Privacy Policy

Introduction

tastytrade, Inc. provides online brokerage services via desktop downloadable software, web browser, and mobile application to self-directed investors (collectively "tastytrade," "we," "us," or "our"). This Privacy Policy is designed to help you understand how we collect, use, process, and share your personal information, and to help you understand and exercise your privacy rights.

Table of Contents

• SCOPE AND UPDATES TO THIS PRIVACY POLICY
• PERSONAL INFORMATION WE COLLECT
• HOW WE USE YOUR PERSONAL INFORMATION
• HOW WE DISCLOSE YOUR PERSONAL INFORMATION
• YOUR PRIVACY CHOICES AND RIGHTS
• SECURITY OF YOUR INFORMATION
• INTERNATIONAL DATA TRANSFERS
• RETENTION OF PERSONAL INFORMATION
• ADDITIONAL INFORMATION FOR RESIDENTS OF CALIFORNIA, VIRGINIA, CONNECTICUT, UTAH, AND COLORADO
• SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS
• CHILDREN'S INFORMATION
• OTHER PROVISIONS
• CONTACT US

1. Scope and Updates to This Privacy Policy

This Privacy Policy applies to personal information processed by tastytrade, including on our websites, software, mobile applications, and other online or offline offerings. To make this Privacy Policy easier to read, our websites, software, mobile applications, and other offerings are collectively referred to here as the "Services."

We may revise this Privacy Policy from time to time in our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use our Services after the new Privacy Policy takes effect.

2. Personal Information We Collect

The categories of personal information we collect depend on how you interact with us, our Services, and the requirements of applicable law. Generally speaking, we collect personal information that you provide to us, information we obtain automatically when you use our Services, and information from other sources such as third-party services and organizations.

3. How We Use Your Personal Information

• Managing your accounts and providing our Services
• Processing financial transactions and maintaining records
• Complying with legal and regulatory requirements
• Improving and personalizing our Services
• Detecting and preventing fraud or unauthorized access
• Marketing and advertising our products and Services

4. HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We disclose your personal information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below.

A. Disclosures to Provide our Services The categories of third parties with whom we may share your personal information are described below. Service Providers. We may share your personal information with our third-party service providers and vendors that assist us with the provision of our Services. This includes but is not limited to service providers and vendors that provide us with IT support, hosting, payment processing, clearing and custodial services, tax services, identity verification, customer service, and related services. Business Partners. We may share your personal information with business partners to provide you with a product or service you have requested. We may also share your personal information with business partners with whom we jointly offer products or services. Affiliates. We may share your personal information with our company affiliates (our “Affiliates”) for our administrative purposes, IT management, or for them to provide services to you or support and supplement the Services we provide. Other Users or Third Parties You Share or Interact With. As described above in “Personal Information We Collect,” our Services may allow you to share personal information or interact with other users and third parties (including individuals and third parties who do not use our Services and the general public). Advertising Partners. We may share your personal information with third-party advertising partners. These third-party advertising partners may set Technologies and other tracking tools on our Services to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising” or “personalized advertising.” PIs/SDKs. We may use third-party application program interfaces (“APIs”) and software development kits (“SDKs”) as part of the functionality of our Services. For more information about our use of APIs and SDKs, please contact us as set forth in “Contact Us” below. B. Disclosures to Protect Us or Others We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena, information requests from regulatory agencies and self-regulatory organizations, to protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity. C. Disclosure in the Event of Merger, Sale, or Other Asset Transfers If we are involved in an actual or proposed merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets or all or parts of our business, or transition of service to another provider, your information may be sold or transferred in connection with such a transaction, as permitted by law and/or contract.

5. YOUR PRIVACY CHOICES AND RIGHTS

Your Privacy Choices. The privacy choices you may have about your personal information are determined by applicable law and are described below.

Email Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications (e.g., communications regarding our Services or updates to our agreements,Terms, or this Privacy Policy). Text Messages. If you receive an unwanted text message from us, you may opt out of receiving future text messages from us by following the instructions in the text message you have received from us or by otherwise contacting us as set forth in “Contact Us” below. Note that even if you opt out of text message updates, you can still receive one-time password hints from us via SMS on request. Push Notifications. We may send you push notifications through our mobile application. You may opt out from receiving these push notifications by changing the settings on your mobile device. Cookies and Personalized Advertising. You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, our Services may not work properly. Please note that cookie-based opt-outs are not effective on mobile applications. However, you may opt-out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others. The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada.Please note you must separately opt out in each browser and on each device. “Do Not Track” / “Global Privacy Control.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Additionally, some browsers or plug-ins use a “Global Privacy Control” (“GPC”), which you can learn more about at https://globalprivacycontrol.org/. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers. However, if our site detects a GPC signal from your device, we will interpret it as a Do Not Sell request where required under applicable law, and we will also interpret it as a request to limit the sale or sharing of personal information for targeted advertising for residents of the European Economic Area, the UK, China, and Brazil. Your Privacy Rights. In accordance with applicable law, you may have the right to: Access Personal Information about you, including: (i) confirming whether we are processing your personal information; and (ii) obtaining access to or a copy of your personal information; Request Correction of your personal information where it is inaccurate, incomplete, or outdated. In some cases, we may provide self-service tools that enable you to update your personal information; Request Deletion, Anonymization or Blocking of your personal information when processing is based on your consent or when processing is unnecessary, excessive or noncompliant; Request Restriction of or Object to our processing of your personal information when processing is noncompliant; Withdraw your Consent to our processing of your personal information. Please note that your withdrawal will only take effect for future processing, and will not affect the lawfulness of processing before the withdrawal. If you refrain from providing personal information or withdraw your consent to processing, some features of our Service may not be available; Request data portability and receive an electronic copy of personal information that you have provided to us; Be informed about third parties with which your personal information has been shared; and Request the review of decisions taken exclusively based on automated processing if these decisions could affect your data subject rights. If you would like to exercise any of these rights, please contact us as set forth in “Contact Us” below. We will process such requests in accordance with applicable laws.

6. SECURITY OF YOUR INFORMATION

This Privacy Policy applies to personal information processed by tastytrade, including on our websites, software, mobile applications, and other online or offline offerings. To make this Privacy Policy easier to read, our websites, software, mobile applications, and other offerings are collectively referred to here as the "Services."

By using our Services or providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on our Services, by mail, or by sending an email to you.

7. INTERNATIONAL DATA TRANSFERS

All information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistent with the requirements of applicable laws.

If we transfer personal information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EUStandard Contractual Clauses. For more information about the safeguards we use for international transfers of your personal information, please contact us as set forth below.

8. RETENTION OF PERSONAL INFORMATION

We store the personal information we collect as described in this Privacy Policy for as long as you use our Services, or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws and regulations.

9. ADDITIONAL INFORMATION FOR RESIDENTS OF CALIFORNIA, VIRGINIA, CONNECTICUT, UTAH, AND COLORADO

A. PERSONAL INFORMATION WE COLLECT AND SHARE
The information we have collected within the last twelve (12) months about you, as well as the categories of third parties with whom we have shared this information, are described in the table below.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact our Data Protection Officer at the details provided in the Contact Us section.