General

In accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR or Regulation), we comply with the provisions of Regulation regarding the processing of your data.

All employees of Toastalia agree to protect the personal data obtained in the course of their work in a confidentiality agreement.

By using our Sites and Services, you agree to this Privacy Policy. The Privacy Policy is subject to and incorporates by reference our Terms of Use. To review the Terms of Use go to https://www.toastalia.com/tos.html.

In this Policy, the following definitions apply:

The term “Customer” means any person or company who uses Toastalia’s Sites and/or Services.

The term “Consumer” means a customer, user or visitor of a website developed and operated by a Toastalia Customer.

The term “Personal Information” means any information which, either alone or in combination with other information, identifies you as an individual, such as your name, mailing address, email address and other information you submit to us at the Site.

We may also collect information about your behavior or our other customers’ behavior when visiting the Site. Toastalia may display this information publicly, or provide it to others. However, Toastalia does not disclose personally-identifying information other than as described below.

We may collect Personal Information from our Customers. Through the use of our Services, we may also receive information, which may include Personal Information about Consumers who use our Customers’ Sites. This Privacy Policy also applies to how Toastalia uses and discloses the Personal Information it obtains or receives through its Sites and Services.

If you are a visitor to or user of a third-party website or service (“Third-Party Property”) that utilizes any Toastalia products (such as the Toastalia popups, forms and pages), then any information you submit to such Third-Party Property (including via the Toastalia product) is collected under the privacy policy of the owner of such Third-Party Property, and you should contact such owner with any related requests or inquiries you may have.

Toastalia is not responsible for the privacy or security practices of our Customers, which may differ from those set forth in this privacy policy. Please check with individual Customers about the policies they have in place.

If you have any inquiries specifically directed towards ConvertFlow, please email us at support@toastalia.com.

Information We Collect

Information Related to Your Interaction With Toastalia And The Services

‍Registration and Contact Information. We collect information about you when you (a) register to use the Services and (b) otherwise provide contact information to us via email, mail, or through our Services. This information you provide may include your username, first and last name, email address, mailing address or phone number.

Authentication. By registering or authenticating, Users allow the Services to identify them and give them access to dedicated services. Depending on what is described below, third parties may provide registration and authentication services. In this case, the Services will be able to access some Data, stored by these third-party services, for registration or identification purposes. To find out more, please refer to the description of each service.

‍Payment Information. When you purchase the Services, we will also collect transaction information, which may include your credit card information, billing and mailing address, and other payment-related information (“ Payment Information”). We describe how Payment Information may be collected and processed in Section 3.

‍Third Party Platforms. We may collect information when you interact with our advertisements and other content on third-party sites or platforms, such as social networking sites. This may include information such as “Likes”, profile information gathered from social networking sites or the fact that you viewed or interacted with our content.

‍Information collected via Technology. When you visit our Sites or interact with the Services, some information is automatically collected via technology. In an effort to improve your experience of the Sites and Services, this may include information such as the date and time, information about your browser, IP address, operating system and computer or device, and the website you visited before our Sites (known as the "referring URL"), as well as other information. We also collect information on how you use Toastalia’s Sites and Services, including the elements you have interacted with, metadata and other details about these elements, clicks, the Site pages viewed, and other user actions.

We track this information using cookies. Cookies are small data files that are placed on your computer or mobile device when you visit a website, mobile app or use an online platform. Cookies are widely used by online service providers to facilitate and help to make the interaction between users and websites, mobile apps and online platforms faster and easier, as well as to provide reporting information. Toastalia uses cookies to help us and our customers to identify and track visitors, their website usage, and their website access preferences. The use of cookies by our customers, partners, affiliates and service providers is not covered by our privacy policy. We do not have control over how they use cookies on their sites. ‍

‍Other Information. We may collect other information from you that is not specifically listed here. We may use any such information in accordance with this Privacy Policy or as otherwise permitted by you. ‍

Customer Data. You may submit various types of information and data into the Services for hosting and processing purposes (“Customer Data”). Customer Data may include, without limitation, "Personal Information" such as names, email addresses and phone numbers of your end customers, potential customers and other users of and visitors to your websites, apps and other properties (“Consumers”), which information may be input into the Services by you or collected by the Services using Toastalia scripts, pages and other code implemented on such properties.

We will only use, disclose and otherwise process Customer Data in accordance with this Privacy Policy and for the provisioning of the Services.

How We Use Information We Collect

We may use the information we collect through the Services or other sources for a range of reasons, including:
To provide, support and improve the Services and our other products and services, including to operate certain features and functionality of the Services (for example, by remembering your information so that you will not have to re-enter it during this or future visits and personalizing our Site to improve your browsing experience).

To communicate with you about your account and provide customer support.

To process your payments. This includes sending you emails, invoices, receipts, notices of delinquency, and alerting you if we need a different credit card number. We use third parties for secure credit card transaction processing, as described in Section 3 (Payment Processing).

To enforce compliance with our Terms of Use and applicable law, and to protect the rights and safety of our Customers and third parties, as well as our own.

To meet legal requirements, including complying with court orders, valid discovery requests, valid subpoenas, and other appropriate legal mechanisms.

To provide information to representatives and advisors, including attorneys and accountants, to help us comply with legal, accounting, or security requirements. To analyze trends, administer or optimize the Services, monitor usage or traffic patterns (including to track users’ movements around the Services) and gather demographic information about our user base as a whole.

To communicate directly with you. If you are a registered Customer of Toastalia, or have supplied your email address, Toastalia may occasionally communicate directly with you via newsletters or email to tell you about new features, promotions, updates, product announcements, and to solicit your feedback about Toastalia and our products. Your opt-out options for promotional communications are always available in the communications you receice.

To deliver you advertising, including by serving and managing ads on the Services or on third party sites and to tailor ads based on your interests and browsing history.

In the manner described to you at the time of collection or as otherwise described in this Privacy Policy.

How We Share Information

Affiliated Businesses And Third Party Websites We Do Not Control
In certain situations, businesses or third party websites we’re affiliated with may sell items or provide services to you through a website (either alone or jointly with us). You can recognize when an affiliated business is associated with such a transaction or service, and we will share your Personal Information with that affiliated business only to the extent that it is related to such transaction or service. We have no control over the policies and practices of third party websites as to privacy or anything else, so if you choose to enter into such transaction or to receive such service, please review the applicable third party websites’ policies.

Service Providers
Toastalia may share Personal Information we collect with those of its employees, contractors and third-party service providers that need to know that information in order to process it on Toastalia’s behalf, or to provide services that help us with our business activities, which may include assisting us with marketing, advertising our product/service offerings, or providing, maintaining and improving the features and functionality of the Service, among other things. Some of those employees, contractors, and third-party service providers may be located outside of your home country. In all cases where we share your information with such service providers, we explicitly require the service provider to acknowledge and adhere to our privacy and customer data handling policies. Except as otherwise discussed in this Privacy Policy, Toastalia will not sell Personal Information to anyone, and will not disclose Personal Information to any third parties for such third parties’ marketing purposes, unless we first receive your consent. However, we may share aggregate and non-personally identifying information with third parties for marketing, advertising, research, or other purposes.

Advertising Partners
We may partner with third-party advertising networks and exchanges to display advertising on our Websites or to manage and serve our advertising on other sites and may share Personal Information with them for this purpose. We and our third-party partners may use cookies and other tracking technologies, such as pixels and web beacons, to gather information about your activities on our Websites and other sites in order to provide you with targeted advertising based on your browsing activities and interests. For more information about cookies and other tracking technologies, please see Section 1.

Compelled Disclosure
We may share Personal Information with any competent law enforcement body, regulatory body, government agency, court or other third party where we believe disclosure is necessary (a) as a matter of applicable law or regulation, (b) to exercise, establish, or defend our legal rights, or (c) to protect your vital interests or those of any other person.

To A Potential Buyer (And It's Agents And Advisors)
If we engage in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Toastalia's assets, financing, acquisition of all or a portion of our business, a similar transaction, or steps in contemplation of such activities, your Customer Data and Consumer Data may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy. In that event, any acquirer will be subject to our obligations under this Privacy Policy, including your rights to access and choice. We will notify you of the change either by sending you an email or posting a notice on our Site.

Payment Processing
When you make a purchase on the Service, any credit card information you provide as part of your Payment Information is collected and processed directly by our payment processor Stripe through their secure Stripe Checkout service or PayPal through their secure PayPal checkout service. Toastalia never receives or stores your full credit card information. Stripe and PayPal commit to complying with the Payment Card Industry Data Security Standard (PCI-DSS) and using industry-standard security. Stripe and PayPal may use your Payment Information in accordance with their own Privacy Policy.

Consumer Data
We may disclose Consumer Data to the Customer who has collected such information. Notwithstanding anything else in this Privacy Policy, our Customers may access, view and download any Consumer Data gathered through the website they operate, and we have no control over their collection, use or disclosure of this information. Toastalia will not use such Consumer Data for any purpose other than to provide or improve our Services to Customer or as otherwise directed by Customer in accordance with Customer’s written instructions or consistent with applicable laws.

By disclosing Consumer Data, including Personal Information on Consumers, to Toastalia, the Customer acknowledges that it has read, understood and agreed to this Privacy Policy, and warrants that it has obtained the consent of the relevant Consumer to such collection, use and disclosure of Personal Information as described in this Privacy Policy. Customer agrees that it may be necessary for Toastalia to access Consumer Data to respond to Customer’s request for support with any technical problems. Customer shall hold Toastalia, its subcontractors, suppliers and licensors harmless from any and all data protection claims relating to such access.

Any Other Person With Your Consent
Except as set forth above, you will be notified when your Personal Information may be shared with third parties, and will be able to prevent the sharing of this information.

How We Protect Information

Security
Toastalia accounts require a username and password to log in. Customers must keep their username and password secure, and never disclose it to a third party. Because the information in a Customer's Toastalia account is so sensitive, account passwords are hashed, which means we cannot see a Customer's password. We cannot resend forgotten passwords either. We will only provide Customers with instructions on how to reset them.

We implement security measures to protect Customer Data and Consumer Data provided to us from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the information we collect, process and store, and the current state of technology. However, these measures do not guarantee that your Customer Data and Consumer Data will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. Please be aware that despite our best efforts, no data security measures can guarantee 100% security all of the time. By visiting our Site and using our Services, you agree to indemnify, defend (if we so request) and hold harmless Toastalia and its affiliates, suppliers, partners and agents from and against any claim, demand, losses, damages or expenses (including reasonable attorney's fees) arising from your content, your use of the Sites or Services, your connection to the Sites, your violation of these Terms or your violation of any rights of any third party. Your indemnification obligation will survive the termination of these Terms and your use of the Sites and Services.

Processing for outside the EEA Persons

If you are from outside the European Economic Area, our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it.

However, we will normally collect and use Personal Information from you where the processing is in our legitimate interests and not overridden by your data-protection interests or fundamental rights and freedoms. Typically, our legitimate interests include improving, maintaining, providing, and enhancing our technology, products, and services; ensuring the security of the Services and our Websites; and for our marketing activities.

If you are a Customer, we may need the Personal Information to perform a contract with you. In some limited cases, we may also have a legal obligation to collect Personal Information from you.

If we ask you to provide Personal Information to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Information is mandatory or not, as well as of the possible consequences if you do not provide your Personal Information.

Where required by law, we will collect Personal Information only where we have your consent to do so.

If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Information, please contact us at support@toastalia.com.

We Operate In the United States and Europe
Our servers are located in the United States and our offices are located in Europe, so your information may be transferred to, stored, or processed in either geographic location. While the data protection, privacy, and other laws of Europe might not be as comprehensive as those in your country, we take many steps to protect your privacy, including offering our Customers a data processing agreement.

We may from time to time transfer your personal information to other countries and make it accessible to our parents, subsidiaries, affiliates and third party service providers internationally. We will protect your personal information in accordance with this Privacy Policy wherever it is processed.

Other Data Protection Rights

You may have the following data protection rights:

To access, correct, update or request deletion of your Personal Information. Toastalia takes reasonable steps to ensure that the data we collect is reliable for its intended use, accurate, complete, and up to date. You may contact us directly at any time about accessing, correcting, updating or deleting your Personal Information, or altering your data, by emailing us at support@toastalia.com. We will consider your request in accordance with applicable laws.

In addition, if you are a resident of the EEA, you can object to processing of your Personal Information, ask us to restrict processing of your Personal Information or request portability of your Personal Information. Again, you can exercise these rights by emailing us at support@toastalia.com.

You have the right to complain to a data protection authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA are available here.

As described above, for much of the Personal Information we collect and process about Consumers through the Services, we act as a processor on behalf of our Customers. In such cases, if you are a Consumer and want to exercise any data protection rights that may be available to you under applicable law or have questions or concerns about how your Personal Information is handled by Toastalia as a processor on behalf of our individual Customers, you should contact the relevant Customer that is using the Toastalia Services, and refer to their separate privacy policies.

If you no longer want to be engaged by one of our Customers through our Services, please contact the Customer directly to update or delete your data. If you contact us directly, we may remove or update your information within a reasonable time and after providing notice to the Customer of your request.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may ask you to verify your identity in order to help us respond efficiently to your request.

Your Opt-out Choices

Opt-Outs
We may provide you with the opportunity to “opt-out” of having your personal information used for certain purposes when we ask for this information. If you decide to opt-out, we may not be able to provide certain features of the Services to you.

Communication Preferences
If you no longer wish to receive our newsletter and promotional communications, you may opt-out of receiving them by following the instructions included on such communications, such as clicking the "unsubscribe" link at the bottom of our marketing emails. Please note, however, that you may be unable to opt-out of certain service-related communications.

Also, all opt-out requests can be made by emailing us at support@toastalia.com. Please note that some communications (such as service messages, account notifications, billing information) are considered transactional and necessary for account management, and Customers cannot opt out of these messages unless you cancel your Toastalia account.

Blocking Cookies
You can remove or block certain cookies using the settings in your browser but the Services may cease to function properly if you do so.

How We Respond to Do Not Track Signals
Your Web browser may have a “do not track” setting which, when enabled, causes your browser to send a do not track HTTP header file or “signal” to each site you visit. At present, the Services do not respond to this type of signal.

Data Retention

We will retain Customer Data and Consumer Data as long as your, or your company/organization’s account remains active, or as needed to provide you services. If you wish to cancel your account, contact us at support@toastalia.com.

We will retain and use your Customer Data and Consumer Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. However, Toastalia reserves the right to delete your Customer Data and Consumer Data after 90 days following your account's suspension date.

Links To Other Websites

Our Sites or our Services may contain links to other websites that we don't own or control. Some of these sites may even be co-branded with the Toastalia name or logo. We are not responsible for any of these other websites. You will not hold us responsible for any aspect of these other websites, including their content, privacy policies, or anything else. You must use your own discretion when you go to other websites. You should also read the terms and conditions and privacy policies of these other websites.

Services Restrictions To Children

The Services are not intended for use by anyone under the age of 18, nor does Toastalia knowingly collect or solicit personal information from anyone under the age of 13. If we learn that a child under 13 submits personal information to Toastalia, we will attempt to delete the information as soon as possible. If you believe that we might have any personal information from a child under 13, please contact us at: support@toastalia.com.

Changes To Our Privacy Policy

Please read the Terms of Use and this Privacy Policy carefully. Toastalia reserves the right to update or change our Privacy Policy at any time meaning you should periodically check for updates to this Privacy Policy. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy. The latest version of this Privacy Policy is effective as of the last updated date, and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted to this page.

Contact Us

If you have any questions or concerns about our Privacy Policy, you may contact us by emailing us at at support@toastalia.com or by writing to us at:

Toastalia
Calle Cortei 60, El Vendrell
Spain, Tarragona 43880

This Privacy Policy is effective as of July 01, 2023.