Privacy Policy - United States

Privacy Policy for TodayTix

Last Updated: April 28th, 2025

TodayTix, Inc. ("TodayTix,” “we," "us," or the "Company") and its affiliates are committed to protecting your privacy. This Privacy Policy describes our practices regarding the Personal Data (as defined below) that we collect from users of our website (www.todaytix.com), our mobile applications, websites we operate on behalf of partners, affiliated websites, our widgets, and other interactions you have with us (collectively, the "Services").  Your use of our Services is also governed by our Terms of Use, so please review them carefully.

Please note that our privacy practices are subject to the applicable laws of the regions in which we operate. Accordingly, some additional regional specific terms will only apply to individuals in those locations, or as required by applicable laws.

For more information about how users with disabilities can access this Privacy Policy in an alternative format, please email help@todaytix.com.

1. Questions; Contacting Us; Reporting Violations. If you have any questions, concerns, or complaints about our Privacy Policy or our data collection or processing practices, or if you want to report any security violations, please contact us at dataprivacy@todaytixgroup.com, or by mailing us as follows: TodayTix, Inc. 1501 Broadway, Suite 1313, New York, NY 10036.

2. User Consent. By using our Services, you agree to the terms of this Privacy Policy and our Terms of Use, and you expressly consent to the collection, use, and disclosure of your Personal Data in accordance with this Privacy Policy and our Terms of Use. If you do not agree with these terms, please do not use our Services.

3. A Note to Users Outside of the United States. If you are using our Services from outside of the United States, by using the Services and providing us with data, you acknowledge and agree that your Personal Data may be processed for the purposes identified in the Privacy Policy. In addition, your Personal Data may be processed in the country in which it was collected and in other countries, including the United States, where laws regarding the processing of Personal Data may be different than the laws in your country. By providing your Personal Data, you consent to such transfer.

4. Types of Data We Collect. "Personal Data" means data that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, including, for example, your name, address, telephone number, email address, as well as any other non-public information about you that is associated with or linked to any of the foregoing data. "Deidentified Data" means data that cannot reasonably identify, relate to, describe, be capable of being associated with or be linked, directly or indirectly, to a particular consumer. Deidentified Data does not, by itself, permit the identification of individual persons. We collect the following Personal Data and Deidentified Data, as described and in the manners identified below.

4.1 Personal Data Categories. The following are the types of Personal Data that we collect.

• Identifiers such as a real name, alias, postal address, telephone number, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
• Commercial information, including records of products or services purchased, obtained, considered, or other purchasing or consuming histories or tendencies as provided through your use of our Services.
• Geolocation or other information that permits us to determine your location.
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with our Services, or advertisement, only to the extent you provide such information in connection with our provision of services.
• Professional or employment-related information, including educational history, only to the extent described in our employee/applicant privacy policy.

We may also collect Personal Data that is treated as “sensitive” under certain data protection laws. In particular, we may collect your precise geolocation information (accurate within a radius of 1,750 ft). We collect this information to suggest products or services in your general area. If you do not want this information collected by us, you can disable location services on your phone with respect to our Services.

4.2. Information You Provide to Us. We may collect Personal Data from you, such as your first and last name, email address, and password when you create an account to log in to our network ("Account"), as well as in the following circumstances:

• If you use our Services on your mobile device we may collect your phone number and the unique device id number.
• If you tell us where you are (e.g., by allowing your mobile device to send us your location), we may store and use that information to provide you with location-based information and advertising. If you want to deactivate this feature, you can disable on your mobile device the ability of our Services to receive location-based information.
• Certain Services may require our collection of your phone number. We may associate that phone number with your mobile device identification information.
• When you order products or services through our Services, we will collect all information necessary to complete the transaction, including your name, billing information and shipping information. 
• If you provide us feedback or contact us via email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply.
• If you participate in a sweepstakes, contest, lottery, or giveaway offered via our Services, we may ask you for your first and last name, postal address, email address, and/or telephone number (e.g., to notify you if you’ve won or to comply with relevant law). In some situations, we may need additional information as a part of the entry process. These sweepstakes and contests are voluntary. You should read the rules for each sweepstakes and contest that you enter.
• When you initiate a ticket transfer, you may provide the recipient’s email address or other contact information to facilitate the transfer. When you receive a ticket transfer, you will need to log in to or create an account, providing us with your account information. 
• We may also collect Personal Data at other points within our Services that state that Personal Data is being collected.

4.3. Information You Provide to Facebook and other Social Networking Sites (SNS). The Services may allow users to access Facebook (or another SNS) to interact with friends. If you are already logged into the Services and Facebook (or another SNS), when you click on "Connect with Facebook," or a similar function for another SNS, you will be prompted to merge your profiles. If you are already logged into the Services but not logged into Facebook or another SNS that we support, when you click on "Connect with Facebook," or a similar function for another SNS, you will be prompted to enter your SNS credentials or to "Sign Up" for the SNS. By proceeding, you are allowing the Services to access your information and you are agreeing to Facebook’s or other SNS’s Terms of Use in your use of the Services. Conversely, if you are not currently registered as a user of the Services, and you click on "Sign in" using Facebook or another SNS that we support, you will first be asked to enter your Facebook or SNS credentials and then be given the option to register for the Services. In this case, we may receive information from Facebook or another SNS to make it easier for you to create an Account with us and show our relevant content to your Facebook or SNS friends. Once you register with us and connect with Facebook or another SNS, you will be able to automatically post recent activity back to Facebook or the other SNS. Any information that we collect from your Facebook or other SNS account may depend on the privacy settings you have established with that SNS, so please consult the SNS’s privacy and data practices. You have the option to disable your connection with Facebook or another SNS at any time by logging into your account with us and modifying your settings accordingly.

4.4. Information Collected Automatically. When you use the Services, open or click on emails we send you, or interact with our advertisements, we or third parties we work with may automatically collect certain information using technologies such as cookies and other tracking technologies described below.

• Information Collected by Our Servers. To make our Services more useful to you, our servers (which may be operated by a third party, including Amazon Web Services) collect information from you, including information about the device you use to access our Services, the date and time you access our services, etc.
• Log Files. Like many online services, we gather certain information automatically and store it in log files. When using our Services, this information generally includes IP addresses, browser type, Internet service provider ("ISP"), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information to analyze trends, administer our Services, track users’ movements within our Services, gather demographic information about our user base as a whole, and better tailor our Services to our users’ needs. We do not link this automatically-collected data to Personal Data.
• Cookies. Like many online services, we use cookies to collect information. “Cookies" are small pieces of code that a website or app sends to your device. For users of our Services, we may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience.
• Analytics. We may work with third-party vendors who use the technologies described in this section to conduct website analytics to help us track and understand how visitors use our Services.
• Mobile Services. We may also collect De-identified Data from your mobile device if you have downloaded our mobile application. Examples of information that may be collected and used include your geographic location, how you use the application, and information about the type of device you use (such as manufacturer and model of your device, your preferred language, unique device identifier, IP address of the device, and your location). In addition, in the event our Services crash on your mobile device, we will receive information about your mobile device model software version and device carrier, which allows us to identify and fix bugs and otherwise improve the performance of our Services. This Deidentified Data is sent to us as aggregated information and is not traceable to any individual and cannot be used to identify an individual.

4.5. Information Collected from You about Others. If you decide to invite a third party to create an account with us, we will collect your and the third party’s names and email addresses or phone numbers in order to follow up with the third party. We rely on you to obtain whatever consents from the third party required by law to allow us to access and collect the third party’s name and email address as required above. You or the third party may request that we delete this information as described in Section 10.3 of this Privacy Policy. When you invite friends to the Services, we will access your address book and we will import your contacts’ names and email addresses or phone numbers in order to facilitate the invitation. The email that is sent to your friends will come from your email address so that your friends know that you want to invite them to access our Services. We do not store any passwords you provide as part of the contact import process. We also collect some settings that help us to interpret your data, such as the language and keyboard settings that you have established, and the phone’s carrier, mobile network code, and mobile country code.

4.6. Location Information. If you have enabled location services on your phone with respect to our Services, we collect your location information to suggest products or services in your general area. If you do not want this information collected by us, you can disable location services on your phone with respect to our Services.

4.7. A Note About Children. We do not knowingly gather Personal Data from visitors under the age of 13. If we learn that we have inadvertently collected Personal Data from a child under 13, we will attempt to delete the information as soon as possible. In accordance with applicable laws, we do not knowingly sell Personal Data related to a child under 18, or process Personal Data in a manner that targets individuals under 18 for advertising purposes. If we become aware that we have processed such data in a way that is not permitted, we will take appropriate steps to address it. If you believe that we might have collected any Personal Data from a child under 13, please contact us at dataprivacy@todaytixgroup.com. 

5. Use of Your Personal Data.

5.1. General Use. In general, Personal Data you submit to us is used either to respond to requests that you make or to aid us in serving you better. We use your Personal Data in the following ways:

• To facilitate the creation of and to assist our efforts to secure your account;
• To identify you as a user in our system;
• To provide improved administration of our Services;
• To provide the Services you request;
• To improve the quality of experience when you interact with our Services;
• To send you a welcome email to verify ownership of the email address provided when your account was created;
• To send you administrative email notifications, such as security or support and maintenance advisories; To send newsletters, surveys, offers, and other promotional materials related to our Services and for other marketing purposes;
• To sign you up to our loyalty program and enable you to receive membership benefits and communication;
• To enable and process the transfer of tickets between users, including verifying accounts and updating ticketing ownership;
• To attribute transferred tickets to the recipient’s Loyalty Program status; and
• To manage and administer Ticket Protection benefits for the recipient of a transferred ticket, if applicable.

5.2. Creation of Deidentified Data. We may create De-identified Data records from Personal Data by excluding information (such as your name) that makes the data personally identifiable to you. We use this Deidentified Data to analyze request and usage patterns so that we may enhance the content and navigation of our Services. We reserve the right to use Deidentified Data for any other purpose and disclose Deidentified Data to third parties in our sole discretion. We maintain and use Deidentified Data in accordance with applicable laws and commit not to reidentify such data except as permitted by law. 

6. Disclosure of Your Personal Data. We disclose your Personal Data as described below. We share your Personal Data with your consent or to complete any transaction or provide any product or service you have requested or authorized. We also share Personal Data with our Affiliates; with vendors working on our behalf; when required by law or to respond to legal process; to protect our customers; to maintain the security of our products and services; and to protect the rights and property of the Company and its customers.

6.1. Third Parties Designated by You. When you use the Services, the Personal Data you provide will be shared with the third parties that you designate to receive such information, including other websites, your friends, relatives, and business associates. Depending on the type of access you grant to such third parties, they may also be permitted to edit the information you have provided to us and to designate others to access and edit such information. You may change your settings at any time as to who has access to your information by going to your account settings and changing your publishing options.

6.2. Third-Party Service Providers. We may share your Personal Data with third-party service providers to: provide you with the products or services that we offer you or that you order through our Services; to conduct quality assurance testing; to facilitate the creation of accounts; to provide technical support; and/or to provide other services for us. We require these third-party service providers to not use, retain or share your Personal Data other than to provide services for us.

6.3. Payment Processors. If you make a payment through the Website, your payment card details are provided to our payment processing service provider, Adyen. You may read Adyen’s privacy policy at https://www.adyen.com/policies-and-disclaimer/privacy-policy to learn more about how they use and protect your information. We do not receive your full credit card or other payment information. 

6.4. Theatre Partners, Agents, Contractors. We may disclose your Personal Data to any of our theatre partners (“Partners”), or to our agents or contractors who assist us in providing our services and products, processing transactions, fulfilling requests for information, receiving and sending communications, updating marketing lists, analyzing data, providing support services or in other tasks, from time to time. Our partners, agents, and contractors will only use your information to the extent necessary to perform their functions. In addition, if you purchase tickets or engage with services through a website we operate on behalf of a Partner, we may share your Personal Data with that Partner for their own marketing purposes, subject to their privacy policy. You may opt out of receiving marketing communications from our Partners by following the opt-out instructions in those communications.

6.5. Affiliates. We may share some or all of your Personal Data with our parent company, subsidiaries, joint ventures, or other companies under common control with us ("Affiliates"), in which case our Affiliates will honor this Privacy Policy.

6.6. Business and Advertising Partners. We may share your Personal Data with third parties who partner with us to promote products and services, provide marketing and advertisements, or use the data for other commercial purposes. We do not control how these third parties use and share your Personal Data once they receive it. You will need to contact such third parties directly for information about their privacy practices or to exercise any rights you may have (including if you would like to opt-out of marketing messages).

6.7. Corporate Restructuring. We may share some or all of your Personal Data in connection with or during the negotiation of any merger, financing, acquisition, or dissolution transaction or proceeding involving the sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of insolvency, bankruptcy, or receivership, Personal Data may also be transferred as a business asset. If another company acquires us, our business, or some or all of our assets, that company will possess the Personal Data collected by us and will assume the rights and obligations regarding your Personal Data as described in this Privacy Policy.

6.8. Social Networking Sites. Some of our Services may enable you to post content to SNSs. If you choose to post content to an SNS, we will provide information to the applicable SNS in accordance with your elections. You acknowledge and agree that you are solely responsible for your use of any SNSs and that it is your responsibility to review the terms of use and privacy policy of such SNSs. We will not be responsible or liable for: (i) the availability or accuracy of such SNSs; (ii) the content, products or services on or availability of such SNSs; or (iii) your use of any such SNSs.

6.9. Other Disclosures. Regardless of any choices you make regarding your Personal Data (as described below), we may disclose Personal Data if we believe in good faith that such disclosure is necessary (i) in connection with any legal investigation; (ii) to comply with relevant laws or legal obligations, or to respond to subpoenas or warrants served on us; (iii) to protect or defend our rights or property or users of the Services; and/or (iv) to investigate or assist in preventing any violation or potential violation of the law, this Privacy Policy, or our Terms of Use.

7. Third-Party Services. Our Services may contain links to services provided by third-party companies ("Third-Party Companies"). When you click on a link to any other website or location, you will leave our Service and go to another service, and another entity may collect Personal Data or Deidentified Data from you. We have no control over, do not review, and cannot be responsible for, these Third-Party Companies or their content. Please be aware that the terms of this Privacy Policy do not apply to any Third-Party Companies or content, or to any collection of your Personal Data after you click on links to such Third-Party Companies. We encourage you to read the privacy policies of every service you use. The links to Third-Party Companies are for your convenience and do not signify our endorsement of such Third-Party Companies or their content, products, or services.

8. Your Choices Regarding Information. You have several choices regarding the use of information on our Service:

8.1. Email Communications. We will periodically send you free newsletters and emails that directly promote the use of our Services. When you receive newsletters or promotional communications from us, you may indicate a preference to stop receiving further communications from us and you will have the opportunity to "opt out" by following the unsubscribe instructions provided in the email you receive or by contacting us directly (please see contact information in Section 9.2 below). Despite your indicated email preferences, we may send you service-related communications, including notices of any updates to our Terms of Use or Privacy Policy.

8.2. Cookies. If you decide at any time that you no longer wish to accept Cookies from our Service for any of the purposes described above, you can instruct your browser, by changing its settings, to stop accepting Cookies or to prompt you before accepting a Cookie from the services you access. Consult your browser’s technical information. If you do not accept Cookies, however, you may not be able to use all portions of the Service or obtain the benefit of the complete functionality of the Service. If you have any questions about how to disable or modify Cookies, please let us know at the contact information provided below.

8.3. How We Respond to Do Not Track Requests. The major browsers have attempted to implement the draft “Do Not Track” ("DNT") standard of the World Wide Web Consortium ("W3C") in their latest releases. As this standard has not been finalized, our Services are not compatible with DNT. We do not recognize DNT instructions or any other automated browser signals regarding tracking mechanisms. For information on all of these categories of cookies, and for more information generally on cookies please refer to aboutcookies.org. However, if you are a resident of California, Colorado, or Connecticut, Texas, Montana, or New Hampshire, we treat opt-out preference signals as a means of opting out of the sale or sharing of Personal Data, or of opting out of the processing of Personal Data for targeted advertising, as applicable. Please see the sections titled Notice to California Residents and Notice to Residents of Other U.S. States below for more information.

8.4. Changing or Deleting Your Personal Data. You may change any of your Personal Data in your account by editing your profile. Where permitted by applicable law, you may request deletion by us of your Personal Data, and we will use commercially reasonable efforts to honor your request, but please note that we may be required to keep such information and not delete it (or to keep this information for a certain time, in which case we will comply with your deletion request only after we have fulfilled such requirements). When we delete any information, it will be deleted from the active database but may remain in our archives. We may also retain your information for fraud detection or similar purposes.

8.5. Applications. You can stop all collection of information by our mobile application(s) by uninstalling and deleting the application(s). You may use the standard uninstall processes available on your mobile device or via the mobile application marketplace or network.

8.6 Interest-Based Advertising. You may opt out of receiving targeted ads from certain data and advertising partners that participate in certain industry self-regulatory programs. The DAA provides a website at www.aboutads.info/consumers with information about how to opt out of target advertising from some or all of the DAA’s participating companies. Additionally, the Network Advertising Initiative (“NAI”) offers a website at http://optout.networkadvertising.org/ where you can opt out of interest-based advertising from some or all of the NAI’s members. Please note that by opting out, you will continue to see generic advertising that is not tailored to your specific interests and activities. In the event that we perform cross-device matching (as described below), once you have opted out on one device (“Opted-Out Device”), we will not use any new data from the Opted-Out Device to identify you on another device for interest-based advertising purposes, and we will not use data from another device for interest-based advertising purposes on the Opted-Out Device.

For targeted advertisements delivered through mobile apps, you may opt out of certain ads or reset advertising identifiers via their device settings. To learn how to limit ad tracking or to reset the advertising identifier on your iOS and Android device, visit the following links:

• iOS - https://support.apple.com/en-us/HT202074
• Android - https://support.google.com/ads/answer/2662922?hl=en

You can also install the DAA’s AppChoices app on your device to opt out of targeted advertising by certain providers, and to select system-level advertising preferences on your device (such as “Limit Ad Tracking”) on Apple devices, or “Opt-out of Interest-based ads” on Android devices).

To learn more from the NAI about how to opt out of targeted advertising on mobile devices, you can also visit the following link: https://thenai.org/opt-out/mobile-opt-out/.

9. Interest Based Advertising. 

9.1. Targeted Advertising / Behavioral Advertising. We may ourselves, or with third-party vendors, use your information to deliver targeted advertising to you when you visit the Services or other websites. Cookies, clickstream data, and other similar technologies described below may be used in this process. For example, if you are searching for information on a particular product, we or our vendor may cause an advertisement to appear on other websites you view with information on that product. This form of advertising, sometimes called “targeted advertising,” “behavioral advertising,” or “cross-context behavioral advertising,” enables us and our vendors to know about your interests in connection with the delivery of a specific ad. We believe that such advertising is helpful because it allows you to see advertisements that are relevant to your interests. If you would like to opt out of these interest-based advertisements, please follow the opt-out process described in the section titled Your Choices above.

9.2 Cross-Device Matching. We may use your information to help us, or our third-party vendors, determine if you have interacted with the Services across multiple devices and to match such devices. To accomplish this, we may rely on information (including demographic, geographic and interest-based data) from third parties such as data vendors, pursuant to their own privacy policies, or we may use information we collect in conjunction with such third-party data. Based on this data, we may then display targeted advertisements across devices that we believe are associated with each other, and may further provide services to our advertisers to better enable cross-device targeting and analysis. To opt-out of or restrict our use of certain cross-device data, please see the section titled Your Choices above.

10. Notice to California Residents. The California Consumer Protection Act (CCPA) and the California Privacy Rights Act of 2020 (CPRA) provide consumers (California residents) with specific rights regarding their Personal Data. This section describes your CCPA rights and explains how you exercise those rights.

For the purposes of this section, Personal Data does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA. To be clear, these rights are granted only to the extent that you are a California consumer and we are acting as a “business” under the CCPA with respect to your Personal Data. The rights in this section are not intended to grant you additional rights, but only your rights under the CCPA.

10.1. Your Rights.

What Personal Data We Collect

You have the right to know what kinds of Personal Data we collect and our business purposes for that collection. We make this information available to consumers in the “Types of Data We Collect” section of this Privacy Policy.

How We Use Your Personal Data

You have the right to know how Personal Data is obtained, how it is used, and our business purposes for that use.

We make this information available to consumers in the “Use of Your Personal Data” section of this Privacy Policy.

How We Disclose Your Personal Data

You have the right to know if your Personal Data was disclosed for a business purpose. In the past 12 months, we have disclosed the categories of Personal Data listed above to Third Party Services Providers, Theatre Partners, Agents, and Contractors, performing services specified by written contract.

We make this information available to consumers in the “Disclosure of Your Personal Data” section of this Privacy Policy.

How We Sell or Share Your Personal Data

We may “sell” or “share” all of the categories of Personal Data listed above with third parties for personalized advertising purposes. 

Right to Know, Right to Receive, Right to Correct, Right to Delete, Right to Opt-Out

You have the right to:

• Know what specific pieces of Personal Data the Company has collected and retained about you.
• Receive a copy of your Personal Data.
• Correct your Personal Data that the Company may have collected.
• Delete your Personal Data.
• Limit the use and disclosure of your Sensitive Personal Data.
• Opt out of sharing or selling your Personal Data.

10.2. Access Request; Information About Data Collected and Shared; Correct Personal Data. You have a right to request that we disclose certain information to you about our collection and use of your Personal Data. You can make an access request by clicking here or emailing your request to: dataprivacy@todaytixgroup.com. We will provide you the following information within 45 days of our receipt of a verifiable consumer request from you:

• The categories of Personal Data we collect about you.
• The categories of sources from which the Personal Data is collected.
• The business or commercial purpose for collection of your Personal Data.
• The business or commercial purpose for the sharing of your Personal Data.
• The categories of persons with whom we share your Personal Data.
• The specific pieces of Personal Data we have collected about you.

You also have the right to request that the Company correct certain Personal Data that we may have collected about you. To do so, please make a correction request by clicking here or emailing dataprivacy@todaytixgroup.com.

We will respond to your right to access, right to know and right to correct requests within 45 days, unless additional time (up to 45 more days) is needed, in which case we will let you know.

10.3. Deletion Request: Requesting Deletion of Personal Data. You may choose to request the deletion of Personal Data collected by the Company. Within 45 days of our receipt of a verifiable consumer request from you, we will delete the Personal Data we have collected about you, except for situations when that information is necessary for us to: provide you with a good or service that you requested; perform a contract the Company entered into with you; maintain the functionality or security of our systems; comply with or exercise rights provided by applicable law; or use the information internally in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with the Company. To exercise your right to request the deletion of your Personal Data, please email us at dataprivacy@todaytixgroup.com or mail your request to: TodayTix, 1501 Broadway, Suite 1313, New York, NY 10036, Attn: Data Privacy. Requests for the deletion of Personal Data are free.

We will respond to your deletion requests within 45 days unless additional time (up to 45 more days) is needed, in which case we will let you know.

10.4. Opt-Out of Sale or Sharing of Personal Data. You have the right to opt out of the sale or sharing of your Personal Data, as well as the right to opt in to the sale or sharing of such information. To our knowledge, we do not sell or share the personal information of minors under 18 years of age. You (or your authorized representative) can opt out of our sale or sharing of Personal Data to Third-Party Companies by visiting the following Internet Web page: Your Privacy Choices or emailing your request to dataprivacy@todaytixgroup.com. 

You may change your mind and opt back in to Personal Data sales at any time by emailing dataprivacy@todaytixgroup.com. 

10.5. Right to Limit the Use and Disclosure of Sensitive Personal Information. You may have the right to limit the use or disclosure of your Sensitive Personal Information (“SPI”), as that term is defined under the CCPA, if we are using it beyond what is reasonable and proportionate to provide the requested goods or services. You can make a request for us to limit the use or disclosure of your SPI by visiting the web page, Your Privacy Choices, or emailing us at dataprivacy@todaytixgroup.com.

10.6. Process to Verify Consumer Requests. When you submit your request, we will take steps to attempt to verify your identity. We will seek to match the information in your request to the Personal Data we maintain about you. As part of our verification process, we may ask you to submit additional information, use identity verification services to assist us, or if you are a registered customer, we may ask you to sign in to your account as part of our identity verification process. Please understand that, depending on the type of request you submit, to protect the privacy and security of your Personal Data, we will only complete your request when we are satisfied that we have verified your identity to a reasonable degree of certainty.

If you have a TodayTix account. To access or delete Personal Data related to a TodayTix account, users can log in to their account and make a request directly to our privacy team. It is important to note that a valid login is required to access or delete Personal Data associated with a TodayTix account. This safeguard is in place to protect the security of consumers and their data.

If you do not have a TodayTix account. If you do not have a TodayTix account or would like to export or delete Personal Data not linked to a TodayTix account, you can make a request directly to our privacy team at dataprivacy@todaytixgroup.com. As this request is for Personal Data outside of a logged-in TodayTix account experience, we require two identification factors, such as a verified email and phone number, to process a request to access Personal Data.

10.7. Authorized Agents. The CCPA allows California consumers to designate an authorized agent to exercise certain of their rights under the CCPA.  To exercise your rights on your behalf, your authorized agent may follow the same steps outlined in this Privacy Policy.  Authorized agents will be required to provide proof of their authorization, in particular written permission signed by the consumer, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.  We will not charge the authorized agent a fee in connection with their request.

10.8. Opt-Out Preference Signals. In addition to the advertising opt-out options above, we capture opt out preference signals (also known as Global Privacy Controls), and to the extent users have rights under applicable law, treat them as valid requests to opt out of sale/sharing or to limit the use/disclosure of SPI at the browser level. An opt-out preference signal is a setting or extension in a browser or device that a web user sets to prevent the selling or sharing of personal information or use/disclosure of SPI on sites the browser or device visits. We will process your signal as a request to exercise your CCPA rights to opt out or limit the use with respect to relevant information associated with your device, browser, and/or consumer profile. 

10.9. Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights, including but not limited to, by:

• Denying you goods or services;
• Charging you different prices or rates for goods or services, including through granting discounts or other benefits, imposing penalties;
• Providing you a different level or quality of goods or services; or
• Suggesting that you may receive a different price or rate for goods or services or a different level of quality of goods or services.

10.10. “Shine the Light.” In addition to the above rights, under California Civil Code Section 1798.83 (“Shine the Light”), California residents may have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal information, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us by email at dataprivacy@todaytixgroup.com. If you do not want your personal information shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by emailing us at dataprivacy@todaytixgroup.com. 

11. Notice to Nevada Residents. If you are a resident of Nevada, you have the right to opt out of the sale of certain Personal Data that we have collected (or may collect) from you to data brokers or other third parties. You can exercise this right by visiting Your Privacy Choices or emailing us at dataprivacy@todaytixgroup.com with the subject line “Nevada Do Not Sell Request.” 

12. Notice to Residents of Other U.S. States. Applicable privacy laws in other U.S. states, including, but not limited to, Virginia, Colorado, Connecticut, and Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, or other U.S. states that have similar comprehensive privacy legislation ("State Privacy Laws") provide consumers in certain states with specific rights regarding their Personal Data. To the extent that you are a resident of one of these states, this section describes your rights under the State Privacy Laws and explains how you may exercise these rights. 

The categories of Personal Data we process, our purposes for processing your Personal Data, the categories of Personal Data that we share with third parties, and the categories of third parties with whom we share it are set forth in the terms of the Privacy Policy above. 

12.1. Your Rights. In addition to the rights set forth in our Privacy Policy, the State Privacy Laws provide you with the following rights:

• Right to Know. You have the right to know whether we process your Personal Data and to access such Personal Data. Delaware residents have the right to obtain a list of the categories of third parties to which we have disclosed personal information, and Oregon residents may obtain a list of the specific third parties to which we have disclosed personal information. You can make a right to know request by clicking here or emailing your request to dataprivacy@todaytixgroup.com.
• Right to Data Portability. You have the right to obtain a copy of your Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means. You may request such personal data up to twice annually, subject to certain exceptions, by sending an email to us at dataprivacy@todaytixgroup.com.
• Right to Delete. You have the right to delete Personal Data that you have provided by or that we have obtained about you. Please note that we may deny such request if the requested deletion falls under an exception as set forth in the State Privacy Laws. Additionally, if you request deletion of your personal data and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal data remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal data for any purpose except for those allowed under the State Privacy Laws. To exercise your right to request the deletion of your Personal Data, either email your request to dataprivacy@todaytixgroup.com or mail your request to: TodayTix, 1501 Broadway, Suite 1313, New York, NY 10036, Attn: Data Privacy. Requests for the deletion of Personal Data are free.
• Right to Opt Out. You have the right to opt out of the processing of your Personal Data for purposes of: (i) targeted advertising; (ii) the sale of Personal Data; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As of the latest date of the Privacy Policy, we process Personal Data for the purposes of targeted advertising, but we do not sell your Personal Data in exchange for monetary or other valuable consideration, and we do not engage in profiling decisions based on your personal data that produce legal or similarly significant effects concerning you. If you wish to opt out of the processing of your Personal Data for any of the above purposes, click here. We will also treat opt-out preference signals as valid opt-out requests.
• Right to Correct. You have the right to correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes for which we process it. You may request correction to your Personal Data by clicking here or sending an email to dataprivacy@todaytixgroup.com. 
• Right to Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights. Unless permitted by the State Privacy Laws, we will not:
• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; 
• Provide you with a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

12.2. Verifying Your Identity. When you submit your request, we will take steps to attempt to verify your identity. We will seek to match the information in your request to the Personal Data we maintain about you. As part of our verification process, we may ask you to submit additional information, use identity verification services to assist us, or if you are a registered customer, we may ask you to sign in to your account as part of our identity verification process. Please understand that, depending on the type of request you submit, to protect the privacy and security of your Personal Data, we will only complete your request when we are satisfied that we have verified your identity to a reasonable degree of certainty.

If you have a TodayTix account. To access or delete Personal Data related to a TodayTix account, users can log in to their account and make a request directly to our privacy team. It is important to note that a valid login is required to access or delete Personal Data associated with a TodayTix account. This safeguard is in place to protect the security of consumers and their data.

If you do not have a TodayTix account. If you do not have a TodayTix account or would like to export or delete Personal Data not linked to a TodayTix account, you can make a request directly to our privacy team at dataprivacy@todaytixgroup.com. As this request is for Personal Data outside of a logged-in TodayTix account experience, we require two identification factors, such as a verified email and phone number, to process a request to access Personal Data.

12.3. Response Time; Your Right to Appeal. We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, State Privacy Laws allow us up to 90 days to respond. We will contact you within 45 days from when you contacted us to inform you of the need for additional time and the reason for such extension. We may charge you a reasonable fee to cover administrative costs if your requests are manifestly unfounded, excessive, or repetitive. 

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. You will have the right to appeal within a reasonable period of time after you have received our decision. Within 60 days (45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint.

13. Security of Your Personal Data.

• For online payments, we use the payment services of Adyen. We do not process, record or maintain your credit card or bank account information.
• We are committed to protecting the security of your Personal Data. We use a variety of industry-standard security technologies and procedures to help protect your Personal Data from unauthorized access, use, or disclosure. We also require you to enter a password to access your account. Please do not disclose your account password to unauthorized people. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we use reasonable efforts to protect your Personal Data, we cannot and do not guarantee its absolute security.

14. Retaining Personal Data. We will retain your Personal Data for as long as your inquiry is active or as needed to provide you with the Services, and for a reasonable time thereafter in accordance with our standard procedures or as necessary to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Even if we delete some or all of your information, we may continue to retain and use anonymous or aggregate data, or any other data that constitutes non-Personal Data. Please note that we will not be liable for disclosures of your data due to errors or unauthorized acts of third parties.

15. Non-Discrimination. Providing your Personal Data may be a requirement necessary to enter into or to perform a contract, including for the performance of the Services, and replying to and managing requests for information, questions, communication, or feedback. In such circumstances, refusal to provide your Personal Data would make it impossible for us to perform the contract or to provide the requested Services. However, providing your Personal Data for marketing purposes alone is optional; refusal to provide your Personal Data for marketing purposes will not have any impact on the performance of our Services.

16. Changes to This Privacy Policy. This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes to our Privacy Policy by posting the new Privacy Policy here www.todaytix.com/us/privacy-policy and we will change the "Last Updated" date above. You should consult this Privacy Policy regularly for any changes.