United States Regional Privacy Policy

December 9, 2025

This United States Regional Privacy Policy (“U.S. Notice”) supplements our Privacy Policy (together, the “ToolDay Privacy Policies”). This US Notice is for individuals residing in certain US states and is designed to help you better understand how we collect, use, and disclose your personal information and, depending on where you reside, how to exercise your rights under state privacy laws in the US. This US notice applies to the residents of California, Colorado, Virginia, Utah and Connecticut and provides additional information in accordance with the California Consumer Privacy Act (as amended), the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively, the “State Privacy Laws”). For California and Colorado residents, please see the following additional disclosures:

California Notice
Colorado Notice

Your Rights

Please note that the rights listed below may be limited to residents of the states listed above, and may not be available to all users. In addition, we may not be able to process your request to exercise your rights if you do not provide us with sufficient details or allow us to confirm your identity. In some cases, we may provide a different privacy policy to certain categories of residents of these states, such as job applicants, in which case that privacy policy will apply instead of this US Notice.Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. However, these rights are not absolute and may be subject to certain exceptions. Therefore, we may decline your request in certain cases as permitted by law.

Right to Know. You can request the following information about how we have collected and used your personal information during the last 12 months: The categories of personal information that we have collected; the categories of sources from which we collected personal information; our business or commercial purpose for collecting and/or selling personal information; the categories of third parties with which we share personal information; the categories of personal information that we “sold” (as defined in the State Privacy Laws, as applicable) or disclosed for a business purpose; and the categories of third parties to whom the personal information was sold or disclosed for a business purpose.
Access. You can request a copy of the personal information that we have collected about you.
Correction. You can ask us to correct any inaccurate personal information that we have collected about you.
Deletion. You can ask us to delete the personal information that we have collected about you.
Opt-out Rights.

- Opt-out of certain processing for targeted advertising purposes. You can opt out of certain processing of personal information for targeted or interest-based advertising purposes, including sharing personal information for cross-contextual behavioral advertising.
- Opt-out of other “sales” of personal data. You have the right to opt out of the Sale of your personal information. “Sale” is defined broadly under California, Virginia and Connecticut Privacy Laws to include the transfer of personal information to third parties in exchange for anything of value.

Certain states offer the right to opt-out of automated processing or profiling of personal data used to make significant decisions affecting you (such as legal, employment or credit decisions). To the extent we engage in automated processing or profiling to prevent, detect, protect against or respond to fraudulent activity, we are not required to offer the right to opt-out. We otherwise do not engage in profiling or automated decision making as defined under the State Privacy Laws.

Exercising Your Rights

If you would like to correct, access, or delete your personal information, you can do so via your ToolDay account settings as explained here. Alternatively, you can exercise any of the rights above by contacting us at: help@ToolDay.us

Once you contact us to exercise any of your rights, we will confirm receipt of your request. Limiting use of, or deleting, your personal information may impact features and uses that rely on that information.

You can find information about consumer requests we received and processed under the CCPA, and similar laws, during the previous calendar year [here].

Exercising your right to opt-out of the “sale” or “sharing” of your Personal Information or processing of your Personal Information for targeted advertising. While we do not sell personal information for money, like many companies, we use services that help deliver interest-based ads to you. The State Privacy Laws may classify our use of some of these services as “selling” or “sharing” your personal information with providers of these services. You can opt out of the sale or sharing of personal information for interest-based ads, and related tracking, by clicking the “Privacy Settings” link (or for California residents, the “Do Not Sell or Share My Personal Info” link) at the footer of our homepage or through your account privacy settings. We do not have actual knowledge that we “sell” or “share” the personal information of consumers under 16 years of age for the purposes of interest based advertising. Please note that you may still receive generalized ads after opting out of targeted advertising.

Do Not Track Signals

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no industry consensus as to what site and app operators should do with regard to these signals. Accordingly, unless and until the law is interpreted to require us to do so in your state or country, we do not monitor or take action with respect to “Do Not Track” signals. For more information on “Do Not Track,” visit http://www.allaboutdnt.com.

Verification; Authorized agents. We may need to verify your identity in order to process your right to know, access, appeal, correction, or deletion requests, and we reserve the right to confirm your identity and residency, and in our discretion, deny your request if we are unable to verify your identity or residency. As a part of this process, we may require a copy of your valid, government-issued identification. You may designate an authorized agent to make a request on your behalf, in which case we will require valid government-issued identification for both yourself and the authorized agent, and we may verify the authenticity of the request directly with you.

Appeals; Non-Discrimination; and Accessibility. In certain states, you may have the right to appeal our decision regarding a request related to these rights. If you wish to appeal a decision, please contact us through any of the methods in Section 15 (Data Controller Contact Information) of our Privacy Policy. We will not discriminate against you for exercising any of these rights. We will not discriminate against you for exercising any of your rights. This means, for example, we won’t deny you goods or services, provide you with a different level or quality of services, or charge you different prices or rates for services.

If you need further assistance, or if you have a visual impairment or otherwise need an accommodation and would like to access this policy in an alternative format, please contact us using one of the channels listed in Section 15 (Data Controller Contact Information) of our Privacy Policy.

California Consumer Privacy Notice

This California Consumer Privacy Notice (“California Notice”) supplements ToolDay’s U.S. Regional Privacy Notice and applies to personal information ToolDay collects online about California consumers. This California Consumer Privacy Statement uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”).

1. Notice of Collection and Use of Personal Information

We may collect and may have collected during the 12-month period prior to the Last Updated date of this California Notice the following categories of personal information about you:

Identifiers: information that identifies you, including your legal name, email address, unique personal identifiers (such as a device identifier and/or IP address), email address, account name (e.g. shop name), government issued ID numbers (e.g. drivers license) which we may use to verify your identity when we onboard you as a seller; and/or tax identification number when setting up your account to sell on ToolDay;
Other Records: such as phone number, billing address, or credit or debit card information, and any other personal information covered by Cal. Civ. Code §1798.80(e) (which may overlap with other categories listed here);
Demographic Information: such as your age or gender, or, where you have provided such information to ToolDay voluntarily, demographic information about your race, ethnicity, sexual orientation, or gender identity, provided in relation market research or surveys we conduct. This category includes information that may qualify as protected classifications under other California or federal laws.
Commercial Information: including purchases, products sold, and/or your interaction with the Services.
Internet or other Network activity: information including your interactions with our Services and what led you to our Services (including traffic related information) ; device type and/or identifier, operating system and version, browser type and settings and cookie-related data (e.g. cookie ID).
Sensory Information: data categorized as visual data, such as pictures or videos posted on our Service.
Location Data: your general location provided through location enabled services.
Inferences: inferences based on personal data about you, including your interests, watches, and favorites; inferred information about your demographic category used to create marketing segments or profiles.

2. The Sources and Purposes for Our Collection

We collect the categories of personal information described in this California Notice from the sources described in Sections 3-5 of our Privacy Policy (Information We Collect About You, Information You Provide to Us, and Information We Collect Through Automatic Data Collection Technologies), which includes collecting information directly from you, your devices, and our partners. The categories of sources include the following: you, ToolDay Members, advertising networks, service providers (including internet service providers), social networks, government entities or other public sources, marketing and business partners, and our vendors and suppliers.

We use these categories of personal information for our business and commercial purposes as described throughout the ToolDay Privacy Policies, including for the following purposes: providing the Services, processing orders and transactions, internal business analytics, tailoring and personalizing the Services to you, for advertising and marketing purposes; undertaking activities to verify or maintain the quality, integrity, and safety of our Services and to improve, upgrade, or enhance them; maintaining or servicing accounts, providing customer service, verifying customer information, processing payments, and providing analytics services. We do not collect or process sensitive personal information for purposes of inferring characteristics about consumers.

3. Sale or Sharing of Personal Information

We do not sell your personal information in exchange for monetary compensation. We may share your personal information by allowing certain third parties (such as online advertising services) to collect personal information via automated technologies on our Websites and Apps for cross-context behavioral advertising purposes. This kind of sharing may be considered a “sale” under California law when the personal information is exchanged for non-monetary consideration. You have the right to opt out of these types of disclosures of your information.

We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this California Notice) the following categories of personal information about you to online advertising services or networks:

Identifiers
Commercial Information
Internet or Network Activity
Inferences

You can opt out of allowing us to share your data for purposes of cross-context behavioral advertising by clicking the “Do Not Sell or Share My Personal Info” link at the footer of our homepage or through your account privacy settings. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

4. Disclosure of Personal Information for a Business Purpose

We share personal information with service providers, contractors, and other third parties. The following lists the categories of personal information that have been disclosed (and may have been disclosed during the last 12-months) for a business purpose and the categories of recipients who have received this personal information. Please note that not every one of the following categories may apply to your personal information. Categories of personal information include Identifiers, other records, commercial information, Internet or other electronic network activity information, geolocation information, sensory information, and inferences derived from personal information. The categories of third parties include our corporate affiliates, our buyers and sellers, our vendors and other service providers, professional service firms (like our auditors or law firms), our marketing and business partners, online advertising services, analytics providers, social networks, internet service providers, and government entities.

In addition to the categories of third parties identified above, during the past 12 months,we may have disclosed personal information about you to government entities for the purposes listed in our Privacy Policy, and third parties in connection with corporate transactions, such as mergers, acquisitions or divestitures.

5. California Consumer Privacy Rights

Please see the “Exercising Your Rights” section of our United States Regional Privacy Policy and Section 8 (Choices and Rights About How We Use and Disclose Your Information) of our Privacy Policy for information about your privacy rights and how to exercise them.

6. Shine the Light

California residents are entitled to ask for a notice describing what categories of personal information we share with third parties for their own direct marketing purposes. ToolDay does not share any personal information to third parties for their own direct marketing purposes, unless you otherwise consent to it and/or direct it. If you have questions about these practices, or would like to make a request, you can contact us through one of the channels listed in Section 15 (Data Controller Contact Information) of our Privacy Policy. In your request, please include the statement “Shine the Light Request,” and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

Colorado Privacy Notice

This Colorado Privacy Notice (“Colorado Notice”) supplements ToolDay’s U.S. Regional Privacy Notice and applies to personal information ToolDay collects online about Colorado consumers. We adopt this Supplemental Notice to comply with the Colorado Privacy Act (the “CPA”). This Colorado Notice uses certain terms that have the meanings given to them in the CPA.

1. Collection and Use of Personal Information

Please see Sections 3 (Information We Collect About You) through 6 (How We Use Your Information) of our Privacy Policy for information about the categories of personal information we collect and the purposes for which we use the information. We use personal information for our business and commercial purposes as described throughout the ToolDay Privacy Policies for the following purposes: providing the Services; processing orders and transactions; internal business analytics; tailoring and personalizing the Services to you; advertising and marketing purposes; undertaking activities to verify or maintain the quality, integrity, and safety of our Services (and to improve, upgrade, or enhance them); maintaining or servicing accounts; providing customer service; verifying customer information; processing payments; and providing analytics services.

We do not knowingly process personal information from children under the age of 13. We do not knowingly process “sensitive data” as that term is defined under the CPA.

2. Sharing of Personal Information

We share your information with our service providers or other third parties where necessary to perform the Services, comply with our legal obligations, or for purposes set out in this Privacy Policy. Your personal information will be shared with our service providers or other third parties. The following lists the categories of personal information and categories of service providers and third parties with whom we may share your information. Please note that not every one of the following categories may apply to your personal information.

Categories of personal information include Identifiers, other records, commercial information, Internet or other electronic network activity information, geolocation information, sensory information, and inferences derived from personal information. The categories of third parties include our corporate affiliates, our buyers and sellers, our vendors and other service providers, professional service firms (like our auditors or law firms), our marketing and business partners, online advertising services, analytics providers, social networks, internet service providers, and government entities.

3. Sales and Targeted Advertising

We do not sell your personal information in exchange for monetary compensation. We may share your personal information by allowing certain third parties (such as online advertising services) to collect personal information via automated technologies on our Websites and Apps for targeted advertising purposes. You have the right to opt out of these types of disclosures of your information. We may sell or share for cross-context behavioral advertising purposes the following categories of personal information about you to online advertising services or networks:

Identifiers: information that identifies you, such as your email address or unique personal identifiers (such as a device identifier and/or IP address).
Commercial Information: information such as purchases or products sold.
Online and Network Activity: information such as interactions with our Services (including what led you to our Services such as traffic related information); device type, operating system and version, browser type and settings, and cookie-related data (e.g. cookie ID).
Inferences: inferences based on personal information about you, including your interests, watches, and favorites; inferred information about your demographic category used to create marketing segments or profiles.

4. Profiling

To the extent we engage in automated processing or profiling to prevent, detect, protect against or respond to fraudulent or unlawful activity, we are not required to offer the right to opt out. We otherwise do not engage in profiling that requires an opt-out as defined under the CPA.

5. Colorado Consumer Privacy Rights

Created and effective date: October 1, 2025