nevada (NPICICA)
This section provides additional information for Nevada residents under the Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA), Nevada Revised Statutes Chapter 603A. The terms used in this section have the same meaning as in NPICICA. This section does not apply to data that is not considered "covered information" as defined in the NPICICA.
NPICICA Rights
Your NPICICA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to review any covered information we have collected about you online.
Right to Delete
You have the right to request that we delete any covered information we have collected about you online. We will permanently delete any such covered information from our records and direct our processors to do the same. However, we may retain your covered information if it is necessary for certain purposes, as allowed by law.
Right to Correct
You have the right to correct inaccuracies in any covered information we have collected about you online, taking into account the nature of the data and our purposes for processing it.
Right to Opt-Out
We do not receive monetary consideration in exchange for your covered information and therefore do not sell your covered information as defined in the NPICICA.Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Third-Party Tracking
We use cookies and other technologies that allow third parties to collect covered information about your online activities over time and across different Internet websites or online services.
Oregon (OCPA)
This section provides additional information for Oregon residents under the Oregon Consumer Privacy Act (OCPA). The terms used in this section have the same meaning as in the OCPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the OCPA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the OCPA, including Personal Identifiers, Internet Activity, and Commercial Information. We do not knowingly "sell" the personal data of Oregon residents under the age of 16.
We process personal data for purposes of targeted advertising (as defined in the OCPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you. We do not knowingly process personal data of Oregon residents under the age of 16 for purposes of targeted advertising.
You may opt-out of these data practices here.
Profiling
The OCPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
OCPA Rights
Your OCPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
- Affirm
- Afterpay
- AppLovin
- Aspire
- ChatGPT Ads
- FedEx
- Google Ads
- Google Analytics
- LoyaltyLion
- Meta Ads
- Microsoft Ads
- Microsoft Clarity
- NexPhase Capital
- PayPal - Pay with PayPal, Venmo, Pay Later
- Pinterest Ads
- QuickBooks
- Rebuy
- Reddit Ads
- Retention.com
- Shop Pay
- Skio
- Tiktok Ads
- Triple Whale
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your OCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Oregon Attorney General’s Office.
Tennessee (TIPA)
This section provides additional information for Tennessee residents under the Tennessee Information Protection Act (TIPA). The terms used in this section have the same meaning as in the TIPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TIPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the TIPA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the TIPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TIPA Rights
Your TIPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your TIPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Tennessee Attorney General's Office.
Texas (TDPSA)
This section provides additional information for Texas residents under the Texas Data Privacy and Security Act (TDPSA). The terms used in this section have the same meaning as in the TDPSA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TDPSA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the TDPSA, including Personal Identifiers, Internet Activity, and Commercial Information.
We process personal data for purposes of targeted advertising (as defined in the TDPSA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
The TDPSA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TDPSA Rights
Your TDPSA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded, excessive, or repetitive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your TDPSA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Texas Attorney General’s Office.
Utah (UTCPA)
This section provides additional information for Utah residents under the Utah Consumer Privacy Act (UTCPA). The terms used in this section have the same meaning as in the UTCPA. This section does not apply to information that is not considered "personal data," such as deidentified, aggregated, or publicly available information as defined in the UTCPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the UTCPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in UTCPA.
UTCPA Rights
Your UTCPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or the request is manifestly unfounded or excessive, or it is part of an organized effort to harass, disrupt, or place undue burden on our business, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data you have provided to us. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your UTCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the UTCPA.
Targeted Advertising:
Exercise your right to opt-out here.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Utah Division of Consumer Protection.
Virginia (VCDPA)
This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the VCDPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the VCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in VCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
VCDPA Rights
Your VCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your VCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the VCDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Virginia Attorney General’s Office.
