Skip to main content
Log In

Notice at Collection

We collect certain categories of personal information when you visit our site, and we use that information for business and commercial purposes. Please refer to the California Consumer Privacy Act tab below to view the categories of personal information we collect, the purposes for which it is collected or used, and whether the information is sold or shared. For more information, about our online practices, view our Online Privacy Code.

If you wish to have TD not sell your personal information to a third party or share your personal information with a third party for cross-context behavioral advertising, please click: Do Not Sell or Share My Personal Information.

You may have other rights in addition to the right to opt out of the sale or sharing of personal information. Please scroll down to view the California Consumer Privacy Act tab for an explanation of your rights regarding your personal information.

California Consumer Privacy Act Policy

Financial institutions collect personal information necessary to offer and provide financial products and services, as well as permitted by federal, state, and local law. TD collects personal information to use for various business purposes, including but not limited to:

  1. Operational Purposes. Includes offering and providing financial products and services, processing and fulfilling payments and other transactions, and to service existing or prospective accounts, products and service offerings.

  2. Security and Fraud Detection. Includes verifying consumer's identities; detecting security incidents; protecting against malicious, deceptive, fraudulent or illegal activity; and supporting prosecution of such activity.

  3. Marketing and Data Analytics. This includes advertising and marketing initiatives and services, data analytics and quality assurance reviews.

  1. Internet and Web Interaction. Please see our Online Privacy Code for a detailed explanation on the data collected when you interact with one of our targeted ads or view any of our electronic communications.

  2. Legal and Regulatory Obligations. Includes collection, disclosure, and storage of data necessary to comply with statutory or regulatory requirements.

  3. Other notified purposes. For any other purposes disclosed to you at the time we collect your information or pursuant to your consent.

The categories of personal information that TD has collected in the preceding 12 months include: 

  1. Identifiers. This includes, but is not limited to, personal identifiers such as name, alias, address, social security number, passport number, e-mail address, Internet Protocol address and other online identifiers, and other similar identifiers.

  2. Personal Information Covered Under California's Customer Records Law. This can include data that is also covered under other categories. Personal information in this category can include data from consumer reports, personal financial statements, or any other financial, medical, or health insurance information. Other examples include driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number.

  3. Protected Class Characteristics. Includes information about race, color, religion or creed, national origin, sex, age, disability, veteran status, genetic information, citizenship status.

  4. Commercial Information. Includes records of real or personal property, products or services purchased, obtained, or considered and other consuming histories and tendencies.

  1. Biometric Information. Biometric data that can be used to establish identity; includes voice, finger, eye and facial prints.

  2. Internet or Other Electronic Network Activity Information. Includes browsing and search history, and interactions with websites, advertisements, and applications.

  3. Geolocation Data.

  4. Audio, Electronic, Visual, or Similar Information.

  5. Professional or Employment Information.

  6. Education Information defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).

  7. Inferences. Insights that we use to build a profile about you; includes profiles, preferences, and behaviors drawn from collection and analytics of any of the other categories of personal information collected.

The sources from which TD collects this personal information include but are not limited to:

  1. The consumer or their authorized parties or agents. Authorized parties or agents includes, but is not limited to, parties such as attorneys, guardians, and those with powers of attorney.

  2. Affiliates.

  3. Service providers.

  4. Government agencies.

  1. Credit reporting agencies, such as Experian, Equifax, and TransUnion.

  2. Our websites and mobile apps, or any time you visit, use, or interact with any of the features or services available on our mobile or online applications.

  3. Data analytics providers, including consumer data resellers.

The business or commercial purposes for which TD may disclose your personal information include, but are not limited to:

  1. For all of the stated purposes above for which TD may collect personal information.

  2. Auditing Purposes. Related to our interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with those specifications and other standards.

  3. Debugging/Repair Activity. Debugging to identify and repair errors that impair, or may impair, existing system and application functionality.

  1. Short-term transient use for our purposes.

  2. For services performed on our behalf by a service provider performing services on behalf of a business for which TD is a service provider. Includes, but is not limited to, maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, advertising, marketing, or analytic services, or providing such similar services on behalf of a business or service provider.

The categories of third parties with whom TD may disclose personal information, and the categories of personal information that may be disclosed with such third parties include, but are not limited to:

  1. The consumer or their authorized agents or parties:
    Personal information categories include: Identifiers, Customer records law, protected class characteristics, commercial information.

  2. Affiliates and subsidiaries:
    All categories of personal information collected.

  3. Internet service providers:
    nternet or other electronic network activity information, geolocation data, electronic information.

  4. Advertising networks:
    Internet or other electronic network activity information, geolocation, Identifiers, customer records law, commercial information, inferences.

  1. Data analytics providers:
    Identifiers.

  2. Service providers, which include nonaffiliated entities providing operating systems, platforms and other services to support day-to-day operations:
    All categories of personal information collected.

  3. Government, regulatory, or legal authorities:
    Any categories of personal information collected can be disclosed if subject to legal process or proceedings.

TD Bank has established information retention guidelines that define consistent minimum standards and requirements for the length of time information and records are to be maintained. Standards and procedures will also be in place to mandate the suspension of ordinary disposition and destruction processes as necessary, and to comply with preservation obligations related to actual or reasonably anticipated litigation, regulatory requirements, supervisory investigation or audit.

TD has not sold or shared personal information in the preceding 12 months. TD does not sell or share personal information of minors under 16 years of age. Under CCPA, a "sale" means the disclosure of personal information to a third party for monetary or other valuable consideration. “Share” or "Sharing" when used in this policy has the meaning of the term in the CCPA: the disclosure of personal information to a third party for cross-contextual behavioral advertising, whether or not for monetary or other valuable consideration. Although the CCPA does not require businesses that do not sell or share information to provide the option to opt out, we are providing opportunity for consumers to exercise such a right if in the future we engage business practices that are considered to be a sale or share under the CCPA. If you would like to opt out of the sale or sharing of your personal information, you can submit an opt-out request by clicking: Do not sell or share my personal information.

Personal information does not include:

  • Publicly available information. “Publicly available information” means: information that is lawfully made available from federal, state, or local government records or information TD has a reasonable basis to believe is lawfully made available to the general public by a consumer or from widely distributed media, or by the consumer; or information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience;
  • Truthful information that is a matter of public concern;
  • Consumer information that is deidentified or aggregate, as those terms are defined by the CCPA; and
  • Information otherwise exempt from the CCPA, such as personal information collected, processed, sold, or disclosed subject to the federal Gramm-Leach-Bliley Act and implementing regulations.

** Our affiliates include those companies that control, are controlled by or under common control with TD Bank US Holding Company or The Toronto-Dominion Bank, such as other banks, financial companies, registered broker dealers, investment advisors, and insurance agencies.

Your CCPA Rights

The California Consumer Privacy Act (CCPA) provides California residents rights regarding the collection and use of their personal information, subject to certain exceptions. An authorized party may submit requests on your behalf. An authorized agent is a natural person, or a business entity registered with the Secretary of State to conduct business in California, that you have authorized to act on your behalf.

Generally, California residents have the following rights:

  • Right to Know  and Access. To request a disclosure of the categories of personal information that have been collected; the categories of sources from which the information was collected; the business or commercial purpose for collecting, selling, or sharing the personal information; the categories of third parties to whom the business discloses personal information; and access to the specific pieces of personal information the business has collected about the consumer in a portable format.
  • Right to Request Deletion of Personal Information. To request that a business delete personal information that the business has collected from the consumer, subject to certain exceptions provided under the CCPA.
  • Right To Correct Inaccurate Personal Information. To request that a business correct any inaccurate personal information that the business maintains about the consumer.
  • Right to Opt-Out of the Sale of Personal Information or Sharing of Personal Information for Cross-Context Behavioral Advertising. As stated above, TD does not sell personal information or share personal information for cross-context behavioral advertising.  Although the CCPA does not require businesses that do not sell or share information to provide the option to opt out, we are providing the opportunity for consumers to exercise such a right if in the future we engage in business practices that are considered to be a sale or sharing under the CCPA. To opt out of the sale of personal information or sharing of personal information to third parties for cross-context behavioral advertising at any time please click: Do not sell or share my personal information or please call 1-888-751-9000.
  • Right of No Retaliation Following Opt-Out or Exercise of Other Rights. To not be denied a product or service, charged a different price or rate, denied a discount or other benefit because the consumer exercised any of his/her rights under the CCPA.

Last updated: 01/01/2023

If you would like to exercise any of your rights, please click the Make a Request button. To process your CCPA request(s), you will be asked to provide information about yourself. TD will use this information to verify your identity.  This will include basic contact information (street address, phone number, e-mail) and last four digits of Social Security Number, or Tax ID number and year of birth or additional information we may require to sufficiently verify your identity.  This information will not be further disclosed or retained for longer than necessary for purposes of verification, or used for unrelated purposes.

Make a request

CCPA applies to California residents only. For purposes of CCPA, a California resident is a person who is in California for a purpose that is not temporary or transitory or is domiciled in California but is outside of the state for a temporary or transitory purpose. The rights described above do not apply to residents of other U.S. states or persons who reside outside of the United States.

There are certain activities, information, and circumstances involving the collection, use, processing, sale, or disclosure of personal information that are exempt or excluded from CCPA. CCPA exemptions and exclusions include, but are not limited to:

Personal information collected or sold if every aspect of the commercial transaction takes place wholly outside of California.

Deidentified or aggregate consumer information.

GLBA: The CCPA does not apply to personal information collected, processed, sold or disclosed subject to Gramm-Leach-Bliley Act and its implementing regulations (GLBA). GLBA is the federal law that regulates the collection, disclosure, and safeguarding of individuals' nonpublic personal information who obtain financial products or services primarily for personal, family, or household purposes from a financial institution. For example, if you are a California resident and you have a personal financial product with us, such as a personal credit card, the CCPA rights do not apply to the personal information associated with that account. There are other types of personal information that are not covered by the rights and limitations in the CCPA.

Fair Credit Reporting Act: CCPA does not apply to any activity involving the collection, maintenance, disclosure, sale, communication, or use of any personal information bearing on an individual's credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living by a consumer reporting agency, user or furnisher of consumer reports as defined under the Fair Credit Reporting Act.

Opt Out Request

TD does not “sell” your personal information or “share” your personal information for cross-context behavioral advertising. Therefore, if you exercise your right to opt-out of “sales” or “sharing,” you will not receive a confirmation from us. Consistent with applicable law, we will opt you out of sales and sharing at your request.

Request to Know

Consistent with applicable, law, you will receive a response to your verified request within 45 days of submission, unless we notify you prior to the end of those 45 days that the delivery date of the response will be extended by an additional 45 days. Along with the response to the verified request, you will receive a copy of certain information TD has collected on you during the 12 months immediately preceding the date of your verified request. This will include any information provided in your verified consumer request form. TD is not obligated to provide a response more than twice in a 12-month period; this period begins upon your first submission of the verified consumer request.

Request to Correct

You will receive a confirmation of your correction request within 45 days of submission, unless we notify you prior to the 45 days that the delivery date of confirmation will be extended by an additional 45 days. Consistent with applicable law, we will correct your information at your request.

Deletion Request

You will receive a response to your verified request within 45 days of submission, unless we notify you prior to the end of those 45 days that the delivery date of the response will be extended by an additional 45 days. Consistent with applicable law, we will delete your personal information in response to your request.

Make a Privacy Request

Only California residents can make a request. A California resident is a person who is in California for a purpose that is not temporary or transitory, or is domiciled in California but is outside of the state for a temporary or transitory purpose. If you are not a resident of California, you can view our Privacy webpage to learn more about our privacy practices.

Here's what you can request:

  1. Access to a portable copy of your personal information and transparency about our processing of your personal information

  2. To delete your personal information

  3. Opt-out of sales of personal information or sharing of your personal information with third parties for cross-context behavioral advertising

  4. To correct your personal information

  5. If you are a current customer or employee and would like to update your information, we're always here to  help – 24 hours a day, 7 days a week.

  6. Phone
    1-888-751-9000

  7. Location
    Visit a TD Bank

  8. Online
    TD.COM

Here's what you'll need:

  1. Contact Information (street address, phone number, and e-mail)

  2. Last four digits of Social Security Number or tax ID Number and year of birth

If making a request through your online Account:

  1. TD username and password (TD Bank and TD Auto Finance customers with online banking)

Why do you need to provide this information?

  1. To process your verified consumer request(s), TD requires certain information from you to verify your identity. TD will use this information only to verify your identity and will store the information for that purpose.This information will not be further disclosed or retained for longer than necessary for purposes of verification, or used for unrelated purposes.  If we cannot verify your identity, we are not obligated to fulfill your request.

What you will receive

  1. Request to Know and Access
    Consistent with applicable law, you will receive a portable copy of any personal information TD has collected on you during the 12 months immediately preceding your request. This will include any information provided in your CCPA request form. You may submit a request no more than two times in a 12-month period; this period begins upon your first submission of the request form.

  2. Request to Delete
    Consistent with applicable law, we will delete your information upon request request unless an exception applies.

  3. Request to Correct
    Consistent with applicable law, we will correct your information upon request.

    If you are a current customer or employee and would like to update your information, we're always here to  help – 24 hours a day, 7 days a week.

    Phone
    1-888-751-9000

    Location
    Visit a TD Bank

    Online
    TD.COM

  4. Request to Opt-out
    You will not receive a confirmation to a request to opt-out. TD will process you opt-out request following submission of your request form.

Online request

If you are a California resident you can make a request to access, delete, correct or opt-out of selling or sharing your personal information through our online portal

Make a request

Phone request

If you are a California resident you can access a copy of, delete, correct or opt-out of selling or sharing your personal information by calling us at the appropriate numbers below.

Access your report online

If you have requested online delivery of a report and maintain an account with TD Bank, you must be logged in to view the report.

If you completed a request without logging in you will receive your report the way you specified, direct mail or secure e-mail, while completing the request form.

Contact Us

If you have questions about TD's California Consumer Privacy Act Policy or practices, please call 1-888-751-9000.