Privacy Notice
Last Updated: March 4, 2026
Bob & Tom, LLC (“us“, “we“, or “our“) thanks you for visiting our website.
1. Introduction
This Privacy Notice (the “Notice”) (available at https://www.bobandtom.com/privacy) describes the types of personal data we collect about you when you visit the website located at www.bobandtom.com (our “Website“) and use any of its available features and services, including ordering products from us. For simplicity, we refer to the Website and our communication channels collectively as the “Services” in the remainder of this Notice.
For purposes of this Notice, “personal data” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you.
For purposes of this Notice, information is not “personal data” if it cannot reasonably be used to infer information about you or be linked to you, such as if it’s been deidentified or aggregated, or if it is information that you have made available to the general public, such as public posts on social networks.
This Notice applies to personal data we collect when you use the Services, such as:
- When you browse our Website, and
- When you interact with us through email or similar electronic messages.
Please read this Notice carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use the Services. By accessing or using the Services, you agree to this Notice. This Notice may change from time to time. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
Contents
Personal Data We Collect About You. 2
How We Collect Your Personal Data. 2
Disclosure of your Personal Data to Service Providers. 4
Disclosure of your Personal Data to Third Parties 4
Disclosures We Reserve the Right to Make. 4
Notice of “Sale” and Targeted Advertising. 5
Your Privacy Choices and Online Tracking Technologies. 5
How to Exercise your Privacy Rights 6
2. Collection of Your Personal Data
Personal Data We Collect About You
This section describes the categories of personal data we have collected about you in the previous twelve months.
The following are the categories and types of personal data that we may collect from or about you directly, depending on how you interact with us:
- Direct identifiers. Direct personal identifiers, such as name, online identifier, online username or social media handle.
- Contact information. Direct personal identifiers such as email address or phone number and indirect identifiers like postal address.
- Demographic Information. Indirect identifiers such as age, gender, race, education level, and nationality.
- Commercial Information. Products you have purchased, payment information such as credit or debit card numbers, and shipping address.
- Communication Information: Non-content information (like time of day and addressing information) and content information (the body of the message you send) through the use of chatrooms, forums, submission forms, or message boards provided by us, or through phone calls, emails, and text messages.
- Profile Information: Inferences drawn from any of the information described above to create a profile about you reflecting your preferences or characteristics.
We also collect personal data automatically as you navigate the Services. The technologies deployed through the Services collect your device information, browsing actions, and patterns as follows:
- Device Identifiers. Information about the device you are using, such as device identifier of the equipment you use to access the website, hardware model, Media Access Control (MAC) address, IP address, and operating system.
- Online Identifiers. Persistent or probabilistic identifiers gathered from Online Tracking Technologies (discussed below), such as identifiers used to pseudonymously identify you and your website preferences.
- Usage Information. Information about your interaction with the Services, such as the pages you access on the Services, the frequency of access, what you click on, referring URL, traffic data, and when you accessed the website.
- Location Information. Information about your location, which may be determined through your device’s IP address.
- Clickstream Data. We may record what you have clicked while on the Services. This data can tell us Device Identifiers and the address of the website from which you linked to the website. We may collect and use clickstream data as a form of aggregate information to anonymously determine how much time visitors spend on each page of the website, and how customers navigate to and on the website.
- Social Media Platforms and Networks. The Services may include social media features and plugins, such as Instagram and Facebook widgets. These plugins may use Online Tracking Technologies (discussed below) to collect information about your Internet activity, such as Device Identifiers and which page you are visiting on the website. Such social media features are hosted by third-parties and your interactions with those features are governed by the privacy notices of the companies that provide them.
We do not collect any personal data is that is considered “sensitive” under applicable data privacy law.
How We Collect Your Personal Data
The information we collect on or through the Services directly from you may include:
- Information that you provide by filling in forms on the Services or that we provide to you. This includes information provided at the time of requesting to receive contact from us,
- Information provided when you order products from us, and
- Records and copies of your correspondence (including email addresses), if you contact us.
Our Website has features that automatically collect information from you, such as cookies, social media plugins, and pixels, to honor your preferences, allow us to improve our Website and provide you with tailored advertising. These features are described below, and are known collectively as “Online Tracking Technologies.”
Cookies
Our Website uses cookies, which are small data files containing information about you that are stored on your hard drive, or in the local storage of your browser. Cookies are embedded in the HTTP information that travels back and forth between your computer and the servers. Cookies allow automated customer customization and personalization, such by storing session preferences. We use the following categories of cookies:
- Strictly necessary cookies. These cookies are essential for the operation of our Website and include, for example, cookies that enable you to browse our Website and use its features.
- Functionality cookies. These are used to recognize you when you return to our Website in order to improve your experience on our Website, allowing us to personalize our content for you, such as by remembering items in your cart.
- Analytics/performance cookies. These cookies collect information about how you use our Website, for example how you arrived at our Website and which pages you visit most often. This helps us to improve the way our Website works, for example, by ensuring that users are finding what they are looking for easily. These cookies are sometimes placed by Third-Party providers of web traffic analysis services, such as Google Analytics.
- Targeting cookies. These cookies record your visit to our Website, the pages you have visited and the links you have followed. These cookies are usually placed by third-party advertising networks. They remember the other websites you visit, and this information is shared with Third-Party organizations, for example advertisers.
Social Media plugins
We may use social media features and plugins, e.g. “like buttons” and widgets, on our Website. These are services that are provided by social media organizations such as Facebook, Instagram, X (f/k/a Twitter) and others.
Pixels / Web Beacons
We may employ a software technology called web beacons (also known as web bugs, clear gifs or pixels). Web beacons are tiny graphics with a unique identifier, similar in function to cookies, and are used to let us know when content, such as our Website or email, is viewed. We may tie the information gathered by web beacons to the other information we collect about you.
3. Use of Your Personal Data
In the previous twelve months, we have used your personal data for the following purposes
- To provide customer support: we use your direct identifiers and communication information to respond to your messages.
- For our internal business operations. We use your Commercial Information to determine things like product forecasting and to coordinate logistics like shipping.
- Commercial account management: we use your Direct Identifiers, Contact Information, Commercial Information, and Communication Information to maintain commercial accounts with our distributors.
- To improve the Services: we use Usage Information, Clickstream Data, and Online Identifiers to monitor usage of the Services.
- To detect, prevent and address technical issues: We may use Usage Information and Clickstream Data to detect and respond to issues with the Services, like identifying outages and bugs.
- To improve our marketing and promotional efforts: We use Usage Information, Clickstream Data, Online Identifiers, and Profile Information to identify what online marketing efforts are successful.
4. Disclosure of Your Personal Data
This section describes how we have disclosed your personal data to other entities in the previous twelve months.
Disclosure of your Personal Data to Service Providers
We engage other entities to process your personal data on our behalf. We use the following categories of Service Providers:
- Technology Service Providers: These entities provide us with technology necessary to provide the Services like website hosting, cloud storage, cybersecurity, electronic communications. Our Technology Services Providers will process all the categories of personal data listed above.
- Logistics Providers: These entities help us ship and deliver product you order. They process your Direct Identifiers and Commercial Information like mailing address, and may process your Contact Information.
- Professional Advisers: These entities, like consultants, accountants, and lawyers, provide us with information we need to run our business. In certain cases, we may disclose any of the categories of personal data listed above to these entities.
Disclosure of your Personal Data to Third Parties
For purposes of this notice, a “Third-Party” is anyone who is not us or our Service Provider. We disclose your personal data to the following categories of third parties.
- Payment Processors: We disclose your Commercial Information, such as payment card details, to payment card networks to effectuate your purchase of our products.
- Analytics Providers: We may disclose your personal data such as Device Identifiers, Online Identifiers, and Clickstream Data to analytics providers.
We use Google Analytics to measure interaction with the Services and improve the functionality of the Website. To learn more about how Google uses this information, visit “How Google uses information from sites or apps that use our services.”
- Advertisers. We disclose your Device Identifiers and Online Identifiers to advertising companies.
Disclosures We Reserve the Right to Make
In addition to the disclosures of personal data in the previous twelve months described above, we reserve the right to disclose your personal data in the following cases:
- Corporate Reorganization. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us about the users of the Services is among the assets transferred.
- Legal Purposes. To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
- Contractual proposes. To enforce or apply our terms of use and other agreements, including for billing and collection purposes.
- To Prevent Harm. If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
Notice of “Sale” and Targeted Advertising
We never disclose your personal data for money. We disclose your personal data through the use of certain Third-Party tools on the Services, including those relating to analytics and advertising. Specifically, we make available online identifiers to advertising, analytics, and marketing partners. This may be considered a “sale” of your personal data, or “sharing” your personal data / processing it for “targeted advertising” as defined under applicable law. We do not “sell” sensitive personal data, and we specifically do not sell biometric data. You have a right to opt-out of this kind of use, as described in the section Your Privacy Rights.
5. Control over Your Personal Data
Your Privacy Choices and Online Tracking Technologies
If you would like to stop or restrict the placement of cookies or delete any cookies that may already be on your device, please refer to and adjust your web browser preferences. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent.
For clarity, cookie-based opt-outs must be performed on each device and browser that you wish to have opted out. For example, if you have opted out on your desktop or laptop browser, that opt-out will not be effective on your mobile device. You must separately opt out on each device. You may also have to renew this choice if you clear your cookies, or your browser is set to clear cookies automatically.
Please note that your browser may save some information in its cookies and cache to maintain your privacy choices. If you clear these, you may remove your privacy choices and have to remake them.
Please note that cookie-based opt-outs are not effective on some mobile services. Users may opt out of certain advertisements on mobile applications or reset advertising identifiers via their device settings. To learn how to limit ad tracking or to reset the advertising identifier on Your iOS or Android device, click on the following links:
- iOS – https://support.apple.com/en-us/HT202074
- Android – https://support.google.com/ads/answer/2662922?hl=en
Do Not Track
We do not respond to “Do Not Track” (“DNT”) signals sent from your web browser. There is no consensus on how to respond to DNT signals because there is no uniform technology standard for recognizing and implementing DNT signals, and a DNT standard has never been formally adopted. The World Wide Consortium (“W3C”) formally withdrew support of their recommendation for a standard in 2019, and while some browsers will transmit the DNT signal to our Website, other browsers (such as Safari and Firefox) no longer support send DNT signals. However, we do respond to the Global Privacy Control (“GPC”) as described below.
Your Privacy Rights
If you are a resident of California, Nebraska, Tennessee, or Texas, you have the following Privacy Rights:
- Right to Confirm: You have the right to know whether we are processing your personal data.
- Right to Access: You have the right to access your personal data.
- Right to Correct: You have the right to correct inaccurate personal data.
- Right to Delete: You have the right to request we delete personal data provided by, or obtained about, you. Some exceptions apply, such as if we are legally required to keep the information.
- Right to Personal Data Portability: You have the right to obtain a copy of your personal data in a portable and readily usable format that allows you to transfer the personal data to another entity without hinderance, to the extent technically feasible.
- Right to Opt-Out of “Targeted Advertising” or “Sharing”: You have the right to request we stop sharing your personal data for “cross-context behavioral advertising” or processing it for “targeted advertising” ( an “opt-out”), including through a user-enabled opt-out preference signal, as discussed below.
- Right to Opt-Out of “Sale”: You have the right to request the we not disclose your personal data to a Third-Party for our benefit.
If you are a resident of California, you have the following additional right:
- Right to Know: You have the right to request that we disclose to you (1) the categories and/or specific pieces of personal data we have collected about you, (2) the categories of sources for that personal data, for example if the business obtained the information from a data broker, (3) the purposes for which we use that information, (4) the categories of third parties to whom we disclose the your personal data, and (5) the categories of personal data the we sells or discloses to third parties. You can make a request to know up to twice a year, free of charge.
If you are a resident of Nebraska, Tennessee, or Texas and we deny your rights request, you also have the Right to Appeal our denial.
We evaluate rights requests on a case-by-case basis. In certain cases, applicable privacy law may limit or restrict your rights, or we may have a legal basis for denying your request, such as if you request we delete your personal data and we have a legal obligation to retain all or some portion of your personal data.
We don’t use your “sensitive” personal data for any purpose not expressly permitted by applicable data protection law, so we do not offer the right to limit the use and disclosure of your sensitive personal data. We also do not use your personal data to create a profile used for legal or similarly significant decisions, so we do not offer the right to opt-out of processing for that purpose.
How to Exercise your Privacy Rights
You, or your authorized agent, may exercise any of the rights above, including the Right to Appeal, by contacting us via email or through our toll-free telephone number, as described below.
For the security of your personal data and our own legal obligations, we will require you to verify your identity with us for all rights requests, other than to Opt-Out of Sale and Opt-Out of Targeted Advertising. We will verify your identity, or the identity of your authorized agent, by providing us with your most recent order number and the last four digits of the payment card used for the purchase (if applicable), or your name in combination with the phone number and/or email address you used to contact us.
Our Website responds to the Global Privacy Control (“GPC”) which is a website specification that allows your browser to tell us that you want to automatically exercise your Right to Opt-Out of Sale and Sharing (learn more about GPC at www.globalprivacycontrol.org). For clarity, the GPC opt-out is on a per-website basis and applies at the browser level for the device you use to opt out.
6. Children’s Personal Data
The Services are not marketed to, and we do not knowingly collect or maintain personal data from, children under the age of 16. The Services are not intended for children under 16 years of age. We do not use personal data collected from children for marketing or promotional purposes, and we do not disclose such information to any third-party for any purpose whatsoever. No one under age 16 may provide any personal data to or on the Services.
If you are under 16, do not provide any information on the Website or on or through any of the features of the Services, register on the Services, make any purchases through the Services, use any of the interactive or public comment features of the Services, or provide any information about yourself to us. If we learn we have collected or received personal data from a child under 16 without verification of parental consent, we will delete that information.
If you believe we might have any information from or about a child under 16, please contact us using any of the methods described below and we will use all reasonable efforts to delete that information.
7. Changes to this Privacy Notice
It is our policy to indicate a change to this Notice by updating the “effective date” on this Notice. The date this Notice was last revised is identified at the top of the page. You are responsible for periodically visiting our Website and this Notice to check for any changes.
8. Contact Us
If you have any questions about this Privacy Policy, or desire to exercise any of the rights described above, please contact us by email at generalmanager@bobandtom.com or by phone at 317-475-7424 (9AM – 5PM ET ONLY).