Privacy Policy

Last Modified: September 4, 2023

Introduction

Todyl, Inc. values its customers and respects your privacy, and wants you to be familiar with how we collect, use and disclose information. This Privacy Policy describes our practices in connection with information that we collect through our website currently located at www.todyl.com (the “Site”).

Please note that this Privacy Policy does not apply to information collected through any means other than the Site. We encourage you to read this Privacy Policy before using the Site or providing information to us. By using the Site or providing information to us, you acknowledge that we may collect, use and disclose your information in accordance with this Privacy Policy.

Updates to This Privacy Policy

We may change this Privacy Policy at any time. Please refer to the “Last Updated” legend at the top of this page to determine when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective on the “Last Updated” date indicated above. Using the Site or providing any information to us after such changes will mean that you accept the revised Privacy Policy.

Personal Information

We collect two types of information through the Site: Personal Information and Other Information. “Personal Information” is information that identifies you as a specific individual. Other Information is discussed separately below, under the “Other Information” heading. Personal Information We Collect We and our service providers may collect the following Personal Information:
IF YOU SUBMIT ANY PERSONAL INFORMATION RELATING TO ANYONE OTHER THAN YOURSELF, YOU REPRESENT THAT YOU HAVE OBTAINED FROM THAT PERSON ANY CONSENTS NECESSARY FOR THE USE AND DISCLOSURE OF THAT PERSON’S PERSONAL INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.

How We Use Personal Information

We and our service providers may use Personal Information as follows:

How Personal Information Is Disclosed

We and our service providers may disclose Personal Information as follows:
  • To our third-party service providers that provide services such as hosting, data storage, data analysis, payment processing, order fulfillment, IT services and infrastructure, customer service, email delivery, credit card processing, auditing and other similar services, to enable them to provide services.
  • To third-party sponsors of sweepstakes, contests and similar promotions.
  • To identify you to anyone to whom you send messages through the Site.
  • As a result of posts or other disclosures by you, including on message boards, chats, profile pages and blogs, and other services through which you are able to post information and materials. Please note that any information and materials that you post or disclose through such services will become public, and may be available to visitors to the Site and to the general public; we urge you to be very careful when deciding to disclose your Personal Information, or any other information, on or through the Site.
  • To one or more third parties in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock, including in connection with any bankruptcy or similar proceeding.
  • As we believe to be necessary or appropriate: (1) under applicable law; (2) to comply with legal process; (3) to respond to requests from public and government authorities; (4) to enforce agreements that we have with you or others; (5) to protect our operations or those of any of our Affiliates; (6) to protect our rights, privacy, safety or property, or that of you, our Affiliates or others; and (7) to allow us to pursue available remedies or limit the damages that we may sustain.

Legal Basis for Data Processing

We use and process information in compliance with all applicable data privacy laws. We process data on this Site to fulfill our obligations under the Terms and Services as well as with the consent of those who visit this Site and thus consent to the Terms and Services.

Other Information

“Other Information” is any information that does not identify you as a specific individual.

Other Information we collect

We and our service providers may collect Other Information such as:

How We Collect Other Information

We and our service providers may collect Other Information in a variety of ways, including:

How We Use and Disclose Other Information

We may use and disclose Other Information for any purpose. In some instances, we may combine Other Information with Personal Information (such as combining your ZIP code with your name). If we combine any Other Information with Personal Information, the combined information will be treated by us as Personal Information while it is so combined.

International Transfers of Personal Information

We are headquartered in the United States, and our Site and Services are primarily designed and intended for audiences within the United States. If you reside outside of the United States and access our Site / Services, you acknowledge that your information will be collected and transmitted to the United States. Please do not use our Services / Site ifyou do not agree to this transfer. Many of our third-party service providers such as Google,Meta, and Twitter [WR1] are U.S. companies. Data transmitted to those service providers are done inaccordance with their respective privacy policies.

Third Parties and Third-Party Sites

If you submit any information, including Personal Information, to any third party — for example, via a third-party software application or service, including any social media service or payment processing service, that is included in, available through or linked from the Site — then such third party’s collection, use and disclosure of such information may be governed by its privacy policy, and will not be governed by our Privacy Policy. We recommend that you familiarize yourself with the privacy policies and practices of any such third parties.

EXCEPT AS REQUIRED BY APPLICABLE LAW, WE ARE NOT RESPONSIBLE FOR THE INFORMATION COLLECTION, USAGE, DISCLOSURE OR OTHER PRACTICES OF ANY THIRD PARTIES, INCLUDING OUR AFFILIATES, THIRD-PARTY SERVICE PROVIDERS (INCLUDING PAYMENT CARD PROCESSORS AND RELATED SERVICE PROVIDERS), ANY THIRD-PARTY SOCIAL MEDIA PLATFORM, ANY THIRD PARTY MAKING AVAILABLE THE DEVICES OR OPERATING SYSTEMS FOR WHICH THE SITE IS AVAILABLE, AND ANY THIRD PARTY OPERATING ANY SITE TO WHICH THE SITE CONTAINS A LINK. THE INCLUSION OF A LINK ON THE SITE DOES NOT IMPLY THAT WE ENDORSE THE LINKED SITE.

Third-Party Advertisers

We may use third-party advertising companies to serve ads when you visit the Site or after you leave. We may share information with such companies in accordance with the terms and conditions set forth in this Privacy Policy. Please note that these companies may use information about your visit to the Site to provide advertisements about goods and services that may interest you. In the course of serving advertisements to the Site, these companies may place or recognize a unique cookie on your device. If you would like more information about this practice, and to know your choices about not having this information used by these companies, please visit https://thenai.org/opt-out/.

“Do Not Track" Signals

Please note that the Site will continue to operate as described in this Privacy Policy, whether or not a “Do Not Track” signal or similar mechanism is received from your browser.

Security

We seek to use reasonable organizational, technical and administrative measures to protect Personal Information under our control. Unfortunately, no data storage or data transmission over the Internet can be 100% secure. Please also be aware that we may use third-party cloud service providers that provide hosting, data storage and other services pursuant to standard terms and conditions that may be non-negotiable; these service providers have informed us or the general public that they apply security measures they consider adequate for the protection of information within their systems, or they have a general reputation for applying such measures.


Please exercise caution in submitting Personal Information through the Site, especially if you are accessing the Site using a WiFi hotspot or public network. If you have reason to believe that your use of the Site is no longer secure (for example, if you feel that the security of any account that you might have with us has been compromised), please let us know immediately, using the mechanisms described in the “Contacting Us” section below.

How Long We Keep Your Data

We retain your personal information for as long as necessary for the purpose for which it is collected, to provide you with our Services such as our Site.

Your Privacy Rights

Individuals may have certain rights over their personal information under particular laws. Please see the following sections regarding the rights you may have over your information:

1. Your Rights under the EU General Data Protection Regulation (“GDPR”) and United Kingdom General Data Protection Regulation (“UKGPDR”)

For residents from the United Kingdom (UK), or the European Economic Area (EEA) and Switzerland, this section allows you to exercise your rights under the European Union’s (EU) General Data Protection Regulation (GDPR) and the UK’s version of the GDPR (UK GDPR), as applicable. Although applicable data protection legislation in relevant jurisdictions may afford similar rights, there may be circumstances where some of these rights do not apply under or are modified by, local law. We take reasonable steps to allow you to correct, amend, delete or limit the use of your personal information, and exercise other rights available under applicable law. We therefore inform you that, where applicable under relevant law, you are entitled to the following:  

i. Right to Access /Disclosure: The right to have access to your personal data upon simple request – that is, you may receive a copy of such data upon receipt of a verifiable request, along with other information related to the processing. 

ii. Right to Correction/Rectification: The right to correct your personal data if you find it is inaccurate, incomplete or obsolete. 

iii. Right to Erasure / “Right to be Forgotten”: The right to obtain the deletion of your personal data in the situations set forth by applicable data protection law.

iv. Withdrawal of Consent to Processing: The right to withdraw your consent to the data processing without affecting the lawfulness of processing, where your personal data has been collected and processed based on your consent and not any other basis. 

v. Right to Object: The right to object to the processing of your personal data under certain circumstances, in which case we may ask you to justify your request by explaining to us your particular situation. 

vi. Right to Restrict Processing: The right to request limits to the processing of your data, when allowed by and in circumstances set forth under applicable law, as well as to object to any direct marketing from us. 

vii. Right to Restrict Automated Individual Decision-Making (Profiling): The right to not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you. 

viii. Right to Data Portability: The right to have your personal data directly transferred by us to a third-party processor of your choice (where technically feasible; may be limited to situations when processing is based on your consent).To exercise any of these rights, please contact us at the contact information listed in the “Contacting Us” section below. Note that we may ask you to verify your identity before responding to such requests.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.

Please bear in mind that if you exercise such rights, this may affect our ability to provide our products and services.

2. Your Rights Under the Connecticut Data Privacy Act

For residents from the state of Connecticut, this section allows you to exercise your rights under the Connecticut Data Privacy Act (CTDPA) as applicable. Although applicable data protection legislation in relevant jurisdictions may afford similar rights, there may be circumstances where some of these rights do not apply under or are modified by, local law. We take reasonable steps to allow you to correct, amend, delete or limit the use of your personal information, and exercise other rights available under applicable law. We therefore inform you that, where applicable under relevant law, you are entitled to the following: 

i. Right to Access / Disclosure: The right to have access to your personal data upon simple request – that is, you may receive a copy of such data upon receipt of a verifiable request, along with other information related to the processing.

ii. Right to Correction/Rectification: The right to correct your personal data if you find it is inaccurate, incomplete or obsolete.

iii. Right to Erasure / “Right to be Forgotten”: The right to obtain the deletion of your personal data in the situations set forth by applicable data protection law.

iv. Right to Object: The right to object to the processing of your personal data under certain circumstances, in which case we may ask you to justify your request by explaining to us your particular situation.

v. Right to Data Portability: The right to have your personal data directly transferred by us to a third-party processor of your choice (where technically feasible; may be limited to situations when processing is based on your consent).

To exercise any of these rights, please contact us at the contact information listed in the “Contacting Us” section below. Note that we may ask you to verify your identity before responding to such requests.

Choices and Access

Your Choices Regarding Our Use and Disclosure of Your Personal Information We give you choices regarding our use and disclosure of your Personal Information for marketing purposes. You may opt-out from:
We will try to comply with your request(s) as soon as reasonably practicable.

How You Can Access or Change Your Personal Information

We welcome your willingness to update your information with us. You may review or ask us to update your Personal Information by visiting your “My Account” page on the Site.
In your request, please make clear what information you would like to have changed. We will try to comply with your request as soon as reasonably practicable. We are not responsible for changing information in the databases of Affiliates and other third parties with which we have already shared your Personal Information, and, if we comply with your request, we may still need to retain certain information for recordkeeping and other purposes.

Use of Site by Minors

The Site is not directed to individuals under the age of thirteen. If you are under the age of thirteen, please do not use the Site or provide any Personal Information to us.

Jurisdiction

The Site is controlled and operated by us from the United States, and is not intended to subject us to the laws or jurisdiction of any state, country or territory other than that of the United States.

Contacting Us

If you have any questions about this Privacy Policy, please contact us by email at [email protected], or please write to the following address:
1631 Wazee St
Suite 400
Denver, CO 80202
Please note that emails are not always secure, so please do not include credit card information or other sensitive information in any email to us.