Privacy Policy

If you provide us with information, documents, photographs, or other materials concerning another individual or entity, you are responsible for ensuring that you have the authority or legal right to provide that information to us.

5. Cookies and Website Analytics
Our website may use cookies, pixels, analytics tools, log files, or similar technologies to understand website traffic, support website functionality, improve our services, and evaluate how visitors use the website.
Some third-party analytics or advertising technologies may collect information about your online activities over time and across different websites. Depending on the technology used and applicable law, this activity may be considered “sharing,” “targeted advertising,” or a similar activity.
You may be able to control or disable cookies through your browser settings. You may also be able to use browser-based privacy controls or opt-out preference signals, such as the Global Privacy Control, where recognized by applicable law. Disabling certain cookies may affect the availability or functionality of some website features.
If our website uses cookies or similar technologies that constitute a sale, sharing, targeted advertising, or similar activity under applicable law, we will provide any notice and opt-out mechanism required by that law.

6. How We Share Personal Information
We may disclose personal information when reasonably necessary to provide our services, operate our business, fulfill the purposes described in this Privacy Policy, or comply with applicable law.
We may disclose personal information to:
Service providers and technology vendors
Professional advisors
Contractors or consultants assisting with a project
Insurance companies or their representatives, when authorized or reasonably necessary for a project
Attorneys or other legal professionals involved in a matter
Government agencies or authorities when required or permitted by law
Courts or other parties involved in legal proceedings, when required or permitted by law
A successor or transaction party in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets
We may also disclose personal information when reasonably necessary to protect our rights, property, or safety, or the rights or safety of others.

7. State Privacy Rights
State privacy rights apply only when the law of the applicable state covers O’Toole Consulting or the relevant processing and any statutory thresholds, exemptions, and other conditions are satisfied. Based on the nature and size of our business, we do not represent that the comprehensive privacy laws of every state apply to us.

California Residents
If you are a California resident and the CCPA applies to O’Toole Consulting’s processing of your personal information, you may have the following rights:
Right to know and access certain personal information collected about you, including, where required by the CCPA, the categories and specific pieces of personal information collected, the sources of that information, the purposes for collecting, selling, or sharing it, and the categories of recipients to whom it was disclosed
Right to correct inaccurate personal information
Right to request deletion of personal information, subject to exceptions
Right to opt out of the sale of personal information
Right to opt out of the sharing of personal information for cross-context behavioral advertising
Right to limit the use and disclosure of sensitive personal information if we use it beyond purposes permitted by the CCPA
Right to non-discrimination for exercising CCPA rights
We do not sell personal information for monetary consideration. We do not knowingly sell or share the personal information of consumers under 16 years of age.
If our use of cookies, analytics, or similar technologies constitutes “sharing” for cross-context behavioral advertising under the CCPA, you may opt out through a “Your Privacy Choices” or similar mechanism made available on our website, through a recognized opt-out preference signal, or by contacting us. If we sell or share personal information as defined by the CCPA, we will provide the applicable notice and opt-out methods required by law.
California residents may submit requests through the methods listed in Section 8. You may use an authorized agent to submit a request. We may require the authorized agent to provide proof of written permission signed by you, and we may require you to verify your identity directly, as permitted by the CCPA. An authorized agent may submit an opt-out request without additional verification of your identity when permitted by law, but we may require confirmation that the agent is authorized to act for you.
We will respond to a verified California request within the period required by the CCPA. The CCPA generally provides an initial response period of 45 calendar days and may permit an extension when reasonably necessary and when notice of the extension is provided as required by law. We generally do not charge a fee unless permitted by the CCPA.
If we deny or partially deny a California request, you may appeal our decision by contacting us through the methods listed in Section 8. We will review the appeal and respond within the period required by the CCPA. If we deny an appeal, you may contact the California Privacy Protection Agency or the California Attorney General, as applicable.

Oklahoma Residents
Oklahoma does not currently provide a comprehensive consumer privacy law that gives Oklahoma residents the broad access, correction, deletion, portability, sale, targeted-advertising, sensitive-information, or appeal rights described for residents of states with applicable comprehensive privacy statutes. Accordingly, residing in Oklahoma alone does not create those rights under a comprehensive Oklahoma privacy law.
Oklahoma residents may still contact us with questions or requests concerning personal information. We will handle those requests as required by other applicable laws, contractual obligations, or our business practices. Nothing in this subsection limits rights that may apply under federal law, another state’s law when that law applies to the individual and the processing, or a separate agreement.

Residents of Other States
O’Toole Consulting will provide rights required by another state’s comprehensive privacy law only if that law applies to O’Toole Consulting or the relevant processing and the applicable statutory thresholds, exemptions, and other conditions are satisfied.
Where applicable, those laws may provide rights such as access, correction, deletion, portability, and opt-out rights concerning the sale of personal information, targeted advertising, or certain profiling. Some laws may also provide rights concerning sensitive personal information, consent, authorized agents, or appeals. The exact rights, exceptions, response periods, verification requirements, and appeal procedures depend on the law applicable to the request.
We do not claim that every state listed below applies to our business. As of the Effective Date, we have not determined that O’Toole Consulting is subject to the comprehensive privacy laws of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or any other state solely because a visitor resides there. If a state law applies to a particular request, we will process the request under that law and provide any required appeal, opt-out, authorized-agent, and sensitive-information disclosures.

8. How to Submit a Privacy Request
To submit a privacy request, contact us through one of the following methods:
Email: Nathan.OtooleConsulting@hotmail.com
Phone: (405) 697-8402
Please include:
Your name
State of residence
Email address or other contact information
The type of request you are making
A description of the information or issue involved
Any information reasonably necessary for us to locate your records
You may submit a request through an authorized agent where permitted by applicable law. We may require proof that the agent is authorized to act on your behalf and may need to verify your identity directly.
We will not require you to create an account to submit a privacy request. We will use personal information provided in connection with a request only as reasonably necessary to verify, process, document, and respond to the request, or as otherwise permitted by law.

9. Identity Verification
To protect personal information, we may need to verify your identity before completing an access, correction, deletion, portability, or similar request.
Verification measures may vary depending on the nature and sensitivity of the request. We may ask you to confirm information already associated with your records. We will not request highly sensitive information solely for verification unless reasonably necessary and permitted by law.
If we cannot verify your identity, we may deny the request or limit the response to information that can be provided without verification, as permitted by law.

10. Response Timelines
We will respond to a verified privacy request within the time required by applicable law.
Unless a different period applies under the law applicable to your request:
We will generally confirm receipt of a request within 10 business days when required or reasonably practicable
We will generally respond to a verified request within 45 calendar days
If additional time is reasonably necessary, we may extend the response period by a period permitted by applicable law
If we extend the response period, we will notify you of the reason for the extension before the initial response period expires when required by applicable law
If we deny a request, our response will explain the basis for the denial and identify any rights you may have to appeal or seek further review.
We generally do not charge a fee for privacy requests. We may charge a reasonable fee or decline to act on a request when permitted by applicable law, including when requests are manifestly unfounded, excessive, repetitive, or abusive.

11. Appeals
If we deny or partially deny your privacy request, you may appeal our decision where required or permitted by the law applicable to your request.
To submit an appeal, contact us using the methods listed in Section 8 and include:
Your name and contact information
The date and type of your original request
A copy of our response, if available
The reason you believe our decision should be reconsidered
Any additional information you would like us to review
We will review an appeal and respond within the period required by applicable law. If the applicable law does not specify an appeal period, we will generally respond within 45 calendar days and may extend that period by a period reasonably necessary to complete the review, where permitted by applicable law.
If an appeal is denied, we will identify any right to contact a state attorney general, privacy regulator, or other applicable authority when required by law.

12. Information Security
We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.
However, no website, electronic transmission, or information-storage system is completely secure. Accordingly, we cannot guarantee the absolute security of information transmitted to or stored by us.

13. Data Retention
We may retain personal information for as long as reasonably necessary to provide services, maintain business and financial records, resolve disputes, comply with legal obligations, establish or defend legal claims, protect our legitimate business interests, and fulfill the purposes described in this Privacy Policy.
The length of time we retain information may vary depending on the type of information, the purpose for which it was collected, the nature of the engagement, applicable legal requirements, and whether the information is needed for an ongoing or potential legal, insurance, or business matter.

14. Third-Party Websites
Our website may contain links to third-party websites or services. We do not control and are not responsible for the privacy practices, security, content, or availability of those third-party websites or services.
We encourage you to review the privacy policies of any third-party websites or services you visit.

15. Children’s Privacy
Our website and services are not directed to children under 13. We do not knowingly collect personal information from children under 13 through our website.
If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it, subject to applicable legal and business-record requirements.

16. Changes to This Privacy Policy
We may revise this Privacy Policy from time to time. Any changes will become effective when posted on this page, unless a different effective date is stated.
We encourage you to review this Privacy Policy periodically for updates. If required by law, we will provide additional notice of material changes.

17. Contact Us
If you have questions about this Privacy Policy, wish to submit a privacy request, or need assistance with an appeal, please contact:
O’Toole Consulting LLC
Email: Nathan.OtooleConsulting@hotmail.com
Phone: (405) 697-8402
Website: https://www.otoolconsulting.com/