THE LOOKUP by BLACK TAP Privacy Policy

Effective Date: June 2, 2026.

1. Introduction/Scope.

This Privacy Policy describes how THE LOOKUP by BLACK TAP Craft Burgers & Beer, an international gourmet burger restaurant chain (“THE LOOKUP by BLACK TAP,” “we,” “our,” or “us”), collects, uses, stores, and discloses personal information about you as well as your rights and choices regarding such information.

For purposes of this Privacy Policy, “personal information” means information that identifies or can reasonably be used to identify particular individual, or as otherwise defined by applicable laws.

This Privacy Policy applies to personal information we collect through our website, mobile applications, emails, and other online services that link to this Privacy Policy (the “Online Services”) as well as when you contact us or otherwise interact with us such as over the phone or in one of our restaurant locations (together with the “Online Services”, the “Services”). This Privacy Policy does not apply to information collected by third parties or information collected in the context of employment with us, which is subject to a different employee privacy policy.

While this Privacy Policy provides you with information regarding our privacy practices, your use of our Online Services is subject to and governed by our Terms of Use.

Depending on where you reside or are located, some regions provide additional notice requirements and rights by law. For region-specific terms, see below.

U.S. State Privacy Rights Supplement
European Privacy Rights Supplement
Non-European Privacy Rights Supplement

If you have any questions regarding this Privacy Policy or our privacy practices, please contact us as provided in the Contact Us section below.

2. How We Collect Information.

We collect information, including personal information, about you in a variety of ways as specified below.

In some regions, privacy laws may require us to obtain your consent before we collect and use certain types of personal information or market to you. In certain circumstances, your consent may be implied (e.g., where communications are required in order to fulfill your requests). In other cases, we may seek your consent expressly in accordance with applicable laws (e.g., where sensitive personal information is collected).

a. Information You Provide through our Online Services.

When you use our Online Services, we collect the personal information you provide to us such as when you place an online order or make a purchase, sign-up for our newsletters, participate in a promotion, or contact us, as necessary for our business purposes. The categories of information we may collect include:

Contact Identifiers, including your name, email address, postal address, and phone number.
Characteristics or demographics, including your age, gender, and country.
Commercial or transactions information, including records of our products or services you purchased, obtained, or considered.
Payment information, including your payment instrument number (such as a credit or debit card number), expiration date, and security code as necessary to process your payments. This information is processed by our payment processors.
User-generated content, including content such as text or images you include in any messages you send to us (such as feedback or questions) or share on our Online Services or social media pages (e.g., comments or postings).

b. Information We Collect Automatically.

When you access or use our Online Services, we and third parties we work with use automated means to collect information, including personal information, from and about you. The categories of information we automatically collect include:

Device identifiers, including your device’s IP address.
Device information, including your device’s operating software and browser (e.g., type, version, and configuration), internet service provider, and regional and language settings.
Internet activity, including information about your browsing history and interactions, such as the features you use, pages you visit, content you view, time of day you browse, and referring and exiting pages.
Location data, such as the location derived from your device, an IP address or data that indicates a city or postal code level.

This information is automatically collected through cookies and other tracking technologies incorporated into our Online Services, as described below:

Cookies. Cookies are small text files which are placed on your browser when you visit a website, open or click on an email, or interact with an advertisement. Our Online Services use session cookies (which expire when you close your browser) and persistent cookies (which expire at a set expiration date or when you manually delete them). We incorporate both first party cookies (which are cookies served directly by us) and third party cookies (which are cookies served by third parties we work with). We use cookies for a variety of purposes, including to help make our website work, personalize your browsing experience, prevent fraud and assist with security, perform measurement and analytics, and provide advertising (including targeted advertising).

Pixels. Pixels (also known as web beacons) are code embedded within a service. There are various types of pixels, including image pixels (which are one-pixel transparent images) and JavaScript pixels (which contain JavaScript code). Pixels are often associated with cookies and are used for similar purposes. When you access an Online Service that contains a pixel, the pixel may permit us or a third party to drop or read cookies on your browser, or collect other information about your browser or device.

For details on your rights and choices around cookies and other tracking technologies, see the Your Rights and Choices section below.

c. Information Provided When You Visit Our Restaurants.

We collect personal information offline from you when you dine at our restaurants, which may include: your name (such as when you add your name to a waitlist for a table), your order information, payment information (which will be handled by our payment processors), your email and phone number, and optional survey information regarding your experience at our restaurants, which may be requested in exchange for a free item on a subsequent visit.

d. Information from Other Sources.

We also collect information from other sources. The categories of sources from which we collect information may include:

Business partners that offer co-branded services, sell or distribute our products, or engage in joint marketing or promotional activities.
Third party vendors and related parties we work with in connection with receiving analytics, advertising, security, and fraud prevention services.
Social media platforms with which you interact. For example, when you “like,” “follow”, or otherwise engage with our content on social media (such as through our brand pages or in direct messages), we may collect information such as your contact identifiers and any comments you provide. If you publicly reference our Services on social media (such as by using a hashtag associated with us in a tweet or post), we may use your reference on or in connection with our Services.
Data providers, such as licensors of private and public databases.
Public sources, including where information is in the public domain.

e. Information We Infer.

We may infer new information about you from other information we collect, including using automated means to generate information about your likely preferences or other characteristics.

f. Sensitive Information.

To the extent any of categories of information we knowingly collect are sensitive categories of information under applicable law, we collect and process such information in accordance with, and only for the limited purposes permitted by, applicable law. We do not sell or use sensitive categories of information for purposes of targeted advertising or to make inferences.

3. How We Use Personal Information.

We use your personal information for the following purposes:

Providing our products and services, including to operate the Online Services, fulfill your orders both online and in restaurants, and provide customer support.
Personalizing and improving your experience, including showing you content we believe you will find interesting.
Research and development, including to improve our Services and development new products and services.
Communications, including transactional messages regarding your orders and communicating with you regarding our restaurants, products, Services, events, promotions and other offers and responding to your inquiries, comments, feedback, postings.
Analytics, including to understand trends, usage, and activities, for example through surveys you respond to and tracking technologies that we incorporate into the Service (such as Google Analytics).
Marketing and advertising, such as informing you of special offers, events, promotions, or new locations. We also work with agencies, ad networks, technology providers, and other third parties to place ads about our products and services on other websites and services. For example, we place ads through Google and Facebook that you may view on their platforms as well as on other websites and services. As part of this process, we incorporate tracking technologies into our own Online Services as well as into our ads displayed on other websites, social media platforms and other online services. Some of these tracking technologies may track your activities over time and across non-affiliated services and obtain or infer information about you for purposes of showing you relevant advertising based on your preferences and interests (“targeted advertising”). We may also use audience matching services (which is a type of targeted advertising) to reach people (or people similar to people) who have visited our Service or are identified in one or more of our databases (“Matched Ads”). This is done by us providing a list of hashed email addresses to a third party or incorporating a pixel from a third party into our own Service, and the third party matching common factors between our data and their data. For instance, we may incorporate the Facebook pixel on our Online Services and may disclose your hashed email address to Facebook as part of the use of Facebook Custom Audiences. You may opt out of targeted advertising as described in the Your Rights and Choices section below.
Promotions and events, including to communicate with you about and administer promotions and special events such as viewing parties.
Security, enforcement, and otherwise as permitted by applicable laws, including to prevent, detect, investigate, and address fraud, breach of policies or terms, or threats or harm.
To create anonymized and/or aggregate information which does not and cannot reasonably be used to identify you, which we may use for any lawful business purposes.
At your direction or with your consent, including using your personal information for additional purposes where you direct us to use it in a certain way or with notice to you and your consent.

For details on your rights and choices around use of your personal information, see the Your Rights and Choices section below.

4. How We Disclose Personal Information.

We may share, sell or otherwise disclose your personal information as described below:

Service providers. Many of the third parties we work are service providers that collect and process information on our behalf in accordance with this Privacy Policy. Service providers perform services for us such as payment processing, data analytics, marketing and advertising, website hosting, and technical support. To the extent required by law, we seek to contractually prohibit our service providers from processing information they collect on our behalf for purposes other than performing services for us, although we may permit them to use non-personal information for any purpose to the extent permitted by applicable law.
Third party vendors and related parties. Some of the third parties we work with to perform services act as our service providers in some contexts, but in other contexts independently control the purposes and means of processing your information. For example, we disclose information to ad networks, technology providers, and other third parties that provide analytics or targeted advertising, but may also use information for their own purposes. For these third parties, we encourage you to familiarize yourself with and consult their policies and terms of use. We are not responsible for the privacy practices or content of these third parties.
Business partners. We disclose information to our business partners in connection with offering co-branded services, selling or distributing our products, or engaging in joint marketing or promotional activities.
Affiliates. We disclose information to our affiliates and related entities, including where they act as our service providers subject to this Privacy Policy or use the information in accordance with their own privacy policies.
In connection with a merger or acquisition. We disclose information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business transaction involving all or any portion of our assets, or transfer of all or a portion of our business to another business.
With the public. If you voluntarily share or submit any user content for public posting (e.g., reviews, pictures) through the Online Services or social media platforms (including but not limited to activities associated with promotions or events), such postings and any information associated with them may become available to the public.
Law enforcement and governmental authorities for security and enforcement. We disclose information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We also disclose information to protect the rights, property, life, health, security and safety of us, the Services or anyone else.
Third parties at your direction or with your consent. We disclose information where you direct us to or with notice to you and your consent.

For details on your rights and choices around disclosure of your personal information, see the Your Rights and Choices section below.

5. Your Rights and Choices.

We provide a variety of ways for you to control the personal information we process about you. Please see below for details.

a. Communications.

Emails. You can unsubscribe from receiving marketing/promotional emails by following the unsubscribe instructions near the bottom of such emails. Please note that you cannot opt out of transactional messages and the opt-out is limited to the email address used and no other contact information that you provide to us.

SMS Messages. To stop receiving SMS text messages from us text STOP, CANCEL, or UNSUBSCRIBE in reply to any SMS text message sent by us.

b. Privacy Rights Requests.

Depending on your jurisdiction, you may have the right to request access to, correction of, and deletion of personal information, as well as to know certain other details of how we process and share personal information, and to limit processing and sharing. See the Region-Specific Disclosures and Rights sections at the end of this Privacy Policy for more information regarding such rights. You may submit requests to exercise such rights by submitting a data request through our form here, calling our toll-free number at (833) 980-7100, or emailing us at privacy@blacktapnyc.com.

c. Cookies/Tracking Technologies.

Cookies and Pixels. You may be able to manage cookies through your browser settings. When you manage cookies, pixels associated with such cookies may also be impacted. Please note that cookie management only applies to our website. If you use multiple browsers, you will need to instruct each browser separately. If you delete or reset your cookies, you will need to reconfigure your settings. Your ability to limit cookies is subject to your browser settings and limitations.

Preference signals. Your browser or extension may allow you to automatically transmit Do Not Track and other preference and we do not respond to such signals except where required by law.

Third party opt-out tools. Some third parties we work with offer their own opt-out tools related to information collected through cookies and pixels. To opt out of your information being used by Google Analytics, please visit https://tools.google.com/dlpage/gaoptout. We are not responsible for the effectiveness of any third party opt-out tools.

Opt-out of sales, shares, and targeted advertising. To opt-out of sales or shares (as those terms are defined by applicable law), or the processing of information for targeted advertising purposes, click “Your Privacy Choices” at the bottom of this page or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you submit an opt-out through either method we do not know who you are within our systems, and your opt-out will apply only to information collected from tracking technologies on the specific browser from which you opt-out or, where required by law, to any pseudonymous profiles we may maintain associated with your browser or device. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings. If you want the opt-out to apply to information we have about you in our systems, such as your email address, please send an email to privacy@blacktapnyc.com.

Industry opt-out tools for targeted advertising. Some of the third parties we work with participate in programs that allow you to opt-out of receiving targeted advertising from participants. To opt-out of receiving targeted advertising from participants of the Digital Advertising Alliance (“DAA”) on your browser, visit https://www.aboutads.info/choices. To opt-out of receiving targeted advertising from participants of the Network Advertising Initiative (“NAI”) on your browser, visit https://www.networkadvertising.org/choices/. If you choose to opt-out of targeted advertising through these links, you should no longer see targeted advertising from the selected participants on the browser or device from which you opted-out, but the opt-out does not mean that the participants will not process your information for targeted advertising purposes or that you will not receive any advertising. We are not responsible for the effectiveness of any third party opt-out tools. You can also adjust your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes, and to turn off location services settings to limit the use of your precise geolocation for advertising purposes.

Geolocation Information. If you have consented by enabling location access, we may receive and store your precise location information. You may use our Online Services without enabling the collection of precise location information from your device; however, this may impact your experience and/or the availability of certain content, features and functionality.

d. Matched Ads.

To opt out of us disclosing your hashed email address to third parties for Matched Ads purposes, please contact us as set forth in the Contact Us section below and specify that you wish to opt out of Matched Ads. We will remove your email address from any subsequent lists disclosed to third parties for Matched Ads purposes.

6. Children.

Our Online Services are not directed toward or intended for children under 13 years old and we do not knowingly collect personal information from such children. If you are a parent or guardian and believe we have collected personal information from a child under 13, please contact us as set out in the Contact Us section below so that we can delete it.

7. Data Security.

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect your personal information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of your personal information.

8. Data Retention.

We retain your personal information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our accounting and legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

When we no longer have a business purpose or legal obligation to retain your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information as provided herein until it is deleted. If we anonymize or aggregate/de-identify your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.

9. Data Storage and Cross-Border Transfers.

We are based in the U.S. If you are located outside the U.S., please be aware that your information may be transferred to and processed in the U.S. by us and/or our service providers or another country where we operate. Where required by applicable law, we will provide appropriate safeguards for data transfers, such as through use of standard contractual clauses. By using our Online Services or providing your personal information to us, you acknowledge and agree to the transfer of your personal information to the U.S., which data protections laws may not be as restrictive as those in the country in which you reside or are located.

10. Links to Other Websites and Services.

Our Online Services may contain links to other websites, social media sites, or other functionality not operated or controlled by THE LOOKUP by BLACK TAP, including third party authentication methods (e.g., through your Facebook, Google or Apple accounts) (“Linked Services”). Linked Services are provided for your convenience and are not endorsed by or under the control of Black Tap. We are not responsible for, and this Privacy Policy does not apply to, the privacy practices of any Linked Services, and you should review the privacy policy of each Linked Service that you visit and use.

11. Changes to this Privacy Policy.

We reserve the right to revise and update this Privacy Policy from time to time. Any changes will be effective immediately upon posting of the revised Privacy Policy as indicated by the Effective Date at the top of this page. If the changes to our information practices are material, we will provide additional notice to you, such as through email, if you have provided your email to us, or by posting a prominent notice on our website.

12. Contact Us.

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

By email: privacy@blacktapnyc.com

By mail:

THE LOOKUP by BLACK TAP Craft Burgers & Beer
529 Broome Street
New York, NY 10013
Attn: Privacy Officer

13. U.S. State Privacy Rights Supplement.

This section contains additional disclosures and rights applicable only to residents of certain U.S. states that have privacy laws and associated rights to which we are subject (“State Privacy Laws”). The exact scope of these rights may vary by state.

This Section supplements and should be read in connection with the practices set forth above in this Privacy Policy.

a. Notice at Collection.

The following provides you notice pursuant to applicable State Privacy Laws of our collection, processing, sharing, selling, targeted advertising, and retention of personal information, including in the past 12 months:

For the categories of personal information we have collected in the past 12 months, see the How We Collect Information section above.
For the categories of sources from which personal information is collected, see the How We Collect Information section above.
For the specific business and commercial purposes for collecting and using personal information, see the How We Use Information section above.
For the categories of third parties to whom information is disclosed, see the How We Disclose Information section above.
For the criteria used to determine the period of time information will be retained, see the Retention section above.

We collect, sell, or share the following categories of personal information for commercial purposes: contact identifiers, characteristics or demographics, commercial or transactions information, user-generated content, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties to whom we sell or share your personal information include, where applicable, vendors and other parties involved in cross-context behavioral advertising.

We do not knowingly “sell,” “share,” or process for “targeted advertising” the personal information of minors under 16 years of age.

If you would like to opt out of “targeted advertising” or the “sale” or “sharing” of your personal information, please see the Exercising Your Rights section below.

b. Your Rights.

Under applicable State Privacy Laws, and subject to certain exceptions, you have the following rights, which may vary by state:

Know. You can request information concerning whether we are processing your personal information as well as the following information about how we have collected and used your personal information:

The categories of personal information that we have collected.
The categories of sources from which we collected personal information.
The business or commercial purpose for collecting and/or selling personal information.
The categories of third parties with which we share personal information.
The categories of personal information that we sold or disclosed for a business purpose.
The categories of third parties to whom the personal information was sold or disclosed for a business purpose, and if you are a resident of certain states, you have the right to request a list of the specific third parties to which we have disclosed or sold or may disclose or sell your personal information.

Access. You can request a copy of the personal information that we have collected about you. If available in a digital format, you can request a copy of your personal information be provided in a portable and, to the extent technically feasible, readily usable format.

Appeal. You can appeal our denial of any request validly submitted. If we deny your request, we will inform you of the reason for denying your request and provide you with instructions on how you may be able to appeal the decision. If we deny your appeal, we will also inform you, if applicable, of any online mechanism that may be available to you to submit a complaint to the applicable attorney general.

Correction. You can ask us to correct inaccurate personal information that we have collected about you.

Deletion. You can ask us to delete the personal information that we have collected about you and/or from you.

Opt-out. Opt-out of certain processing for targeted advertising purposes. We may process personal information for targeted advertising purposes. You can opt-out of certain processing of personal information for targeted advertising purposes.

Opt-out of profiling/automated decision making. We do not use your personal information to engage in profiling or perform automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.

Opt-out of other sales of personal information. You can opt-out of other sales of your personal information.

Removal Content. California residents under the age of 19 may request to remove content.

Sensitive personal information. While we process certain categories of sensitive personal information as described herein, we do not process sensitive personal information for the purpose of inferring characteristics about consumers under the CCPA.

Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.

c. Exercising Your Rights.

You may submit requests to exercise your right to information, access, appeal, correction, or deletion as specified above by submitting a data request through our form here, calling our toll-free number at (833) 980-7100, or emailing us at privacy@blacktapnyc.com.

To exercise any of your opt-out rights including the “sell” or “sharing” (as those terms are defined by applicable State Privacy Laws) of your personal information or the processing thereof for targeted advertising purposes, click “Your Privacy Choices” at the bottom of this page or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you submit an opt-out through either method we do not know who you are within our systems, and your opt-out will apply only to information collected from tracking technologies on the specific browser from which you opt-out or, where required by law, to any pseudonymous profiles we may maintain associated with your browser or device. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings. If you want the opt-out to apply to information we have about you in our systems, such as your email address, please send an email to privacy@blacktapnyc.com.

d. Verification of Identity.

We may need to verify your identity in order to process your privacy requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law. For example, we may request your email address and send you a link to verify your email address.

We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity, locate your information in our systems, or determine that compliance would be unreasonably burdensome or technically infeasible. If we are unable to comply with all or a portion of your request, we will provide you an explanation for our decision.

e. Authorized Agent.

You can designate an authorized agent to submit requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent’s permission to do so and may verify your identity directly.

f. Financial Incentives.

We offer incentives to consumers who sign up for our email list and provide their personal information to us. The categories of personal information we collect in connection with this program include emails and names in exchange for a free shake, burger, appetizer, or other menu item.

Under California law, our loyalty program may be considered a financial incentive. We estimate the value of each consumer’s personal information associated with the loyalty program at approximately $5-$30, depending on the price of the menu item given in exchange for signing up for our email list, though this valuation may vary based on individual circumstances and business factors.

You can opt-in to this program by clicking on the corresponding advertisement on social media, or wherever such incentives are linked or made available, and entering your email and other requested personal information. You have the right to withdraw at any time by unsubscribing from our marketing emails.

g. Shine the Light.

Under California’s Shine the Light law, customers who are residents of California may request (i) a list of the categories of personal information disclosed by us to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To exercise a request, please write us at the email or postal address set out in the Contact Us section above and specify that you are making a “California Shine the Light Request.” We may require additional information from you to allow us to verify your identity and are only required to respond to requests once during any calendar year.

14. European Privacy Rights Supplement.

This section contains additional disclosures and rights applicable individuals located in the European Economic Area (“EEA”), Switzerland, or the United Kingdom (“UK”) (collectively, “Europe”) and to our Services available in Europe, pursuant to which the EU General Data Protection Regulation (“EU GDPR”), Switzerland’s Federal Act on Data Protection of 25 September 2020 and its ordinances (“FADP”), and the UK’s Data Protection Act 2018 (“UK GDPR”) (collectively referred to herein as the “GDPR”).

This Section supplements and should be read in connection with the practices set forth above in this Privacy Policy.

Personal Data: The GDPR defines “personal data” as any data that identifies or can identify a particular unique user or device, including, name, address, mobile device identifiers, precise location data, IP, cookie identifiers, and biometric data, among others.

Controller: THE LOOKUP by BLACK TAP Craft Burgers & Beer is the controller of your personal data.

Legal Basis for Processing Your Personal Data: We collect and process personal data only where we have lawful basis for doing so under the GDPR. Our lawful bases include the following:

Where the provision of personal data by you is necessary for the performance of any contractual relationship we have with you, or to allow us to take steps at your request prior to entering into a contractual relationship with you;
Where the processing of your personal data is necessary for compliance with our legal obligations in accordance with applicable laws in the EEA, the UK and/or Switzerland;
Where the processing of your personal data is in our legitimate interests (provided these are not overridden by your interests and fundamental rights and freedoms). In particular, our legitimate interests include:
1. contacting you and responding to your requests and inquiries;
2. carrying out business administration, including statistical analysis;
3. providing our Services to you;
4. carrying out reviews, surveys, analysis, and analytics in order to improve our Services and restaurants;
5. carrying out fraud prevention and detection activities; and
6. compliance with applicable laws, regulations, or codes of practice.
Where we process your personal data on the basis of your freely given, specific, informed and unambiguous consent, including where you provide consent to the receipt of marketing communications and where you consent to the use of cookies and similar technologies through our cookie banner.

For a detailed list of the categories of personal data we collect about you, see Section 2 above in our Privacy Policy.

Your Personal Data Rights: In addition to the rights set forth in Section 5 above, the GDPR grants you a number of rights with respect to your personal data. Each of your rights is outlined below:

Right to access or know: You have the right to request access to your personal data which we maintain, and if you choose, receive a copy of such data.
Right to delete or erase: You have the right to request that we delete your personal data which we maintain in certain circumstances, for example where we no longer have a legitimate interest to maintain it.
Right to correct/rectify/update: You have the right to correct personal data that we hold about you.
Right to data portability: You have the right to request that your personal data which you have provided directly to us to be provided to you or another data controller in a structured, commonly use and machine-readable format.
Right to restrict processing: Under some circumstances, you may request to restrict our use of your personal data, for example where we have a legitimate interest. You also have a right to object to our processing of your personal data for direct marketing purposes.
Right to withdraw consent: If your personal data is processed by us on the legal basis of consent, you have the right to withdraw your consent. Withdrawing your consent will not affect the lawfulness of processing we conducted prior to such withdrawal, nor will it affect the processing of your personal data conducted in reliance of a legal basis other than consent.

To exercise any of these rights, you may submit a data request through our form here, or email us at privacy@blacktapnyc.com. We will respond to your request within 30 days. We may require specific information from you to help us confirm your identity and process your request.

Complaint. If you have a complaint about how we use your personal data, we hope that you will contact us according to the below. However, you can always file a complaint with the data protection authority in your jurisdiction. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA are available at https://edpb.europa.eu/about-edpb/board/members_en. Contact details for the data protection authority in the UK is available at https://ico.org.uk/. Contact details for the data protection authority in Switzerland is available at https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html.

Personal Data Transfers: THE LOOKUP by BLACK TAP is based in the United States and our Online Services are controlled and operated by us and our third-party provides from the United States. We send information we collect from you to our secure services in the U.S. where we store and process it in accordance with our Privacy Policy. When we transfer personal data outside of the EEA, the UK, Switzerland, or to countries the EU has deemed as having inadequate protections, we take steps to make sure that appropriate safeguards are in place to protect your personal data, including, but not limited to, making such transfers in accordance with the European Commission approved Standard Contractual Clauses. In these Standard Contractual Clauses, we make commitments with respect to the privacy and security of such personal data. For more information on the Standard Contractual Clauses, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA, UK, or Switzerland.

Retention. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Cookies. For detailed information on the cookies and tracking technologies we use on our Online Services and how you can exercise your choices regarding the use of cookies and tracking technologies, please see Sections 2.b. and 5.c. above.

DPO. If you wish to contact our Data Protection Officer, please contact them at privacy@blacktapnyc.com.

Contact email address. If you have any questions for us about our Privacy Policy or this European Privacy Notice, or if you have any comments, complaints or questions about how we use or process personal data, please contact us at privacy@blacktapnyc.com.

15. Non-European Countries Privacy Rights Supplement.

If you are a resident of Bahrain, Malaysia, Qatar, Saudi Arabia, Singapore, or the United Arab Emirates for whom we collect personal data, we adhere to our privacy practices and your rights as set forth above in our Privacy Policy, including the European Supplement, as may be further supplemented by the privacy laws of such countries.

We comply with the requirements of the applicable data privacy laws for such countries as follows:

If you are a Malaysian resident for whom we collect personal data, we comply with the requirements of the Personal Data Protection Act 2010, pursuant to which you may exercise your privacy rights as set forth above in this Privacy Policy.
If you are a resident of Saudi Arabia for whom we collect personal data, we comply with the requirements of Saudi Arabia’s Personal Data Protection Law, pursuant to which you may exercise your privacy rights as set forth above in this Privacy Policy.
If you are a resident of Singapore for whom we collect personal data, we comply with the requirements of the Personal Data Protection Act 2012, pursuant to which you may exercise your privacy rights as set forth above in this Privacy Policy.
If you are a resident of the UAE for whom we collect personal data, we comply with the requirements of the Protection of Personal Data Protection pursuant to which you may exercise your privacy rights as set forth above in this Privacy Policy.
If you are a resident of Qatar for whom we collect personal data, we comply with Law No. 13 Concerning Personal Data Privacy Protection Law, pursuant to which you may exercise your privacy rights as set forth above in this Privacy Policy.