Colossal Diamond Tools, LLC
Last updated: October 9, 2026

Scope

This Privacy Policy explains how Colossal Diamond Tools, LLC ("Colossal," "we," "us," or "our") collects, uses, and discloses personal information through cdtoolsllc.com, our company dashboards, customer interactions related to those services, and the Colossal Employee Alerts SMS program. Our Zoho Commerce website is separate from our Shopify store at colossaldiamondtools.com, which has its own privacy notice.

Information we collect

Depending on your interactions with us, we collect:

• Contact and account information, such as your name, business name, email address, phone number, billing and shipping addresses, and account identifiers.
• Transaction information, such as orders, invoices, payment status, delivery details, tax-exemption documents, account balances, and agreed payment terms.
• Support communications, such as questions, messages, photos, and documents you submit.
• Website usage information, such as IP address, browser and device information, pages viewed, searches, cookie identifiers, and interactions with the website.
• Employee portal information needed for company activities, such as work assignments, submissions, vehicle reports, and information associated with the employee's assigned customers.
• SMS program information, such as the enrolled phone number, enrollment and consent records, message content, timestamps, delivery status, and opt-out requests.

We receive information directly from you, through your use of our services, and from service providers involved in business transactions. Please submit only information relevant to the service or request.

How we use information

We use information to process orders and payments; issue invoices; arrange delivery; maintain customer and employee accounts; answer requests; administer agreed payment terms; manage authorized company activities; provide requested communications; operate and improve our website and dashboards; investigate suspected fraud or misuse; and meet recordkeeping and legal obligations.

Business systems may use rules or automation to flag overdue accounts, payment exceptions, or outstanding work. If an account status or record appears incorrect, contact us to request a review. This policy does not itself establish credit terms or authorize charges to a payment card.

Service providers and disclosures

We disclose information needed to operate these services to providers such as Zoho for commerce and business records, Google for hosting and business services, payment processors for payment transactions, carriers for shipping, and Twilio and telecommunications carriers for SMS delivery. Google Analytics and Google Tag Manager are configured on this website. Information disclosed depends on the service involved.

We may also disclose information to professional advisers, in response to valid legal requirements, or as reasonably necessary to investigate fraud, resolve disputes, or protect people and our services. Access within Colossal is limited according to job responsibilities and business needs.

SMS consent information is subject to the stricter protections below. General disclosure language elsewhere in this policy does not authorize sale or transfer of SMS consent.

Payments and sensitive information

Payment card details are handled through the applicable payment provider. Our business records may include payment amounts, transaction references, payment status, and limited card identifiers provided by that provider.

Do not send full card numbers, security codes, passwords, or identity documents through employee alert texts or ordinary email. Use the designated payment or document-submission process. Recurring card charges require a separate authorization and are not authorized by website use or SMS enrollment.

Cookies, analytics, and advertising

Cookies and similar technologies support website functions such as shopping carts, sessions, preferences, security, and usage measurement. Google Analytics is used for website measurement. Google Tag Manager manages website tags; its presence alone does not establish which advertising features are active.

We do not sell personal information for money, share customer lists with advertisers, or currently use Google or Facebook remarketing. Posting or reposting public product or vendor content on social media is separate from sharing customer information with advertisers. If our data practices change, we will update this notice and provide any required choices or obtain any required consent before the new use.

We have not established a website-wide response to legacy browser Do Not Track signals. Do Not Track is distinct from legally recognized opt-out preference signals such as Global Privacy Control. Where applicable law requires us to honor an opt-out preference signal for sales or targeted advertising, we will do so. We do not currently use the advertising practices described above. Providers of website measurement or embedded content may receive device and usage information when their services load; their own privacy notices describe their handling of that information.

You can manage cookies through your browser settings and any privacy controls offered on the website. Blocking necessary cookies may affect shopping or account functions. Google's privacy information is available at https://policies.google.com/privacy. Google's browser analytics opt-out tool is available at https://tools.google.com/dlpage/gaoptout. That tool does not disable every website tag or every form of information collection.

Colossal Employee Alerts — SMS privacy

Colossal Employee Alerts is an internal staff messaging program. It covers customer purchasing-status updates and payment-check reminders, product and vendor news, weather and operational notices, vehicle-report and work-task reminders, and system-error alerts. Routine updates may be combined into a morning digest; additional alerts may be sent as needed. Message frequency varies.

Employees receive signup instructions by email. When enrollment is available, text START to (405) 972-8008, review the program disclosures, and reply YES to confirm. Providing a phone number or receiving a company-paid phone does not by itself enroll someone. Enrollment records document the phone number, date, method, and confirmation of consent.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be sold, rented, or transferred to other parties for their messaging programs. Providers supporting delivery and program administration, including Twilio and carriers, may process information solely as needed to provide those services; this does not authorize their independent marketing.

Reply STOP to unsubscribe or HELP for assistance. You may also contact accounting@cdtoolsllc.com. After opting out, you may receive a final confirmation; recurring program texts stop unless you enroll again. Opting out of texts does not remove work assignments, which may still be communicated through email or the dashboard. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Customer-status texts are limited to brief status information, customer names, and company dashboard links. Balances, invoice numbers, payment dates, and payment card details belong in the authorized business systems rather than these alert texts. This program does not enroll customers in customer marketing or payment-reminder texts. The separate Employee SMS Terms provide additional program details.

Retention and security

We retain information for the time needed for the purposes described here, including accounting, tax, business, dispute-resolution, consent, and legal requirements. Retention depends on the record type. An unsubscribe or deletion request does not require removal of records we must retain, including records needed to prevent further unwanted texts.

We use reasonable administrative and technical safeguards appropriate to the information and systems involved. No website, transmission method, or storage system can guarantee complete security. Protect your login credentials and notify us promptly of suspected unauthorized access.

Privacy requests and choices

You may unsubscribe from promotional emails using their unsubscribe instructions or by contacting us. Transactional and necessary account communications may continue.

Contact accounting@cdtoolsllc.com to request access to, correction of, or deletion of your personal information, or to ask about privacy choices. Depending on your location and applicable law, additional rights may include obtaining a portable copy, restricting certain processing, opting out of certain advertising or sales, or appealing a denied request.

We may verify your identity and authority before acting on a request. We respond within applicable legal deadlines and explain applicable limits or reasons for a denial. Deletion may be limited by recordkeeping obligations, fraud prevention, pending transactions, or legal claims. Where an appeal right applies, reply to our decision requesting an appeal. You may also contact the appropriate regulator. We will not unlawfully discriminate against you for exercising applicable privacy rights.

State-specific information

This policy covers the services described above for people in Texas, Oklahoma, California, Michigan, and other locations. Privacy rights and business obligations depend on applicable law, the information involved, and the context of the interaction; sales-tax registration does not determine privacy rights.

California workforce: Where Colossal is a covered business under the CCPA, California employee and applicant personal information is also covered. Any workforce notice required by applicable law will describe employment data collected, purposes, recipients, retention, and applicable rights and will be provided when required. Website use and SMS consent do not authorize undisclosed employee monitoring or recording. This website/SMS policy does not serve as a complete workforce notice.

California: Where the CCPA applies, California residents may request information about collection, use, and disclosure; access, correction, deletion, and portability; opt out of sales or sharing for cross-context behavioral advertising; and limit certain uses of sensitive personal information. Authorized agents may submit requests subject to applicable verification requirements. Requests do not require creation of a new account. Any applicable sale/sharing practices and working opt-out methods must be described in the cookies and advertising section of this policy. We will honor applicable opt-out preference signals where required by law.

Oklahoma: Beginning January 1, 2027, where Oklahoma's consumer privacy law applies, eligible residents may exercise rights to access, correct, delete, and obtain a copy of personal data and opt out of certain sales, targeted advertising, and qualifying profiling. Requests and appeals can be directed to our privacy contact. We will respond to applicable requests and appeals within the time required by law and explain any available further appeal or complaint process. This law generally concerns individual or household activity, rather than commercial or employment activity. Applicability and exceptions must be assessed before relying on an exemption.

Michigan: We apply the security and privacy practices described in this policy to Michigan information as well. We will provide security-incident notifications when required by applicable law. This notice does not claim that proposed Michigan legislation is already effective or limit any existing statutory rights.

If a security incident triggers notification duties, we will notify affected people and authorities as required by the applicable laws, including applicable timing and content requirements.

Children and external services

Our services are intended for business and adult use, not directed to individuals under 18. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information, contact us so we can investigate and take appropriate action.

Links to external websites or services, including financing providers, are governed by those providers' privacy practices. Review their notices before submitting information. Using our website does not authorize a third-party lender to contact you.

Changes and contact

We may update this policy as our practices or requirements change. We will update the date above and provide additional notice when required. A policy update does not by itself expand SMS consent to new message subjects.

Colossal Diamond Tools, LLC
Privacy and employee SMS support: accounting@cdtoolsllc.com
Phone: (972) 800-1502
Mail: Colossal Diamond Tools, LLC
P.O. Box 79575
Saginaw, TX 76179