Privacy policy
Last updated: August 22, 2026
OVERVIEW
Tomayle LLC, operating as Tomayle (“Tomayle,” “we,” “us,” or “our”), respects your privacy and is committed to handling personal information responsibly and transparently.
This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit or use our website, make a purchase, communicate with us, use our digital products, participate in an online session, request a Personalized Skincare Assessment, or otherwise interact with our services (collectively, the “Services”).
Our online store is hosted using Shopify.
By using the Services, you acknowledge the practices described in this Privacy Policy. Where consent is required, including for certain health-related information and facial photographs submitted for a Personalized Skincare Assessment, we request consent separately.
This Privacy Policy applies to our current operations in the United States. Additional privacy disclosures or terms may be provided if our Services become available in additional jurisdictions.
SECTION 1 - PERSONAL INFORMATION WE COLLECT
Depending on how you interact with Tomayle, we may collect the following categories of personal information:
Contact Information
This may include your name, email address, telephone number, billing address, shipping address, and other contact information you provide.
Order and Transaction Information
This may include products or services purchased, order numbers, transaction information, shipping and delivery information, returns, refunds, and communications relating to your purchase.
Payment Information
Payments may be processed by Shopify, payment processors, or other third-party payment service providers.
Tomayle generally does not receive or store complete payment card numbers. Payment providers may process payment and billing information according to their own privacy policies and security practices.
Account Information
If customer accounts are offered, we may process information associated with your account, including login or account identifiers, order history, preferences, and related information.
Customer Service and Communications
We may collect information you provide when you contact us by email, through our website, or through another communication channel.
Website and Device Information
When you visit our website, information may be collected automatically through Shopify, cookies, pixels, analytics technologies, and similar tools.
This information may include IP address, browser type, device information, operating system, pages viewed, links clicked, referring pages, approximate location derived from IP address, interactions with our website, and other usage information.
Marketing and Advertising Information
Where applicable, we may collect or receive information about interactions with our website, advertisements, marketing communications, and campaigns for analytics, attribution, advertising, audience measurement, and remarketing purposes.
Personalized Skincare Assessment Information
If you request a Personalized Skincare Assessment, we may collect questionnaire responses, skincare concerns, skin type, skincare routines and products, skin sensitivities or allergies, recent aesthetic treatments, relevant lifestyle information, optional health-related information, and facial or skin photographs that you voluntarily submit.
SECTION 2 - HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
• directly from you when you place an order, complete a form, contact us, book a service, submit information for a Personalized Skincare Assessment, or otherwise provide information to us;
• automatically through our website and technologies such as cookies, pixels, tags, and similar technologies;
• from service providers that help us operate our business, process payments, fulfill orders, provide analytics, prevent fraud, communicate with customers, or deliver other Services; and
• from advertising, analytics, and marketing partners where permitted by applicable law.
SECTION 3 - HOW WE USE PERSONAL INFORMATION
We may use personal information to:
• process and fulfill orders;
• provide products, digital products, and Services;
• process payments and transactions;
• arrange shipping and delivery;
• provide customer support;
• communicate regarding orders, appointments, services, refunds, or other requests;
• prepare and provide Personalized Skincare Assessments;
• schedule and conduct online sessions;
• provide and maintain our website;
• understand how customers use our website;
• improve our products, Services, website, and customer experience;
• measure advertising and marketing performance;
• conduct advertising and remarketing where applicable;
• detect, investigate, and prevent fraud, security incidents, abuse, or unlawful activity;
• enforce our Terms and policies;
• comply with legal, regulatory, tax, accounting, or other obligations; and
• protect the rights, safety, security, and property of Tomayle, our customers, and others.
Information and photographs submitted through the Personalized Skincare Assessment questionnaire are not used for advertising, remarketing, audience building, or promotional purposes without separate appropriate permission.
SECTION 4 - PERSONALIZED SKINCARE ASSESSMENT
If you purchase or request a Personalized Skincare Assessment, we may ask you to provide information reasonably necessary to prepare and deliver the assessment.
This may include questionnaire responses, skincare concerns, skin type, information about your skincare routine and products, skin sensitivities or allergies, recent aesthetic treatments, relevant lifestyle information, optional health-related information, photographs of your face or skin, and other information you voluntarily provide through the applicable questionnaire or communication.
Certain information is required because we may be unable to prepare a reasonably informed Personalized Skincare Assessment without it. Health-related information identified as optional in the questionnaire is voluntary. You may choose not to provide optional health-related information, although this may limit the completeness of the assessment.
Before submitting the questionnaire, you are asked to expressly consent to Tomayle collecting and using the skincare, health, lifestyle, and facial photograph information you voluntarily provide solely for the purpose of preparing and delivering your Personalized Skincare Assessment.
Information submitted for a Personalized Skincare Assessment is used to provide the requested service and related customer support.
Facial and skin photographs are treated as confidential and are used solely as reasonably necessary to prepare and provide the requested assessment.
Tomayle does not use photographs submitted for a Personalized Skincare Assessment for advertising, social media, promotional materials, before-and-after marketing, facial recognition, biometric identification, or other unrelated purposes without separate appropriate permission from the customer.
Photographs are deleted from our active records once the assessment has been completed, except where temporary retention is technically necessary or retention is required by applicable law.
Our form provider, Tally, processes and stores questionnaire submissions and uploaded photographs on our behalf. When we delete a submission, Tally states that the deleted form data is permanently removed from its backups within 90 days, subject to its applicable retention, backup, security, and legal obligations.
A Personalized Skincare Assessment provides cosmetic, skincare, wellness, and educational guidance only. It is not a medical diagnosis or treatment and does not replace professional medical advice, diagnosis, or treatment.
Please provide only information that is requested or that you reasonably believe is relevant to your skin and the requested assessment.
SECTION 5 - CONSUMER HEALTH DATA PRIVACY
This section applies where information submitted for a Personalized Skincare Assessment constitutes “consumer health data,” “health data,” “sensitive personal information,” or a similar category under applicable privacy law.
Categories of Consumer Health Data
Depending on the information you voluntarily submit, we may collect:
• skin type, skin condition, sensitivities, allergies, skincare concerns, and information about how your skin behaves or reacts;
• information about skincare products, exfoliating products, recent aesthetic treatments, cosmetic procedures, or injectables;
• relevant lifestyle information, such as smoking, sleep, stress, water consumption, or environmental exposure;
• optional information about certain health, autoimmune, hormonal, diabetic, or related conditions that may affect the skin;
• facial or skin photographs; and
• information or observations reasonably inferred from your questionnaire responses and photographs for the purpose of preparing the assessment.
Sources of Consumer Health Data
We collect this information directly from you through the Tally questionnaire, uploaded photographs, email, customer communications, or other methods through which you voluntarily provide information to us.
Purposes of Collection and Use
We collect and use consumer health data solely as reasonably necessary to:
• prepare and deliver your Personalized Skincare Assessment;
• communicate with you about the assessment;
• provide related customer support;
• maintain the safety, security, and integrity of our Services;
• comply with applicable legal obligations; and
• establish, exercise, or defend legal claims where permitted by law.
Disclosure of Consumer Health Data
Consumer health data may be processed by service providers acting on our behalf where reasonably necessary to provide the assessment. These may include:
• Tally BV, our questionnaire and file-upload provider;
• Tally’s authorized hosting, storage, security, and technical subprocessors;
• email and communications providers used to deliver the assessment or communicate with you;
• cloud storage or technology providers where used for the secure preparation or delivery of the assessment;
• professional advisers where access is reasonably necessary and legally permitted; and
• governmental or legal authorities where disclosure is required or permitted by law.
We currently have no affiliates with whom we share consumer health data.
We do not sell consumer health data. We do not use or disclose consumer health data submitted for a Personalized Skincare Assessment for advertising, remarketing, audience building, social media promotion, or facial recognition.
Consent
Where required by applicable law, we obtain your express consent before collecting or using consumer health data for the Personalized Skincare Assessment.
You may withdraw your consent by contacting info@tomayle.com. Withdrawal of consent does not affect processing that occurred before your withdrawal. If you withdraw consent before the assessment is completed, we may be unable to provide the service.
Consumer Health Data Rights
Depending on applicable law, you may have the right to:
• confirm whether we collect or process your consumer health data;
• access consumer health data concerning you;
• request a list of third parties or affiliates with whom your consumer health data has been shared, where applicable;
• request correction of inaccurate information;
• withdraw consent to certain collection or sharing;
• request deletion of consumer health data; and
• appeal a decision relating to a privacy request.
You may submit a request by emailing info@tomayle.com. We may take reasonable steps to verify your identity before fulfilling a request.
If we receive a valid deletion request, we will delete applicable consumer health data from our active records and notify relevant processors or service providers as required by applicable law. Information stored in archived or backup systems may be deleted according to applicable legal requirements and the service provider’s backup cycle.
If we deny a request and applicable law provides a right to appeal, you may submit an appeal to info@tomayle.com and identify the decision you wish to appeal.
We do not use geofencing technology around healthcare facilities to identify, track, collect data from, or send messages or advertisements to individuals regarding consumer health services.
SECTION 6 - ONLINE SESSIONS AND CONSULTATIONS
When you purchase or participate in an online session, we may process information necessary to schedule and provide the service, including your name, email address, appointment information, communications, and related service information.
Online sessions may be conducted through Google Meet or another communication platform disclosed to you.
Tomayle does not record online sessions.
The third-party platform used to conduct a session may independently process technical or account information according to its own privacy policy.
We may retain reasonable business records showing that an appointment was scheduled and provided, such as booking information, dates, times, order records, and related customer communications.
SECTION 7 - DIGITAL PRODUCTS AND EBOOKS
When you purchase an eBook or other digital product, we may process information necessary to complete the transaction and provide electronic access or delivery.
This may include your name, email address, order information, payment status, and information relating to delivery or access to the digital product.
We may retain transaction and delivery records as reasonably necessary for customer support, fraud prevention, accounting, legal compliance, and resolving payment or transaction disputes.
SECTION 8 - SHOPIFY
Our online store is hosted using Shopify.
Shopify provides ecommerce infrastructure and related technology that allows us to operate our store and provide the Services.
When you visit our store, create an account, make a purchase, or otherwise interact with the store, Shopify may process personal information in connection with providing its services to Tomayle.
Shopify may also process certain information for its own purposes as described in its applicable privacy notices and terms.
We encourage you to review Shopify’s privacy information to understand its data practices.
SECTION 9 - TALLY
We use Tally to provide questionnaires and collect information and photographs submitted for Personalized Skincare Assessments.
Tally processes form submissions and uploaded files on our behalf. Uploaded files are stored securely and are accessible through our authenticated Tally account.
Tally may use authorized subprocessors to provide hosting, storage, security, email, and technical infrastructure. Tally’s handling of information is governed by its applicable terms, privacy information, data processing terms, and security practices.
We are responsible for determining what information we request through the questionnaire and how long we retain submissions in our active account.
SECTION 10 - GOOGLE ANALYTICS
We use Google Analytics to help us understand how visitors interact with our website and to measure website performance.
Google Analytics may collect information through cookies, tags, identifiers, and similar technologies, including information about your device and interactions with our website.
Google may process information collected through Google Analytics according to its applicable terms and privacy practices.
Where enabled, Google Analytics Advertising Features may also support advertising measurement, audience analysis, and remarketing.
You may be able to manage or limit certain Google advertising and analytics activities through your browser settings, Google’s privacy and advertising controls, our cookie or privacy preference tools, or other opt-out mechanisms made available by Google.
Information submitted within the Personalized Skincare Assessment questionnaire is not used by Tomayle for Google Analytics advertising features or remarketing.
SECTION 11 - META PIXEL AND ADVERTISING
We may use Meta Pixel and related Meta technologies to measure website activity, understand the effectiveness of advertising, build or measure advertising audiences, and support advertising and remarketing.
These technologies may collect or receive information regarding your browser, device, website activity, interactions, purchases, or other events configured through our website.
Meta may process information received through these technologies according to its own terms and privacy policies.
We do not use information, questionnaire responses, health-related information, or photographs submitted for a Personalized Skincare Assessment for Meta advertising, audience building, or remarketing.
We may also use other advertising or marketing partners in the future. Where required, we will provide appropriate disclosures and choices relating to such technologies.
SECTION 12 - COOKIES AND SIMILAR TECHNOLOGIES
We and our service providers may use cookies, pixels, tags, local storage, and similar technologies to operate our website and provide functionality.
These technologies may be used for purposes including:
• essential website functionality;
• security and fraud prevention;
• remembering preferences;
• analytics and website performance;
• advertising measurement; and
• advertising and remarketing.
We use a consent and privacy management solution, currently Pandectes, to help provide privacy choices and manage cookies and similar technologies where applicable.
Available choices may vary depending on your location, browser, device, and applicable law.
You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.
SECTION 13 - MARKETING COMMUNICATIONS
Where offered, you may choose to receive marketing or promotional communications from Tomayle.
We may use contact information provided for marketing where permitted by applicable law and consistent with the choices you have made.
Information submitted through the Personalized Skincare Assessment questionnaire, including health-related information and photographs, is not used for marketing communications without separate appropriate consent.
You may unsubscribe from promotional emails by using the unsubscribe mechanism included in the communication or by contacting us.
Transactional or service-related communications, such as order confirmations, shipping notices, appointment information, security notices, assessment delivery, or customer service communications, are not promotional communications and may still be sent when necessary.
If we introduce additional marketing channels, such as promotional text messaging, we will provide appropriate disclosures and obtain consent where required before using those channels.
SECTION 14 - HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information to third parties where reasonably necessary to operate our business and provide the Services.
These parties may include:
• Shopify;
• payment processors;
• fulfillment providers and suppliers;
• shipping carriers and logistics providers;
• website hosting and technology providers;
• analytics providers;
• advertising and marketing partners;
• email and communications providers;
• appointment and video communication providers;
• form and questionnaire providers, including Tally;
• security, fraud prevention, storage, and technical service providers;
• professional advisers such as accountants, attorneys, or consultants where necessary; and
• governmental, regulatory, law enforcement, or other parties where disclosure is required or permitted by law.
Consumer health data and photographs submitted for a Personalized Skincare Assessment are disclosed only as described in Sections 4 and 5 and are not disclosed to advertising or marketing partners for their independent advertising purposes.
We may also disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or other business transaction, subject to applicable law.
SECTION 15 - SALE, SHARING AND TARGETED ADVERTISING
Tomayle does not sell personal information for money.
However, certain uses of advertising cookies, pixels, analytics technologies, or advertising partners may be considered “sale,” “sharing,” “targeted advertising,” or similar activity under certain U.S. state privacy laws, even where no money is exchanged.
Where applicable law provides you with a right to opt out of such activities, you may exercise that right through the privacy or cookie preference tools made available on our website or by contacting us.
Where required by applicable law, we will also recognize applicable browser-based opt-out preference signals, such as Global Privacy Control, in accordance with legal requirements and our technical capabilities.
We do not sell consumer health data or facial photographs submitted for a Personalized Skincare Assessment.
SECTION 16 - DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Services, maintaining transaction and business records, complying with legal, tax, accounting, and regulatory obligations, resolving disputes, preventing fraud, and enforcing agreements.
Retention periods may vary depending on the type of information and the purpose for which it was collected.
Photographs submitted for a Personalized Skincare Assessment are deleted from our active records once the assessment has been completed, except where temporary retention is technically necessary or retention is required by applicable law.
When a questionnaire submission or photograph is deleted from our active Tally account, Tally states that the deleted form data is permanently removed from its backups within 90 days, subject to its applicable policies and legal obligations.
Optional health-related questionnaire information is retained only for as long as reasonably necessary to prepare the assessment, provide related support, comply with applicable obligations, resolve disputes, and establish, exercise, or defend legal claims.
Transaction records, service delivery records, customer communications, and copies of the completed assessment may be retained for reasonable business, customer support, accounting, dispute-resolution, or legal purposes.
When information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable requirements.
SECTION 17 - DATA SECURITY
We use reasonable administrative, technical, and organizational measures designed to protect personal information.
Access to questionnaire responses and uploaded photographs is limited to those who reasonably require access to provide or support the requested service.
However, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.
You are responsible for maintaining the confidentiality of any account credentials and should not share passwords or other authentication information with others.
SECTION 18 - CHILDREN’S PRIVACY
Our Services are intended for adults.
You must be at least 18 years old to make a purchase, request a Personalized Skincare Assessment, submit photographs, or book a paid service through our website.
We do not knowingly solicit personal information from children for the purpose of providing our paid Services.
If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action.
SECTION 19 - U.S. STATE PRIVACY RIGHTS
Depending on your state of residence and whether the applicable privacy law applies to Tomayle or the relevant processing activity, you may have certain privacy rights.
These rights may include the right to:
• request access to personal information;
• request information about categories of personal information collected, used, or disclosed;
• request correction of inaccurate personal information;
• request deletion of certain personal information;
• obtain a copy of certain personal information;
• withdraw consent to certain processing of sensitive or consumer health data where applicable;
• opt out of certain sales, sharing, targeted advertising, or profiling activities where applicable;
• limit certain uses or disclosures of sensitive personal information where applicable; and
• exercise privacy rights without unlawful discrimination.
The specific rights available to you depend on applicable law and the circumstances of the processing.
We may need to verify your identity before processing certain requests.
Where permitted by applicable law, an authorized agent may submit a request on your behalf. We may request appropriate verification of the agent’s authority.
You may submit a privacy request by contacting us at info@tomayle.com.
If applicable law provides a right to appeal our decision regarding a privacy request, you may submit an appeal by contacting us at the same email address and identifying the request you wish to appeal.
SECTION 20 - CALIFORNIA PRIVACY INFORMATION
California residents may have additional rights under California privacy law where those laws apply to Tomayle or the relevant processing activity.
Depending on applicability, these may include rights to know, access, correct, or delete personal information and to opt out of the sale or sharing of personal information.
Tomayle does not sell personal information for monetary compensation.
As described above, certain advertising and analytics activities involving cookies, pixels, or similar technologies may constitute “sharing” or “sale” under California law even where no monetary payment is received.
Where California law applies and requires an opt-out mechanism, applicable privacy choices will be made available through our website.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
Nothing in this section is intended to represent that Tomayle is subject to a particular California privacy statute where the applicable statutory requirements or thresholds are not met.
SECTION 21 - DO NOT TRACK AND PRIVACY PREFERENCE SIGNALS
Some browsers provide “Do Not Track” settings or other privacy preference signals.
Because there is not a single universally applicable standard for all such signals, our response may depend on the particular signal and applicable law.
Where required by applicable U.S. state privacy law, we will process legally recognized opt-out preference signals, such as Global Privacy Control, as required.
SECTION 22 - THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to third-party websites or use services provided by third parties.
Tomayle does not control the privacy or security practices of independent third parties.
We encourage you to review the privacy policies of third-party services before providing personal information directly to them.
SECTION 23 - CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices, legal requirements, or the ways in which we process personal information.
The updated version will be posted on our website with an updated “Last updated” date.
Where required by applicable law, we will provide additional notice or obtain consent before materially changing how we use previously collected personal information.
SECTION 24 - CONTACT US
If you have questions about this Privacy Policy, our privacy practices, or would like to submit a privacy request, please contact:
Tomayle LLC
1501 South Greeley Highway, Suite C, PMB #3031
Cheyenne, WY 82007
USA
Email: info@tomayle.com
Phone: +1 (213) 799-2026
