Privacy Policy

At Tyme Global, we are committed to protecting the privacy and security of our clients’ personal data. This Privacy Notice explains how we collect, use, process, store, and share your personal data, and outlines your rights regarding this data.

1. Personal Data We Collect

We collect various types of personal data to provide our services and operate our business effectively. The specific data we collect depends on your interactions with us, the services you use, and the choices you make. This may include but is not limited to:

• Contact Information: Such as your name, email address, postal address, and phone number.
• Account Information: Such as usernames, passwords, and other credentials used to access our services.
• Payment Information: (If applicable) Details required for processing payments, such as billing address. Note: Tyme Global does not store sensitive payment information, such as full credit card numbers (PAN).
• Service Usage Data: Information about how you use our services, including features used, time spent, and interactions.
• Technical Data: Such as IP addresses, device information, browser type, and operating system.
• Communication Data: Information from your communications with us, such as inquiries and support requests.
• Cookies and similar technologies: Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie. We use cookies and similar technologies to store and honour your preferences and settings, enable you to sign in, combat fraud, analyze how our products perform, and fulfil other legitimate purposes. 

2. How We Use Your Personal Data

We use your personal data for operational purposes and for analysis, control, and strategic decision-making. Specifically, we use your data to:

• Provide, operate, and maintain our services.
• Process transactions and send you related information.
• Communicate with you about our services, updates, and offers.
• Improve and personalize our services, including developing new features.
• Analyze usage trends and measure the effectiveness of our services.
• Ensure the security and integrity of our systems and data.
• Comply with legal obligations and enforce our terms and policies.

Our processing of personal data for these purposes includes both automated and manual (human) methods of processing. Our automated methods are often related to and supported by our manual methods. For example, to build, train, and improve the accuracy of our automated methods of processing (including artificial intelligence or AI), we manually review some of the output produced by the automated methods against the underlying data.

As part of our efforts to improve and develop our products, we may use your data to develop and train our AI models.  

3. How We Store, Process, and Share Your Personal Data

• Data Storage:
  • Tyme Global does not store or back up any highly sensitive information, such as credit card numbers or social security numbers.
  • Sensitive data is encrypted at rest to ensure its protection.
  • No company data, especially sensitive data, is stored on personal employee assets or removable media.
  • Backups are stored encrypted for a specified duration and with best industry standards.
  • Before decommissioning any server, we verify that no sensitive data remains stored on it.

Personal data collected by Tyme Global will be stored and processed in the United States. We take steps to process the data that we collect under this privacy statement according to this statement’s provisions and the requirements of applicable law.

Category of Data	Purpose(s) of Retention (Why we keep it)	Typical Retention Period	Legal/Business Basis for Retention (Why this period?)
Account Data (e.g., Name, Contact Info, Login)	To provide ongoing service, manage your account, facilitate login, and maintain service continuity.	5 Years	Contractual obligation; Customer relationship management; Fraud prevention
Service Usage Data (e.g., how you use our products, Activity logs)	To improve product functionality, troubleshoot issues, analyze performance, ensure security, and personalize user experience.	5 Years	Product development; Security auditing; Performance analysis
Communication Records (e.g., Support emails, Chat history)	To provide customer support, track inquiries, improve service quality, and maintain a record of interactions.	5 Years	Customer service best practices: Dispute resolution
Compliance & Legal Records (e.g., Privacy Notice acknowledgments, Data subject requests)	To demonstrate compliance with privacy laws (like CCPA, GDPR), manage legal obligations, and for potential legal claims.	5 years after document creation/request closure, or as required by law	Legal compliance; Record-keeping obligations; Statute of limitations

• Data Processing:
  • Data is primarily processed for the purposes outlined in Section 2.
  • We identify and define types of data necessary to support products or services, as well as data considered key for collection, storage, analysis, and reporting.
• Data Sharing:

Please see our U.S. State Data Privacy Laws Notice for more information below.

• Tyme Global does not collect data for the purpose of selling or sharing it with third parties for their independent use without your explicit consent.
• We may share your data with trusted third-party service providers. This sharing occurs either pursuant to our shared agreement with you or to enable them to perform services on our behalf (e.g., hosting, analytics, customer support). Such sharing is always subject to strict confidentiality agreements and is limited to the purposes described in this notice.
• We may disclose data when required by law or to respond to valid legal processes, protect our rights or property, or ensure the safety of our users or the public.
• No mobile opt-in will be shared with third parties for marketing purposes.

4. Your Rights to Access, Alter, and Remove Your Personal Data

We respect your privacy rights and provide you with mechanisms to control your personal data. You have the right to:

• Access Your Data: Request a copy of the personal data we hold about you.
• Alter/Correct Your Data: Request that we correct any inaccurate or incomplete personal data.
• Remove Your Data (Right to Erasure): Request the deletion of your personal data under certain circumstances. Please note that no sensitive data is removed from an approved secure location without prior approval of the data owner, appropriate VP area, or legal counsel. If an individual requires sensitive information to be removed, the information must be protected at all times from inappropriate disclosure.
• Object to Processing: Object to the processing of your personal data for specific purposes.
• Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format.
• Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

Tyme Global also identifies and removes any duplicate data that are prone to unauthorized access to further protect your information.

To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below. We may need to verify your identity before we can fulfill your request.

5. Data Security

We implement robust technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include examples like encryption, access controls, regular security audits, etc.

6. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated notice on our website.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Notice or our data practices, please contact us at: support@tymeglobal.com

8. Changes to this privacy statement

We update this privacy statement when necessary to provide greater transparency or in response to:

• Feedback from customers, regulators, industry, or other stakeholders.
• Changes in our products.
• Changes in our data processing activities or policies.

We encourage you to periodically review this privacy statement to learn how Tyme Global is protecting your information.

In the event of a conflict between this Tyme Global privacy statement and the terms of any agreement(s) between a customer and Tyme Global for Service Agreements and Products, the terms of those agreements will control.

U.S. State Data Privacy Laws Notice

Last Updated: July 2025

Overview

Starting in 2020, a law in California called the California Consumer Privacy Act (CCPA) gave people in California new rights over their personal information. Since then, California has updated that law, and other states have passed their own similar laws. This means more people across the US now have stronger privacy rights.

This notice explains our commitments under these state laws, adding to what you’ll find in the main Tyme Global Privacy Statement above.

Please note that rules implementing some of these laws have not yet been finalised. We will update our processes, disclosures, and this notice as these implementing rules are finalised, and as otherwise necessary.

This notice includes the following parts:

• Transparency: We are transparent about how your personal information is collected, used, disclosed, and shared.

• Control: We put you in control of your personal information, correcting, and deleting your personal information.

Transparency

What Personal Information We Collect and Use

You have the right to know what kinds of personal information Tyme Global collects, how we obtain and use that information, and our business purposes for that collection.

In the bulleted list below, we outline the categories of personal information we collect, the sources of that information, our purposes for processing it, and the categories of recipients to whom we provide it.

Please see our Tyme Global Privacy Policy and the U.S. State Data Privacy sections on our Privacy Statement for more information. Please see our Privacy Policy on our retention of personal data.

Categories of Personal Data

Category of Personal Data	Sources of Personal Data	Purposes of Processing (Collection and Disclosure to Third Parties)	Recipients
Name and Contact Data	Interactions with users and partners.	Provide our products; respond to customer questions; help, secure, and troubleshoot	Service providers and user-directed entities.
Credentials	Interactions with users and organizations that represent users.	Provide our products; authentication and account access; and help, secure and troubleshoot.	Service providers and user-directed entities.
Demographic Data	Interactions with users	Provide and personalize our products; product development; help, secure, and troubleshoot;	Service providers and user-directed entities.
Payment Data	Interactions with users and financial institutions.	Transact commerce; process transactions; fulfill orders; help, secure and troubleshoot; and detect and prevent fraud.	Service providers and user-directed entities.
Subscription and Licensing Data	Interactions with users and organizations that represent users; third-party storefronts and platforms on which our products are purchased.	Provide, personalize, and activate our products; customer support; help, secure, and troubleshoot; and accounting.	Service providers and user-directed entities.
Interactions	Interactions with users including data generated through those interactions.	Provide and personalize our products; product improvement; product development; help, secure, and troubleshoot.	Service providers and user-directed entities.
Content	Interactions with users and organizations that represent users.	Provide our products, safety, and help, secure, and troubleshoot.	Service providers and user-directed entities.
Feedback and Ratings	Interactions with users.	Provide our products, product improvement, product development, customer support, and help, secure, and troubleshoot.	Service providers and user-directed entities.

Subject to your consent, and depending on the services you use and any agreement in place, we may collect, process, or disclose certain personal information that qualifies as “sensitive data” under applicable U.S. state data privacy laws. Sensitive data is a subset of personal information. In the list below, we outline the categories of sensitive data we collect, the sources of the sensitive data, our purposes of processing, and the categories of third-party recipients to whom we disclose the sensitive data. Please see our privacy statement for more information about the sensitive data we may collect.

Categories of Sensitive Data

Category of Sensitive Data	Sources of Sensitive Data	Purposes of Processing (Collection & Disclosure)	Recipients
Account	Log-in	Provide the product and fulfill the requested financial transactions	Service providers
Geo-location Information	Users’ interactions with the products	Provide the service requested; product improvement; some attributes may be disclosed to third parties to provide the service	Users and service providers
Contents of your mail, email or text messages	Users’ interactions with the products	Provide our products; improve the product experience; ensure safety; and help, secure, and troubleshoot	Service providers

We make this information available to consumers in the Personal data we collect, as outlined in our Privacy Statement. 

How We Share Your Personal Information

You have the right to know if your personal information is provided to third parties. We may provide personal information to our Service Providers, as defined under applicable U.S. state data privacy laws, to perform services specified in a written agreement. These services may include providing our products and services, customer service, preventing fraud, processing payments, fulfilling orders or transactions, and other services, depending on your interaction with us.  We may also share your information with other third parties when you tell us to do so, such as third-party services or other individuals. In addition, we may disclose personal information to third parties for other notified purposes, as permitted by U.S. state data privacy laws. 

We Do Not Sell Your Personal Information

You have the right to know whether your personal information is being sold. Your personal information is “sold” when it is provided with a third party for monetary or other valuable consideration for a purpose that is not a “business purpose” as set forth in the CCPA or other U.S. state data privacy laws. Please note a “sale” does not include when we disclose your personal information at your direction, disclosing under a service agreement, or when otherwise permitted under law. Tyme Global does not sell your personal information.

We Do Not Engage in “Profiling”

You have the right to know whether your personal information is used for “profiling”, utilising automated decision-making in furtherance of decisions that produce legal or similarly significant effects. 

Control

You have the right to:

Know What We Have

• Your Right: To understand exactly what pieces of your personal information we have collected and kept about you, typically over the last 12 months.
• What this means: You can ask us for a clear picture of your data.

Make Corrections

• Your Right: To fix any personal information we might have that is inaccurate or incomplete.
• What this means: If something isn’t right, you can tell us, and we’ll update it.

Get a Copy

• Your Right: To receive a copy of your personal information that we hold.
• What this means: We can provide you with your data in an accessible format.

Delete Your Data

• Your Right: To request that we delete your personal information.
• What this means: Under certain conditions, you can ask us to remove your data from our records.

If you have questions about your privacy or want to exercise your data rights – like knowing what information we have, correcting it, getting a copy, or asking us to delete it – the best way to reach us is via email.

Please send your request to opt-out@tymeglobal.com. A Tyme Global representative will get back to you as soon as possible to assist you in raising a concern or lodging a complaint with your state attorney general.

Non-Discrimination

U.S. state privacy laws prohibit businesses from discriminating against you for exercising your rights under the law. Such discrimination may include denying a good or service, providing a different level or quality of service, or charging different prices. The CCPA permits businesses to provide differing levels or quality or different prices where the business can demonstrate that the difference is reasonably related to the value to the business of the consumer’s personal information.

Disclosure of privacy rights requests

The CCPA requires businesses to disclose the number of requests received, complied with in whole or in part, or denied.