Privacy Policy

This Privacy Policy applies to personal information collected by Penn Station, Inc., our affiliates, our subsidiaries and our franchisees (collectively referred to as “Penn Station”, “we,” “us,” or “our”) in connection with the services we provide, on our websites, microsites, mobile sites, or mobile apps that expressly adopt, display, or link to this Privacy Policy (collectively referred to as our “Sites”), and on our Social Media Pages. “Social Media Pages” are the official social media pages we operate on social media sites such as, but not limited to, Facebook, YouTube, TikTok, Instagram, and X.

This Privacy Policy addresses the following:

1. What information does Penn Station collect about you, and from what sources?
2. How do we use the information we collect about you?
3. Does Penn Station share your information with third parties?
4. What choices do you have over how Penn Station uses your information?
5. How does Penn Station secure your information on its Sites?
6. Supported Web Browsers and Do Not Track Signals
7. Children’s Privacy
8. SMS Messaging
9. Will this Privacy Policy change?
10. How can I contact Penn Station?
11. U.S. Privacy Rights

1. What information does Penn Station collect about you, and from what sources?

We and/or our third-party service providers may collect information about you from a variety of sources, including when:

• you provide us information
• we observe or collect information through technology
• we collect information on our Social Media Pages
• we receive information about you from third parties and combine it with information collected on our Sites

Information You Provide

We may ask you to provide information about yourself directly to our Sites, such as the following:

You may also provide information similar to the above without a specific request from Penn Station. For example, if you fill out an online inquiry form, you are provided with a free-form space and could choose to enter any information into that space.

We may allow you to use your personal social media account on social media sites (“Personal Social Media Account”) to provide information to us when you participate in certain features on our Sites. This information may include any information you have shared on your Personal Social Media Account, such as the following:

It is also possible that we will be able to continue collecting this information from your Personal Social Media Accounts should the information be revised by you later.

You may choose not to provide us with certain requested information, but then you might not be able to take advantage of some of the features on our Sites.

Information Observed or Collected Through Technology

• Navigational Information. Navigational information, such as the following, is collected by us and our third-party service providers when you use our Sites:
• browser type and version
• operating system
• the Internet service provider used to access our Sites
• IP Address
• use of links to arrive at our Sites
• web pages requested and viewed
• time spent on our Sites
• for our mobile websites and apps, technical information about the device used, such as screen size, cookie support by the device, and how images may appear


• Location Information. Our Sites and emails include features that may require collecting different types of location information that we then use for the specific feature you have selected, such as:
• Find a Location. Our Sites may allow you to search for Penn Station locations near you. If you access one of our Sites through a mobile device and you have enabled location-based services, specific location information may be collected for these features. If you access these features through a desktop device, you may be able to choose to have your browser provide us your location information to respond to your request. The specificity of the desktop device location information can vary depending on the browser you are using and how you are connected to the Internet.
• Email. Our emails may use your IP address to determine the postal code where you are located when you open the email. This allows us to tailor content to you, such as a map of nearby Penn Station locations. The specificity of the location can vary depending on the device used to open our emails.
• Mobile offers. If you consent to receive them, we may send offers to your mobile devices when you are in certain locations.


• Cookies and other similar technology. We and our third-party service providers use “cookies.” Cookies assign a unique identification to your device and are typically stored on your device by your web browser. We may also use pixel tags (also known as web beacons, web bugs, and clear GIFs) on the Sites and in emails. A pixel tag is a nearly invisible pixel-sized graphic image on a web page or in an email message. Through the use of cookies, we may link information about your interactions with our Websites or emails over time. We also contract with third party advertising or analytics companies to serve you online ads on other websites. These companies use cookies or similar technologies to collect information about your interactions with our Sites and interactions with other websites. These advertising companies may use and share the information gathered to deliver ads more tailored to your interests. We receive aggregate information from these third parties to understand our advertising effectiveness. Any information collected by us or by third parties through the use of cookies or similar technologies may be linked with other information we collect about you.

The information we and our third-party service providers collect through cookies, pixel tags, and similar technology includes the following:

• your interactions with our Sites and with our advertisements
• the time of your visit to our Sites
• confirmation when you open email from us, including the time you open the email and whether you click on any links in the email
• sites you visit after visiting one of our Sites.

Information Collected on Penn Station Social Media Pages

Your information may be collected directly by us through our Social Media Pages. The type of information we would collect is similar to what is described above under “Information You Provide.” Your information may also be collected by the social media site hosting our Social Media Pages. Our Privacy Policy does not cover the privacy and security practices of the social media sites on which Penn Station has its Social Media Pages. Please review the terms, policies, and settings of those social media sites if you have questions about how they collect and use your data.

Information Obtained from Third Parties

The information we collect may be combined with information from outside sources (e.g., demographic information, navigational information, additional contact information).

2. How do we use the information we collect about you?

The information we learn from you helps us provide services to you, personalize your experience with us and our communications to you, and helps us continually improve your experience on our Sites.

We use the information you provide, information collected through your Personal Social Media Accounts, and information collected on our Social Media Pages for things like:

We use navigational information gathered through technology for determining things like:

We use information collected through cookies and similar technology to determine many of the same things listed for navigational information above. In addition, cookies and similar technology are used for things like:

• personalizing your experience on our Sites
• serving tailored ads on other sites, as described below
• tailoring email marketing to you based on your preferences on or use of our Sites
• determining return visitors
• measuring the effectiveness of our advertising.

We use third-party analytics providers, such as Google Analytics, to measure traffic and usage trends, and to help us better understand your use of and interaction with our Sites and Social Media Pages. For more information on how Google uses data when you use our Sites, click here.

Similar to the navigational information described above, the social media sites where we have our Social Media Pages may provide aggregate information and analysis to us about visitors to our Social Media Pages. This allows us to better understand and analyze our user growth and general demographic information about the users of, and interaction with content on, our Social Media Pages.

3. Does Penn Station share your information with third parties?

We may share your information with third parties for certain purposes. For example, we may share your information with the following:

1. Service Providers: We partner with third parties to assist with many aspects of our business, including fulfilling orders, advertising, gift card support, providing and improving our communications with you, responding to requests, analyzing your interests and activity on our Sites and Social Media Pages, and helping us communicate with customers. These third parties may provide services related to any of the purposes described in How do we use the information we collect about you?, and we may share with them any types of information described in What information does Penn Station collect about you, and from what sources?. We may also receive information collected by these third parties and combine it with the information we have collected. Your information may also be collected and processed by third parties, such as the payment providers you select, who will process your information independently in accordance with their own privacy notices.
2. Marketing Providers: We partner with third parties to assist with the advertising and marketing of our business. We may share with them the types of information described in How do we use the information we collect about you?
3. Parties to a Business Transaction: If Penn Station were ever merged with or acquired by another company, or it acquires another company, or is involved in a corporate reorganization or other change in corporate control, your information could be shared with that company.
4. Other Third Parties: We will disclose information about you, including to government bodies or law enforcement agencies, when we believe it to be necessary for compliance with the law or to protect our Sites’ users, our Sites, or the public.
5. With Your Consent: We may disclose your information to other third parties with your consent.

4. What choices do you have over how Penn Station uses your information?

We give you choices about the information we collect and how we communicate with you.

1. Email: You may opt-out of our marketing emails by following the instructions listed in the email that you received. However, even if you opt-out you may still receive non-marketing emails, such as customer service communications.
2. Location Information:
   • a. Mobile Device Location Information. Your mobile device settings may allow you to disable location-based services, which will prevent our Sites from accessing your precise mobile device location information. We recommend you review the help or user manual provided with your device for instructions.
   • b. Desktop Device Location Information. Your desktop web browser may allow you to remove permission you granted through your desktop device for our Sites to access your location information and/or completely block requests for location information. We recommend you review the help or user manual provided with your browser for instructions.
   • c. Email Location Information. Your email program may allow you to prevent the pixel tags or images in the emails you receive from us from downloading, which will also prevent our service provider from accessing your location information. You can also unsubscribe from receiving our marketing emails, as described in the “Email” section above.
3. Postal Marketing: If you no longer want to receive marketing materials from us via regular postal mail, please fill out our online “contact us” form found here, and tell us that you want to be removed from Penn Station postal mailing list, including the postal address you wish to have removed.
4. Texting: We will not send you any text messages unless you consent to receive them. To stop receiving text messages, reply “Stop” to any text message you have received from us. For more information, see Section 8.
5. Social Media: This privacy policy does not cover the privacy and security practices of social media platforms on which we have Social Media Pages. Please review the terms, policies, and settings of those social media platforms if you have questions about how they collect and use your data.
6. Online Advertising: For more information about opting out of third party advertising, visit: DAA Opt Out click here or NAI Opt Out click here. By clicking one of these links, you will leave our Sites for another online site where you may specify your preferences under that opt-out program. You can also click the preference icon that may appear on some of our advertising served through these technologies.

5. How does Penn Station secure your information on its Sites?

We implement reasonable technical, administrative, and physical measures designed to protect the personal information in our custody or control from unauthorized access, use, modification, and disclosure. Moreover, we regularly monitor our systems for possible vulnerabilities and attacks. While we implement these security measures on our Sites, you should be aware that 100% security is not always possible.

We may enable you to navigate to third-party websites through links on our Sites. We do this for your convenience. If it is not one of our Sites, then we don’t endorse, may not have any affiliation with, do not control, and aren’t responsible for those third-party websites and/or their Internet and web practices. Whether the third-party content appears within our Site environment (like a map frame) or you leave our Site for another website to view it, the terms, conditions, and privacy policies of those other websites govern your online experience. Please review their terms of service or use and privacy policies if you have any question about their practices.

6. Supported Web Browsers and Do Not Track Signals

We recommend that you use the latest web browser versions to optimize your experience. Older web browser versions may not be able to access or utilize all pages on our Site as intended.

We may not be able to receive or honor web browser “Do Not Track” signals and our Site may continue to collect information in the manner described within this Privacy Policy.

7. Children’s Privacy

Our Website and Social Media Pages are not intended for children under 16. No one under 16 should share any personal information with us. We do not knowingly collect any personal information from children under 16. To request deletion of personal information relating to a child under 16, please contact us using the information below in Section 10.

8. SMS Messaging

If you elect to receive marketing and support text messages on your mobile device from Penn Station or Penn Station’s vendors, either via our website, QR Sign-up Code, offline form or electronic device at point of sale, or by text, and by sending a text message confirming your consent, you are providing your express written consent to receive periodic marketing, promotional, and support text messages from us (each, a “Text Message”) sent through an automatic telephone dialing system hosted by our third-party service provider. Message frequency varies. This service is optional, and your consent is not a condition for purchase. Your mobile providers’ message and data rates may apply to any confirmation Text Message and to all subsequent Text Messages according to your individual rate plan provided by your wireless carrier. Please consult your mobile service carrier’s pricing plan to determine the charges for browsing data and sending and receiving Text Messages. Under no circumstances will Penn Station or our affiliates be responsible for any text messaging or wireless charges incurred by you or by a person that has access to your wireless device or telephone number. If your carrier does not permit text messages, you may not receive our Text Messages. Neither we nor the wireless carriers will be liable for any delays in the receipt of, or failure to deliver, any Text Messages, as delivery is subject to effective transmission from your network operator. Data obtained from you in connection with any Text Message may include your cell phone number, your provider’s name and the date, time and content of your text messages. Penn Station may use this information in accordance with this Privacy Policy to contact you and to provide the services you request from us. You can opt out of receiving Text Messages from this program at any time by replying STOP to any Text Message you receive in connection with the program, or by contacting us using the information in Section 10.

9. Will this Privacy Policy change?

We may make changes to this Privacy Policy at any time, so please review it periodically. We will update the “Last updated on” date at the top of this Privacy Policy at the time a change is made.

10. How can I contact Penn Station?

If you have questions or concerns with respect to our Privacy Policy, you can email us at or fill out an online “contact us” form available here, making sure to include your question, name, and contact information.

11. U.S. Privacy Rights

Certain U.S. states afford residents rights with respect to their Personal Information. The rights described herein are subject to exemptions under applicable law. For purposes of this section, the term “Personal Information” includes both “Personal Information” and “Personal Data” as defined by applicable law.

If your Personal Information is subject to a privacy law in your state, you may have certain privacy rights with regard to that information. You may have the right to:

• Know, access, and confirm your Personal Information.
• Delete the Personal Information we have about you, subject to exceptions under applicable law.
• Correct inaccuracies in your Personal Information.
• Obtain your Personal Information in a portable and readily usable format.
• Opt-out of the use or processing of your Personal Information for profiling or targeted advertising.
• Opt-out of the sale of your Personal Information.

Under certain state laws, you may also have the right not to receive discriminatory treatment for the exercise of any of these privacy rights. We will not discriminate against you because you have exercised any of your rights.

Certain state laws may also provide you the right to appeal our decisions regarding your rights requests if we do not respond to your requests or do not take action regarding your requests. Additionally, if you are a resident of the state of California, you may have a right to pursue legal action for improper handling of your Personal Information.

How to Submit a Request

If you wish to exercise the rights listed above, and are a resident of a state that provides such privacy rights, you may submit a request by emailing , by calling us toll-free at 1-888-678-6017, or you may opt-out of the sale or sharing of your Personal Information by using this webform here. If you choose to submit your request via email, you must include “Privacy Rights Request” in the subject line and clearly provide us with the following information: what type of request you are making, your full name, email address, and physical address. You may only make one request per email.

We are required to provide you with access to your Personal Information or delete your Personal Information only in response to verifiable consumer requests. We will compare the information you provide to us in your request with any information we may have in our possession to verify your request. You may be asked to provide us with information such as your home address, email address, and telephone number. We may also contact you to request additional information in relation to your request. The information you provide must match the information we have in our possession. This measure is in place to help ensure that Personal Information is not disclosed to any person who does not have the right to receive it. The information collected through this process will be used for verification purposes only.

Authorized Agent

Please note that you may authorize an agent to exercise any of these rights on your behalf by contacting us by email at . If you use an agent, we will take measures to verify your agent’s authorization similar to the verification described above for fulfilling any access or deletion requests. We may require more information to ensure proper verification of you and your agent’s identity and authorization.

Categories of Personal Information Collected and Disclosed; Categories of Third Parties; and Business and Commercial Purposes

In the past 12 months, we may have collected and disclosed the categories of Personal Information that are indicated in the chart below to the third parties noted in the chart below. Note that the specific pieces of Personal Information we collect about you may vary depending on the nature of your interactions with us and may not include all of the examples listed.

Categories of Personal Information	Business Purposes for Collection, Use, and Disclosure
Identifiers (such as name, signature, contact information, online identifiers, and government-issued ID numbers)	Respond to your requests Provide our services to you Prevent, detect, and investigate fraud, security breaches, and potentially prohibited or illegal activities Comply with applicable laws and regulations
Records information (such as name, contact information, payment card information, financial information, insurance information, education information, and employment information)	Respond to your requests Provide our services to you Prevent, detect, and investigate fraud, security breaches, and potentially prohibited or illegal activities Comply with applicable laws and regulations
Characteristics of protected classifications (such as sex, age, race, disability, national origin, medical conditions and information, citizenship, immigration status, request for leave, and marital status)	Respond to your requests Provide our services to you Prevent, detect, and investigate fraud, security breaches, and potentially prohibited or illegal activities Personalize your experiences on our Sites Inform our marketing practices
Commercial information (such as transaction information and purchase history)	Respond to your requests Provide our services to you Prevent, detect, and investigate fraud, security breaches, and potentially prohibited or illegal activities Personalize your experiences on our Sites Inform our marketing practices Comply with applicable laws and regulations
Internet or network activity information (such as browsing history and interactions with our Sites)	Respond to your requests Provide our services to you Prevent, detect, and investigate fraud, security breaches, and potentially prohibited or illegal activities Personalize your experiences on our Sites Inform our marketing practices
Geolocation data (such as device location and IP location)	Respond to your requests Provide our services to you

We may also collect Personal Information about you that does not directly fit within one of the categories listed above, which information is described in What information does Penn Station collect about you, and from what sources?

For more information about the business and commercial purposes for which we disclose Personal Information, see How do we use the information we collect about you?

Sale and Sharing of Personal Information

While we do not sell your Personal Information for monetary consideration, certain state laws may characterize our sharing of Personal Information with companies that provide services to us, such as companies that help us to market or advertise our products and services to you, as “sales” or “sharing” for purposes of cross-context behavioral advertising or targeted advertising.

Categories of Personal Information disclosed in the past 12 months that may be considered a “sale” or “sharing” for purposes of cross-context targeted advertising under applicable law, as described above: Identifiers, Records Information, Characteristics of protected classifications, Commercial information, Internet or network activity information, and Geolocation data. We “sell” or “share” this information with our marketing providers, analytics providers, and our ad providers for business and commercial purposes to provide personalized services, ads, and marketing to you.

We do not knowingly sell or share the Personal Information of children under 16 years of age.

Categories of Personal Information Disclosed for a Business Purpose

We share Personal Information about you with service providers and third parties for business purposes, such as operational purposes and other purposes related to providing you with the products and services you seek from us. For more information about the business purposes for which we disclose Personal Information, see Does Penn Station share your information with third parties? and see What information does Penn Station collect about you, and from what sources? for what types of information may be shared.

Financial Incentive

We offer exclusive price discounts, rewards, deals, coupons, or other perks for those: (1) who use our digital rewards or offer management program; and (2) participants in our other promotions, programs or sweepstakes (“Programs”). Under California law, participating in any of our Programs may be considered a financial incentive provided in exchange for the collection and retention of Personal Information. Through our Programs, consumers may provide us with any or all of the categories of information in What information does Penn Station collect about you, and from what sources? section above. Participation in these Programs is optional and you may opt out at any time. In addition to this disclosure, each Program contains terms specific to that promotion. Your participation in any of these Programs will be considered affirmative consent to the terms of that particular Program.

We offer these Programs to, among other things, enhance our relationship with our customers. The value to our business, in the aggregate, of customers’ Personal Information depends on specific facts, such as whether and to what extent they take advantage of any offerings. We do not calculate the value of customers’ information for our accounting statements. To the extent we would, however, such valuation could be directly or reasonably related to the cost associated with acquiring or developing such information.

Sensitive Personal Information and Sensitive Data

We will not process your Sensitive Data or Sensitive Personal Information (as those terms are defined under applicable privacy law) without your prior consent.

Additional California Privacy Rights

California residents may also ask us to provide them with: (i) a list of certain categories of Personal Information that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties. California residents may make one request per calendar year. To make this request, you may contact us at . In your request, please include a subject line that states “CA Shine the Light Request,” state that you are a California resident, and provide a current California address for our response.