At Tom Duffy Company we know that you care how your information is used, and we appreciate your trust that we will use it carefully and sensibly. We believe in your right to privacy, and protecting your private information is our priority. We have created this Privacy Policy in compliance with applicable law and in order to demonstrate our firm commitment to privacy.
This Tom Duffy Company and its affiliates (referred to herein as “Tom Duffy,” “we,” or “our”) Privacy Policy applies to Tom Duffy’s practices regarding the collection, use and disclosure of personal information that we collect through offline or online methods, including through the Internet domain(s) owned or operated by Tom Duffy. When we refer to “you” or “your,” we mean the person accessing our Website or services and/or providing information in connection with our Website or services. If the person accessing our Website or services does so on behalf of, or for the purposes of, another person, including a business or other organization, “you” or “your” also means that other person, including a business organization.
This Policy is subject to our Terms and Conditions located at: https://www.tomduffy.com/xterms . We may update this Policy from time to time, as specified in the “Changes to This Privacy Policy” section below.
California state law confers certain rights relating to personal information to its residents. If you are a California resident, please also see our California Consumer Privacy Section in this Policy located at: California resident
If you are an employee or worker of the Tom Duffy Company in California, the information about how we handle your personal information as an employee is located in the Tom Duffy Paycom Dashboard. You can request a copy from the Tom Duffy HR Representative.
If you are a prospective employee or job applicant for B.R Funsten and Tom Duffy Company, including any of its affiliates including but not limited to Tom Duffy in California, we will provide you separately with information about how we handle your personal information for recruitment purposes. Please see the Tom Duffy Company’s Privacy Notice for California Employees and Job Applicants information page.
Please review this Policy periodically. You should read this entire Policy before submitting information, including personal information, to us in any form or using our Site. Whenever you submit personal information to us, you consent to the collection, use, disclosure, transfer, and storage of that information in accordance with this Policy.
All personal information may be used for the purposes stated in this Policy. We may make full use of all information that is de-identified, aggregated, or otherwise not in personally identifiable form. We may also make full use of all user-generated content you submit to us, in accordance with our Terms of Use.
We collect personal information using three methods: 1) from you when you choose to voluntarily provide it; and, 2) using automated technology, including when you visit our Site or interact with our electronic advertisements or communications. To see a complete list of what we collect, and how we use and disclose this data, please see our Annex 1.
Tom Duffy collects Personal Information, such as: your personal or company name; signature; mailing address; telephone number; email address, and location.
When you use our Site or services, we collect information about you through your browser, computer hardware and software. This information can include your IP address, your device information, domain name, browsers you used to access our Site and services, web pages viewed, time spent on web pages, link clicks, transactions entered into and site-navigation pattern. This information is used by Tom Duffy for the improvement of our Site.
We may combine data collected from third party sources.
We use Personal Information of customers for a wide range of purposes, including:
We disclose Personal Information you provide to consultants, service providers, and contractors that we use to support our business and operations who have agreed to keep the information confidential and use it only to provide the applicable service(s) such as vendors that help us communicate with you, vendors that host our website and data, security and fraud detection vendors.
We disclose Personal Information to third parties we work with who help us gather information from you and communicate with you including payment processors, social media companies, and companies providing data analytics, targeted advertising, or online behavioral marketing services.
We may disclose Personal Information to outside parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; or in connection with disciplinary actions/investigations.
We may disclose Personal Information to third parties in connection with the sale, assignment or other transfer of the business of our website or the sale, assignment, merger, reorganization or other transfer of our brand or company.
As you enter the Site, our server records and monitors your IP address and uses it to develop statistical analysis. These analyses assist us in refining and adapting the content and design of our site. The use of IP addresses also enables us to prevent malicious Internet users from masquerading as other users. Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology. A cookie is a small piece of information sent by a website that is saved on your hard drive by your computer's browser. A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags.
As you access or use our Site, we and/or third parties may collect information using cookies, web beacons, pixels, and navigational and location data collection (clickstream, log files, server logs) for the purposes described in this Policy. Such automated technologies further help us to keep track of your interactions with our website and provide you with a more customized experience.
To find more information about cookies please visit https://allaboutcookies.org/. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use. By disabling cookies, you won't be able to enjoy the convenience provided by our customization.
We and/or third parties including advertising companies, social networking sites, and service providers on our behalf, use cookies, web beacons and other similar technology, to collect information for the purposes described in this Policy including advertising, analytics, online behavioral marketing, monitoring performance and improvement of our online services (traffic, errors, page load time, popular pages, etc.).
You may opt out of behavioral remarketing as follows:
Google Analytics and Google Ads: We use Google Analytics to understand how our Website, services, advertisements and products perform and how you use them. We use Google Ads to advertise and promote our products and services. If you would like to opt out of Google Analytics and Ads, you can opt out of Google Analytics by installing Google's Opt Out browser add on: https://tools.google.com/dlpage/gaoptout and you can opt out of interest-based Google ads using https://adssettings.google.com/u/0/authenticated.To learn more about how Google processes your data, please visit https://www.google.com/policies/privacy.
Advertising and Remarketing Services: We use remarketing services to inform, optimize, and serve ads on third-party websites such as Facebook to you based on your use of our Site and social media. For more information about targeted advertising and to opt out of collection of information and ad targeting from third party websites, including Facebook and Google, please visit http://www.aboutads.info/choices. If you choose to opt out, you will continue to receive advertisements but they will not be tailored to your interests.
Digital Advertising Alliance: You can also opt out from companies like Google, Instagram, Pinterest, Facebook and other participating companies through the Digital Advertising Alliance in the USA: http://www.aboutads.info/choices/. You can also opt out of participating companies from the Digital Advertising Alliance of Canada in Canada: http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe: http://www.youronlinechoices.eu/, or opt out using your mobile device settings.
We will retain your personal information (collected through offline and online methods) only for as long as it is necessary for the purposes described in this Policy. We will retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. For more information regarding retention of personal information see Annex 1.
The requirements of the Children's Online Privacy Protection Act (“COPPA”) do not apply to us. Our Site and social media accounts are not intended for people under the legal drinking age and as a result, We will not knowingly collect information from minors in the United States or elsewhere with or without the consent of their parents or guardians. If you are not 21 or older, you should not visit or use our Site or social media accounts.
We take appropriate steps to protect personal Information from loss, misuse and unauthorized access, disclosure, alteration or destruction, whether in transmission or storage. Please keep in mind, however, that there is no such thing as perfect security, and no Internet transmission is ever completely secure or error-free. Moreover, you are responsible for maintaining the confidentiality of any user name and password you use.
We may make available third party applications through our Site and social media applications for your use. Links to such applications, any other websites included in this Site or links on our social media accounts operate with privacy policies beyond our control. Unless otherwise indicated, once you have left our Site or our social media account, all use of information you provide is governed by the privacy policy of the other website’s or social media account's operators. We are not responsible for any transactions that occur between you and a third-party website or social media account.
This Policy and our privacy practices will be subject exclusively to the laws of the State of California, United States of America. We make no representation that this Policy and its practices comply with the laws of any other jurisdiction.
If you have any questions or concerns about this Policy, please contact us at privacy@tomduffy.com.
This Privacy Rights Act Notice ("Notice") provides additional information to California residents whose Personal Information is collected by Tom Duffy pursuant to California law, including the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act (“CPRA”). If you are not a California resident, this Notice does not apply to you. Please visit our Privacy Policy for more information. Any capitalized terms undefined in this Notice have the same definition as the Policy.
In the preceding 12 months, we have collected the categories of personal information about California consumers as described in Annex 1 to this Notice. To review these categories click here: Annex1.
If you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship, we collect the contact information you provide to us, including name, phone number, address, email address and other contact and relationship information consistent with your role in facilitating that business relationship. We use that information for internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship. We do not disclose that information outside our business relationship without your consent. Please see our Annex 1 for more details.
You have the right to request that we disclose personal information we collect about you.
To make a request for any of the information set forth above (a “Request to Know”), please submit a verifiable consumer request pursuant to the instructions below. You may only make a Request to Know twice within a 12-month period. We will acknowledge your Request to Know within 10 days and will attempt to respond substantively within 45-90 days.
The Request to Know must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request.
You can make a Request to Know the personal information we have about you in the following ways:
Once we receive your Request to Know, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. If you are an account holder, making a request through your account is sufficient for verification purposes. If you do not have an account with us, you will be asked to provide us with two or three pieces of information that will help us to verify your identification.
As explained in Annex 1 of this Policy, we share your data with third party partners such as social networking sites and advertising companies in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below.
We have sold or shared the following categories of personal information for a business or commercial purpose in the preceding 12 months.
We have disclosed the following categories of personal information for a business or commercial purpose in the preceding 12 months:
We do not knowingly sell or share the personal information of individuals under 16 years of age without affirmative authorization.
For details regarding the categories of third parties with whom we have shared, sold, or disclosed personal information, please see Annex 1
We do not collect or process sensitive personal information for the purpose of inferring characteristics. We also do not collect sensitive personal information for any purposes other than those set forth in Regulations promulgated by the California Privacy Protection Agency, Title 11, Div. 6, Chpt. 1, Art. 3, Section 7027(m).
You have the right to request the deletion of your personal information collected or maintained by us (“Request to Delete”), subject to certain exceptions permitted by law.
To make a Request to Delete, please submit a verifiable consumer request pursuant to the instructions below. We will acknowledge your Request to Delete within 10 days and will attempt to respond substantively within 45-90 days.
The Request to Delete must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request. Additionally, as permitted by law, if the information requested to be deleted is necessary for us to maintain, we will not be able to comply with your request. We will notify you if this is the case.
You can make a Request to Delete in the following ways:
Once we receive your initial request to delete and your separate confirmation to delete, we will need to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. If you are an account holder, making a request through your account is sufficient for verification purposes. If you do not have an account with us, you should provide us with information that will help us to identify you.
We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.
You have the right to opt-out of the sale or sharing of your Personal Information. As explained in Annex 1 of this Policy, we share your data with third parties such as social networking sites and advertising companies, in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered "selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below. We will process your Request to Opt-Out of sale within 15 days.
You can make a Request to Opt Out in the following ways:
We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information without first seeking your explicit consent.
This Policy does not apply to, and we are not responsible for, third-party cookies, web beacons, or other tracking technologies, which are covered by such third-parties’ privacy policies. For more information, we encourage you to check the privacy policies of these third-parties to learn about their privacy practices.
As explained in our "Cookies and other technology" section, you can opt out of cookies using your browser. You may also exercise your right to opt-out of cookies using your browser.
Please Note:
In addition to the above options to opt out of the sale or sharing of your information under the CPRA and CCPA as described above, you have controls and choices with respect to collection and use of your information by third parties. These are summarized for you below. We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.
You can opt out of sharing your information with third party companies engaged in targeted advertising including social networking sites such as Google and Facebook using the following tools: For websites: http://optout.aboutads.info/?c=2&lang=EN. For mobile apps: http://www.aboutads.info/appchoices
If you would like to opt out of Google Analytics and Ads, you can. If you are on the web, you can opt out of Google Analytics by installing Google's Opt Out browser add on: https://tools.google.com/dlpage/gaoptout, and you can opt out of interest-based Google ads using https://adssettings.google.com/u/0/authenticated.
You have the right to request that we rectify inaccurate information about you.
To make a Request to Correct, please submit a verifiable consumer request pursuant to the instructions below. We will acknowledge your Request to Correct within 10 business days and we will attempt to respond substantively within 45-90 days.
You can make a Request to Correct in the following ways:
Once we receive your request to correct, we will need to verify that you are the person that is the subject of the request through the Verification Process.
We will review all information provided by you to us, to determine whether the information is inaccurate. We reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion.
We will inform you of our decision to deny or grant your request.
We will retain correspondence, documents and information related to any Request to Correct for 24 months as required by law.
You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act, including by exercising the rights specified herein.
You can request access to information about automated decision making in regards to your personal information Tom Duffy’s uses and you may request to opt out of automated decision making. We do not engage in automated processing.
We will retain your Personal Information (collected through offline and online methods) for as long as it is necessary for the purposes set out in Annex 1 and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
You may designate an authorized agent to make a request on your behalf under the California Consumer Privacy Act.
In order to allow an authorized agent to make a request on your behalf, please email us at webmaster@tomduffy.com to provide your written request and consent to an authorized agent.
When your authorized agent makes a request related to your personal information, we will require the agent to provide the above written permission. We may also require that you verify your own identity directly with us at the time such a request is made.
California Do Not Track Notice: Because there are not yet common, industry accepted “do not track” standards and systems, our website does not respond to Do Not Track signals. In addition, we may allow third parties to collect personal information from your activity on our website, as described in the “Information Collection and Use” section above.
Although we do not disclose to any third parties for their marketing purposes any personal information, California residents are entitled to receive the following disclosure information under California law:
Under California Law, California residents have the right to request in writing from businesses with which they have an established business relationship, (1) a list of the categories of personal information, such as name, address, e-mail address, and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties. We will respond to such written requests within 30 days following receipt at the e-mail or mailing address specified below under “Contact Us”. If we receive your request at a different e-mail or mailing address, we will respond within a reasonable period of time, but not to exceed 150 days from the date received. Please note that we are required to respond to each customer only once per calendar year.
This Policy may be revised from time to time for any reason. If this Policy changes, the revised policy will include a new effective date, and we will notify you of such changes by posting the revised policy on this page. Be sure to check the Policy whenever you submit personal information to us.
For information and questions about the use of your personal information or this California Consumer Privacy Section or your rights under California law, you may contact us at privacy@tomduffy.com.
See Privacy Policy here