Car Wash
Tommy's Express
Privacy Policy
Last updated: January 26, 2024
This Privacy Policy is designed to help you understand how Tommy’s Express LLC and its related organizations and affiliates (“Tommy’s Express”, “we”, “us” or “our”), collects, uses and shares personal information collected through the Tommy’s Express application, its website (tommys-express.com), and its related sites, including club.tommys-express.com and wash.club, and applications (collectively, the “Site”). We value your privacy, and we will not share your personal information with third parties except as described in this Policy without your consent.
By using THIS site, you agree to be bound by this Policy. If you do not agree with any of the terms of the Policy, please do not use THIS website OR PROVIDE US WITH YOUR INFORMATION.
What this Policy Covers
This Policy applies to our collection, use and sharing of your personal information when (a) you visit, download, or use our Site, (b) you receive our communications or participate in our online or offline activities or events, (c) you use our services, and (d) we obtain your personal information from third parties such as resellers, database vendors, content publishers and suppliers. This Policy applies only to information gathered as described above and does not apply to any other information or websites not owned or operated by us or information collected by us by other means.
Table of Contents:
Personal Information We Collect
How We Use Your Personal Information
How We Share your Personal Information
Other Important Privacy Information
Notice to California Residents
Notice to Colorado, Connecticut, Utah, and Virginia Residents
Personal Information We Collect
This section of our Policy describes the categories of personal information we collect about you and the different ways in which we collect your personal information.
Information You Give Us. Personal information you may provide through the Site or otherwise communicate to us includes:
- Contact information. We collect information about you when you provide contact information to us via email, mail, phone, or through the Site, including as a result of registering for an account, subscribing to e-mail newsletters or updates, communicating with customer service representatives (whether via an online chat, online form, email, or otherwise), or making a payment to us. This information may include your first and last name, email address, mailing address, and phone number.
- Payment information. We collect your payment information, such as credit card or bank account number, when you pay for our products or services/as part of our service offerings or purchase gift cards for services.
- Vehicle information. We collect information about your vehicle when you sign up to receive our services. This information may include your license plate information (including issuing state and characters – detailed further in the “Automated License Plate Recognition Systems” section, below), and your vehicle make, model, and color.
- Account information. We collect certain other information (e.g., your gender, date of birth, and geolocation data) in addition to contact information, when you register for an account.
- Correspondence. We may collect personal information you provide when you request information, respond to surveys, or otherwise correspond with us.
- Other information. We may collect other information from you that is not specifically listed here. We may use such information in accordance with this Policy.
Information We Get From Others. We may obtain additional information about you from third-party sources, such as service providers, vendors, social media sites, and advertising agencies to provide you with more relevant information about our services. This information may include your contact information, purchasing preferences, or cookie information.
Information Automatically Collected. Our servers and third-party service providers may automatically record cookie information in connection with your use of the Site, which includes information such as your Internet Protocol (IP) address, device and browser type, operating system, DNS, the pages or features of the Site that you browsed and the time spent on those pages or features, the frequency with which you use the Site, the links that you click on or use, and other statistics. We collect this information in server logs and by using cookies and similar tracking technologies. See our Cookie Policy, below, for more information.
Statistical Analyses. We use tools like Google Analytics to help us gather statistical information about the visitors to our Site and how they use the Site on an anonymous, aggregate basis. We may use this information to gain a better understanding of the users of our Site, to improve our Site, and to improve our services. However, we will not associate this data with your personally identifiable data unless required to do so to cooperate with law enforcement activity or other governmental request or to comply with law. This information is collected via cookies and other identifiers that we and third parties place on our site. See our Cookie Policy, below, for more information.
Sensitive Personal Information. We may collect some sensitive personal information (e.g., information related gender, geolocation data) through the Site as a result of providing you our services. Sensitive personal information is collected directly from you when you provide it to us as a result of registering for an account or receiving guest services support and/or passively through your cellular device. In collecting this sensitive personal information, we respect individual privacy, protects against unauthorized access to or use of information, and complies fully with all laws and government regulations in the collection, use, storage, display, distribution and disposal of such information. Authorized uses of sensitive information within Tommy’s Express are limited to uses which are necessary to meet our legal and regulatory requirements and facilitate access to services, transactions, facilities and information.
How We Use Your Personal Information
This section of our Policy describes the different purposes for which we may use the personal information we collect about you.
To Provide our Services and Communicate With You. We use your contact information, payment information, vehicle information, account information, and other personal information to:
- provide you with our Services;
- register you for events and contests; and
- to respond to your requests, questions, comments, and feedback.
To Improve our Site. We use your cookie information to:
- provide, maintain and improve the Site;
- better understand your needs and interests, and personalize your experience with the Site; and
- perform website analytics and database management services.
To Send You Marketing Communications. We may use your contact information to send you newsletters, promotions or other marketing communications, but you may opt out of receiving them as described in the Your Choices section below.
To Create and Maintain Your Account. In order to utilize the services provided through the Site, you may create an account using certain personal information, including your name, email address, and phone number. Note that, in order to utilize a gift card for our services, you must create an account. You have choices about the information included in your account profile. You do not have to provide additional information on your profile; however, additional profile information may help you get more from our services. It is your choice whether to include sensitive information on your profile and to make that sensitive information public. Please do not post or add personal information to your profile that you would not want to be publicly available.
To Personalize This Site and Advertise To You. We may use your cookie information to personalize your Site experience and communications and to manage and serve ads you see on the Site or on third-party sites. See our Cookie Policy, below, for more information.
For Compliance, Fraud Prevention and Safety. We may use some or all of your personal information as we believe appropriate to: (a) investigate or prevent violation of the law or your agreements with us; (b) protect our, your or others’ rights, privacy, safety or property (including by prosecuting and defending legal claims); (c) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity; (d) comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities; and (e) where permitted by law in connection with a legal investigation. For example, we may share information with law enforcement to reduce the risk of fraud or if someone uses or attempts to use our site for illegal reasons.
With Your Consent. In some cases, we may ask for your consent to collect, use or share your personal information.
How We Share Your Personal Information
This section of our Policy describes the categories of personal information we share with third parties and the types of third parties with whom we share that information.
We do not sell your personal information; however, we may share your personal information with third parties for a number of reasons. For example, we may use third parties to help us design and operate the Site, provide services to support the Site, help us analyze our data, process your credit card information, or send information on our behalf about services and events in which you may be interested. Unless otherwise indicated at the time we collect your information, if we allow third parties to access the personal information we collect, we will have contractual provisions or other appropriate protections in place to ensure such access is for limited purposes and in compliance with this Policy. Specifically, we share your personal information with the following categories of third parties:
Related and Affiliated Organizations. We may share all of the personal information we collect about you with our affiliates and related organizations, for use consistent with this Policy.
Service Providers and Business Partners. We may share your personal information with third-party companies and individuals as needed for them to provide us with services that help us with our business activities and to promote our services to you. This information may include your contact information, payment information, vehicle information, and cookie information. We may also share all of the personal information we collect about you with our business partners (e.g., our franchise partners) who offer a service to you jointly with us.
Compliance, Fraud Prevention and Safety. We may disclose some or all of the personal information we have collected about you as we believe appropriate to government or law enforcement officials or private parties for the purposes described above under the section “For Compliance, Fraud Prevention and Safety.”
Business Transfers. We may sell, transfer or otherwise share some or all of our business or assets, including all of the personal information we have collected about you, in connection with a business deal (or potential business deal) such as a merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy.
Your Rights and Choices
Fill out this form to exercise your privacy rights.
This section of our Policy describes your rights and choices with respect to the personal information you provide and the marketing communications you may receive. We do not make sensitive data inferences under the law of your state. We will only retain your information as long as it is reasonably necessary for the purposes for which it was processed. We do not sell your personal information to third parties; however, we do process your personal information for targeting advertising and process your personal information for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. You can opt-out of these practices as detailed below. In addition, some states may grant you additional rights as further described in the “Location-Specific Disclosures” section, below.
Opt-Out of Communications. You may opt out of email notifications by changing the communication preferences in your account settings.
Opt-Out of Marketing Communications. You may opt out of marketing-related emails by changing the communication preferences in your account settings or by following the opt-out prompt in the email. To opt out of other forms of marketing communications, please contact us using the contact information provided at the end of this Policy.
Opt out of Targeted Advertising. You may opt out of the processing of your personal information for targeted advertising.
Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
Right to Delete. You may request that we delete certain personal information we have collected about you, with certain exceptions.
Right to Access. You have the right to confirm whether we are processing your personal information and to access such personal information, and, under certain circumstances, to receive a copy of such personal information.
Consequences of Not Providing Personal Information or Deleting Personal Information. You are not required to provide all personal information and you may delete certain personal information identified in this Policy to use our Site or to interact with us offline, but certain functionality will not be available if you do not provide personal information. For example, if you do not provide personal information or if you exercise your right to delete personal information, we may not be able to respond to your request, perform a transaction with you, or provide you with marketing that we believe you would find valuable.
Requests related to your personal information. Only you or an individual designated as your authorized agent to act on your behalf may make a request related to your personal information. To exercise your rights above, please submit a request to us here, or contact us as described at the end of this Policy. As part of your request, please specify which right you are exercising and be prepared to provide your name and contact information. After receiving your request, we will use the information you provided to authenticate your identity or your authority as an authorized agent. However, we may ask you to provide additional information if we cannot authenticate your identity or authority based on the information you have provided and the information in our records. We will not discriminate against you if you choose to exercise your rights.
We will try to respond to your request within 45 days and notify you if your request has been granted or declined, or if an exception applies to your request. If we need additional time, we will contact you with the reason and the extension period. We will deliver our written response by mail or electronically, at your option. Our response will also explain the reasons we cannot comply with any request, if applicable. We do not charge a fee to process or respond to your request unless your request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate prior to completing your request.
Right to appeal. If you are a resident of Colorado, Connecticut, or Virginia, you have the right to appeal our refusal to take action on a rights request within 30 days after receiving our decision by contacting us as detailed at the end of this Policy. We will try to inform you of our decision in writing within 45 days after receipt of your appeal, with a written explanation of our decision. If we need more time, we will contact you with the reason and the extension period. If your appeal is denied or if you have concerns about the results of an appeal, you may contact your state’s attorney general by clicking the appropriate link below.
Cookie Policy
This section of our Policy describes how we and our business partners may collect and store information about you and your use of the Site through cookies and other tracking technologies.
What are Cookies? Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies set by the website are called “first-party cookies”. Cookies set by parties other than the website are called “third-party cookies”. Third-party cookies enable third-party features or functionality, such as advertising or website analytics, to be provided on or through the website. The parties that set these third-party cookies can recognize your computer or device both when it visits the website in question and also when it visits certain other websites and/or mobile apps.
What Cookies and Other Tracking Technologies do We Use? We use several different kinds of cookies on this Site, including session cookies, which are cookies that are strictly necessary cookies, which are cookies that are necessary for the Site to function and cannot be switched off in our systems (e.g., session cookies); performance cookies, which allow us to count visits and traffic sources so we can measure and improve the performance of our Site; and functional cookies, which enable the Site to provide enhanced functionality and personalization. You can review the cookies we use here.
Cookies are not the only way to track visitors to a website. We may use similar technologies from time to time, like web beacons (sometimes called “tracking pixels” or “clear gifs”). These are tiny graphics files that contain a unique identifier that enable us to recognize when someone has visited our Sites. These technologies often depend on cookies to function properly, and so disabling cookies may impair their functioning. If you sign up to receive our e-mails, we will also use cookies in conjunction with these emails. When your browser downloads any graphic content in the e-mail, we will also place a cookie on your computer that will tell us if you come to our website at a later date.
Third-Party Cookies. In addition to our own cookies, we collaborate with various third-party service providers who also use cookies to help us optimize our website, to understand more about the visitors to our website, and to advertise to you. Our third-party service providers include: Amazon Web Services (AWS), FullStory, Google (including Analytics, Google Ads, and Firebase), Meta (Facebook), Loggly, Notificare, MailGun, Segment, Snap, Stripe, TikTok, Twilio, X (Twitter), and ZenDesk. To learn more about how these providers use cookies, please click the links above or visit their respective websites to view their privacy policies.
Google Services; Remarketing Services. We use Google Analytics and Firebase to help us gather statistical information about the visitors to our Site, help us analyze how people use our website, and to market our services and products. Additionally, we use Google Adwords, Twitter, and Facebook remarketing technologies to market our services and products throughout the Internet. This information is collected via cookies and other identifiers that we and third parties place on our site. We and our third-party partners may use this information to gain a better understanding of the users of our Site, to advertise to you, and to improve our services and products.
To understand how Google Analytics collects and processes data, including through the use of cookies and other technologies, please visit please visit https://policies.google.com/technologies/ads and https://policies.google.com/technologies/cookies#how-google-uses-cookies. To opt out of the Google Analytics, we encourage you to check out Google Analytics' currently available opt-outs, or opt out of interest-based Google ads using Google’s Ads Settings.
To understand how X (Twitter) collects and processes data, including through the use of cookies and other technologies, please visit please visit https://help.twitter.com/en/safety-and-security/privacy-controls-for-tailored-ads.
To understand how Meta (Facebook) collects and processes data, including through the use of cookies and other technologies, please visit https://www.facebook.com/help/516147308587266/?helpref=hc_fnav. To opt out of Meta’s (Facebook) internet-based ads, please visit https://www.facebook.com/help/568137493302217 and adjust your settings.
How Do We Use Cookies? We and our third-party partners may use cookies to gain a better understanding of the users of our Site, customize your Site experience, and to improve our services and products. We also use cookies to provide you with interest-based advertising, which shows interest-based ads to you on sites across the Internet. To support interest-based advertising, we and the companies we have contracted with may use anonymous information about your visits to our and other websites and applications. If you have provided us with other personal information as described in this policy, we may associate that personal information with information gathered through cookies and other tracking technology to offer increased personalization and functionality. Third parties who place cookies and other tracking technology on our Site may also connect the information that they collect from these tools to other sources of information. To learn more about the use of cookies, pixels, or other technologies to deliver more relevant advertising, and to better understand how to manage your personal information, including access to and use by certain service providers, please visit http://www.aboutads.info/choices.
How Can You Disable Cookies and Other Tracking Technology? Depending on the type of browser and device that you use, you may have the ability to control the type of information that these tools use. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your computer or mobile device and how to manage and delete them, visit www.allaboutcookies.org and www.youronlinechoices.com. Some Internet browsers also may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Other Important Privacy Information
Third-Party Sites and Services. The Site may contain links to other websites and services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third-party websites, applications or services, and we are not responsible for their actions. Other websites and services follow different rules regarding their collection, use and sharing of your personal information. We encourage you to read their privacy policies to learn more.
Security. The security of your personal information is important to us. We take a number of organizational, technical and physical measures that are designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the absolute security of your personal information.
International Data Use and Cross-Border Transfers. We are located in the United States and have affiliates and service providers in other countries, and your personal information may be collected, used and stored in the United States or other locations outside of your home country. Privacy laws in the locations where we handle your personal information may not be as protective as the privacy laws in your home country. However, we will handle your personal information in accordance with this Policy regardless of where your personal information is kept. Regarding transfers from the European Economic Area, Switzerland or United Kingdom to the United States, we rely on the derogations for transfers which are necessary to perform the transaction with you. Where required by law, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below. If you reside in other non-US jurisdictions, your use of the Site or provision of any personal information constitutes your consent for the transfer of such data to the United States for the purposes identified in this Policy. If you have questions about cross-border transfers, please contact us as detailed at the end of this Policy.
Verifying, Changing, and Deleting Your Information. If you have registered for an account through our Site, you can access, review and manage many changes yourself via your account, including updating your profile information and changing your communication preferences. If the information you are seeking is not available within your account, you can contact us as detailed below and ask us to change, update or fix your information in certain cases, particularly if it is inaccurate. You can also request that we erase or delete all or some of your personal information or otherwise object to, limit, or restrict the use of such information (if we have no legal right or legitimate business interest in retaining such information).
Children.
The Site is not intended for use by anyone under the age of 18, nor do we knowingly collect or solicit personal information from anyone under the age of 18. If you are under 18, you should not attempt to use the Site or send any information about yourself to us.
Changes to This Policy
We reserve the right to modify this Policy at any time. If we make changes to this Policy, we will post them on the Site and indicate the effective date of the change. If we make material changes to this Policy we will notify you by email or through the Site.
Location Specific Disclosures
The law requires that we provide additional disclosures to residents of certain countries, regions and states. Please see below for disclosures that may be applicable to you.
Notice To European Users
The following applies to individuals in the European Economic Area, Switzerland and United Kingdom.
Controller. Tommy’s Express is the controller of your personal information covered by this Policy for purposes of European data protection legislation.
Legal bases for processing. We are required to inform you of the legal bases of our processing of your personal information, which are described in the table below. If you have questions about the legal basis of how we process your personal information, contact us using one of the methods detailed at the end of this Policy.
| Processing Purpose | Legal Basis |
| To manage, operate, and provide the Site, communicate with you, and create and maintain your account. | You are subject to a contract with us and we need to use your personal information to provide services you have requested or take steps that you request prior to providing services. |
| To establish and administer accounts, issue invoices, and process payments and refunds. | You are subject to a contract with us and we need to use your personal information to provide services you have requested or take steps that you request prior to providing services. |
| To send you marketing communications. For compliance, fraud prevention, and safety. |
These processing activities constitute our legitimate interests. We consider and balance the potential impact on your rights before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). |
| For compliance with law. | Processing is necessary to comply with our legal obligations. |
| With your consent. | Where we specifically ask for your consent to process your personal information, such processing is based on your consent. Where we rely on your consent, you have the right to withdraw it anytime in the manner indicated on the Site. |
| To share your personal information as described in this Policy. | This sharing constitutes our legitimate interests, and in some cases may be necessary to comply with our legal obligations. |
Retention. We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Your Rights. European data protection laws give you certain rights regarding your personal information. You may ask us to take the following actions in relation to your personal information that we hold:
- Access. Provide you with information about our processing of your personal information and give you access to your personal information.
- Correct. Update or correct inaccuracies in your personal information.
- Delete. Delete your personal information.
- Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
- Restrict. Restrict the processing of your personal information.
- Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.
You may exercise your rights above by contacting us as detailed at the end of this Policy and specifying your request. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.
If you would like to submit a complaint about our use of your personal information or response to your requests regarding your personal information, you may contact us as detailed at the end of this Policy or submit a complaint to the data protection regulator in your jurisdiction. You can find your data protection regulator here.
Notice to California Residents
If you are a California resident, this section applies to you in addition to the rest of this Policy.
Personal Information We Collect. We collect your personal information when you interact with our Site or otherwise communicate with us. In the past 12 months, we have collected the following categories of personal information from consumers and have used that information for the following purposes:
| Category of personal information collected | Business purpose of collection | Source(s) of information |
| Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, telephone number, license plate information (including issuing state and characters), and vehicle make, model, and color. | To provide you with our services products, and support, and marketing purposes | Directly from you, passively when you visit our Site or view our electronic communications, and from third parties in connection with provision of our services and products |
| Characteristics of protected classifications under California or federal law, including age or date of birth and gender. | If you choose to disclose this information, we collect it as part of our account creation process. | Directly from you |
| Commercial information about the services you have obtained from us | To provide our services to you and communicate with you | Directly from you |
| Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement. | To provide you more relevant content, track original Site visits, and optimize your Site experience as well as to ensure our systems are properly functioning. | Passively when you visit our Site or receive or interact with our communications |
| Geolocation data. | To assist in marketing and identify Site traffic patterns | Passively when you visit our Site or view our electronic communications |
| Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Marketing purposes | Passively when you visit our Site or receive or interact with our communications |
| Sensitive personal information, including a consumer’s debit card or credit card number in combination with any required security or access code, password, and a consumer’s precise geolocation. | o provide our services to you, and for marketing purposes. | Directly from you or passively when you visit our Site or view our electronic communications |
We will not collect additional categories of personal information or use or retain the personal information we collected for materially different, unrelated, or incompatible business purposes without providing you notice.
Retaining Your Information. We will only keep your personal information in an accessible form which can identify you for as long as we need to for the purposes for which it was collected. Because retention periods vary depending on the purpose for collection, we use certain categories and criteria to determine how long we keep personal information, as further described below. Where your personal information is used for more than one purpose, we will retain your Information for the longer of those periods.
| Type of Personal Information | Retention Period |
| Personal information processed in connection with our services | Up to forty-five (45) days after you delete/deactivate your account, unless: (a) otherwise required by applicable law; (b) required for regulatory, compliance or insurance purposes; (c) a longer limitation period applies in respect of specific types of actions/documents; (d) there is a dispute that requires it to be kept for longer; or (e) there is another legitimate reason which requires it to be kept for longer. |
| Personal information processed for marketing purposes | For as long as you have not opted out of our marketing. If you ask us to no longer use your personal information for marketing purposes, we will need to retain certain of your details in our database to ensure that we do not accidentally send you marketing material. |
| Personal information held in our electronic backups | Our electronic backups are retained for ninety (90) days. |
When we no longer require your personal information, we will take steps to delete or de-identify it. If the information cannot be permanently deleted or de-identified (for example when it is stored in our electronic backups), we will take appropriate steps to ensure that it is: (a) not used in connection with any decision involving you; (b) not shared with anyone except when we are legally required to do so; (c) kept secure; and (d) permanently deleted once possible.
Sharing Your Information. We do not sell your personal information for monetary consideration, but we may disclose some of your personal information to third parties for business and commercial purposes, including sharing certain personal information for our own cross-context behavioral advertising purposes (provided, however, that any personal information obtained through our SMS short code program will not be shared with any third parties for their marketing purposes). In the past twelve (12) months, we have disclosed the following categories of personal information to certain third-party subcontractors and service providers for a business purpose:
In the past 12 months, we have disclosed the following categories of personal information to certain third-party subcontractors and service providers for a business purpose:
| Category of Personal Information Disclosed | Category of Third Parties with Whom Information is Disclosed | Business or Commercial Purpose for Disclosure |
| The following identifiers: real name, postal address, email address, account name, telephone number(s), and IP address | Data analytics providers, internet service providers, email marketing provider, other service providers | To help us provide our Site and services, and to market our services to you. |
| Sensitive personal information & characteristics protected under law (e.g., age or date of birth, gender) | CRM service providers and other service providers | To help us provide our service. |
| The following internet or electronic information: browsing history, search history, and information regarding an individual’s interaction with an internet site, application or advertisement | Data analytics providers, internet service providers, email marketing provider, and other service providers | To help us provide our Site and market our services to you. |
| Geolocation data | Marketing intelligence service providers | To help us provide our Site and market our services to you. |
| Commercial information | Service providers | To help us provide our services to you. |
Additionally, in the past twelve (12) months we have shared with advertising and marketing networks and providers, data analytics providers, and social networks the following information for our own cross-context behavioral advertising purposes: identifiers, including your email address, phone number and IP address; commercial information; and internet or electronic activity information, including browsing history, search history, and information regarding an individual’s interaction with an internet site, application or advertisement. You can opt-out of the sharing of your personal information for cross-context behavioral advertising as detailed in the “Exercising Your Right to Opt Out” section, below.
Sensitive Personal Information. We do not use or disclose sensitive personal information except as necessary to provide you with our services and products and to prevent fraud. When we use and disclose your sensitive personal information, we will do so in accordance with applicable law. You can request that we limit our processing of your personal information as detailed in the “Exercising Your Rights” section, below.
Personal Information of Children. We have no actual knowledge that we sell or share personal information for cross-context behavioral advertising purposes of consumers under 18 years of age.
Notice of Financial Incentives. We may offer our customers a loyalty program that provides certain perks, such as rewards, discounts and exclusive offers/sweepstakes, contest, or other similar promotional campaigns (collectively, the “Programs”). When you sign up for a Program, we typically ask for your name and certain contact information such as your email address or telephone number. Each Program may be considered a “financial incentive” under California law. You can opt-in to the Program by signing up for the Program through the Site. You may withdraw from participating in a Program at any time by reaching out to us through the email and telephone number detailed in the “How to Contact Us” section, below. The value to us of your personal information collected in connection with the Program is related to the value of the free or discounted products or services or other benefits that you obtain or that are provided as part of the applicable Program, less the expense related to offering those products, services, and benefits to Program participants.
Your Rights. California residents have certain rights regarding their personal information:
- Right to Know. You may request no more than twice in a 12-month period that we provide you with copies of specific personal information we have collected, sold, or disclosed about you. However, under California law, we cannot provide you with certain sensitive information, despite your request (for example, we will not send you copies of your social security number even if it is something we collected).
- Right to Delete. You may request that we delete certain personal information we have collected about you, with certain exceptions.
- Right to Correct. You may request that we correct inaccurate personal information that we maintain about you.
- Right to Opt-Out of Sharing. You may opt out of the sharing of your personal information to third parties for cross-context behavioral advertising purposes.
- Right to Limit Sharing of Sensitive Personal Information. You may limit our use or disclosure of your sensitive personal information, with certain exceptions.
- Shine the Light. Under California’s “Shine the Light” law, you have the right to ask us once a year if we have shared your personal information with third parties for direct marketing purposes.
Exercising Your Rights. To exercise your rights above, please submit a request to by filling out our request form found here, by emailing us at support@tommys-express.com or by calling us at (616) 369-8917. Please describe your request with sufficient detail so we can properly respond to your request. As part of your request, please specify which right you are exercising and be prepared to provide your name, email, account name/agreement number, if applicable. We may ask for additional information to verify your identity. The information you provide in your request and any follow-up information we ask for from you will be used solely to verify your request. Only you or an individual designated as your authorized agent to act on your behalf may make a request related to your personal information. We may ask for additional information from you or an authorized agent to verify the agent’s identity and their authority to act on your behalf. After receiving your request, we may need to contact you or your agent for further information and will notify you or your agent if your request has been granted or declined, or if an exception applies to your request.
We will not discriminate against you if you choose to exercise your rights. However, we may charge a different price or provide a different level or quality of goods or services if the difference is related to the value your information provides us. See the section above titled “Notice of Financial Incentives” for additional information.
Responding to Your Rights Request. We will try to respond to your request within 45 days. If we need more time, we will contact you with the reason we need more time and the extension period. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. In response to your request to know, we will only disclose the information we have collected in the 12 months prior to our receipt of your request. Our response will also explain the reasons we cannot comply with any request, if applicable. We do not charge a fee to process or respond to your request unless your request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate prior to completing your request.
If you have any questions or concerns about our privacy practices or information practices, please contact us as detailed at the end of this Policy.
Notice to Colorado, Connecticut, Utah and Virginia Residents
No Sensitive Data or Profiling. We do not process personal information for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects or process personal information that is considered sensitive data or make sensitive data inferences about you under applicable law. In the event that we intend to collect sensitive data about you through this Site, we will obtain your consent before processing such sensitive data and we will provide you with more details about the purposes of processing and data retention periods at that time. We will only retain your information as long as it is reasonably necessary for the purposes for which it was processed.
Targeted Advertising. We may share your personal information we collect via cookies and other tracking technology with third parties for targeting advertising. You can opt out of the processing of your personal information for targeted advertising as detailed in the “Your Rights” section below.
Your Rights. Residents of Colorado, Connecticut, Utah, or Virginia have certain rights regarding their data. Your rights include:
- Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
- Right to Delete. You may request that we delete certain personal information we have collected about you, with certain exceptions.
- Right of Access. You have the right to confirm whether we are processing your personal information and to access such personal information, and, under certain circumstances, to receive a copy of such personal information.
- Right to Opt Out. You have the right to opt out of the processing of your personal information for targeted advertising.
We will not discriminate against you if you choose to exercise your rights, and you may exercise your rights at any time.
If you have submitted a rights request as described in the Your Rights section above, we will try to respond to your request within 45 days. If we need more time, we will contact you with the reason and the extension period. We will respond to your request by mail or electronically, at your option, and will notify you if your request has been granted or declined, if an exception applies to your request, any reason we cannot comply with your request, or if we need additional information. We will not discriminate against you if you choose to exercise your rights hereunder. You have the right to appeal our refusal to take action on a rights request within 30 days after receiving our decision by contacting us as detailed at the end of this Privacy Policy. We will try to inform you of our decision in writing within 60 days after receipt of your appeal, with a written explanation of our decision. The information you provide in your request and any follow-up information we ask for will be used solely to verify your request and will be deleted as soon as practical after processing your request. We will not charge a fee to process or respond to your request unless your request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate prior to completing your request.
Notice to Nevada Residents
Nevada law gives Nevada consumers the right to request that a company not sell their personal information for monetary consideration to certain other parties. We do not sell your personal information for monetary consideration; however, this right still applies. If you are a Nevada consumer and wish to exercise this right, please submit your request by contacting us as detailed at the end of this Privacy Policy.
Automatic License Plate Recognition Systems
We use automated license plate recognition (“ALPR”) systems at our locations in order to identify and authenticate customers and account holders, to associate vehicles with customers who have accounts with us, and to bill for services.
Employees at our locations, employees in our corporate offices whose job duties relate to payments, subscription or account administration or security, and service providers who assist us with these functions are authorized to use or access ALPR system and the information it holds. All such employees and service providers are trained on appropriate use of the ALPR system, their privacy and security obligations and associated confidentiality requirements. Our teams monitor the ALPR system to ensure the security of the information and compliance with applicable privacy laws. We may maintain records of all instances of access to the ALPR system and the purpose of that access, as well as internal policies on acceptable purposes and means of accessing the ALPR system.
We do not sell ALPR information to other persons. As noted above, we may transfer or provide access to ALPR systems to our service providers and/or business partners who support the functions described above or provide technical support for the systems.
You may contact us via the email or telephone number detailed in the “How to Contact Us” section, below, to correct any errors in the ALPR information. We collect ALPR data in an automated manner and therefore cannot guarantee the accuracy of the data. We use commercially reasonable physical, technical and administrative measures to ensure that the data stored in the ALPR is accurate and protected from alteration, misuse and unauthorized disclosure. Information will be stored in the ALPR system only as long as it is needed for business and legal compliance purposes, in accordance with this Privacy Policy. When information is no longer required, it will be securely destroyed in accordance with this Privacy Policy.
How to Contact Tommy's Express
Tommy’s Express LLC
648 South Point Ridge Road
Holland Michigan, 49423
United States of America
Email: support@tommys-express.com
Phone: (616) 369-8917