Hudson Yards Experiences

Política de privacidad

Effective: April 2026

Hudson Yards Experiences (“HYE,” “we,” “our,” or “us”) is providing this privacy policy (the “Privacy Policy”) to explain how we collect, use, disclose, protect, and otherwise process your personal information. This Privacy Policy applies to personal information that we collect when you visit our websites located at https://www.edgenyc.com/ and https://www.peaknyc.com/ and any other website that links to this Privacy Policy (the “Sites”), use our products or services, attend our events, apply for employment with us, and when you visit our physical locations (collectively, the “Services”).

By using our Services or reviewing this Privacy Policy, you acknowledge the collection, use, processing, and disclosure practices and other activities as described in this Privacy Policy.

When we use the term “personal information” in this Privacy Policy, we mean any data or information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person or household or any other data or information that constitutes “personal data”, “personal information”, or similar terms as defined under applicable privacy laws.

About us

HYE is made up of different entities, affiliated with KRE HYOD Manager LLC, and offers services and products under different brand names, including Edge and Peak. Please visit the Sites to learn more about HYE and the Services.

How we collect personal information

We may collect personal information when you provide it directly to us,  automatically or passively when you visit the Sites, and from third parties or our affiliates in certain circumstances. When HYE collects or otherwise processes personal information about you, we are generally considered a “data controller”. HYE may also, in certain circumstances, be considered a “data processor” when accessing or processing personal information on behalf of another business.

We may collect personal information directly from you when you:

• Request information from us via email or in person at our locations;
• Sign up or request to be placed on our newsletter or other marketing communications;
• Register and create an account on our Sites;
• Sign up for or use our Wi-Fi at one of our locations;
• Purchase tickets, products, or Services from us;
• Apply for employment with us;
• Post user-generated content where permitted on our Sites;
• Participate in a sweepstakes or contest sponsored or co-sponsored by us; and/or
• Otherwise interact with the Sites, our Services, or our representatives.

What personal information we collect

Personal information you provide to us

We may collect the following categories of personal information directly from you:

• Contact information, such as your name, email address, home or business address, and phone number;
• Account and login information, such as your username, password, security questions, and basic details about your account;
• Payment information and purchase history. Please note that we use third-party payment processors when we ask you to submit your credit card number, billing address, shipping address, and other information necessary to complete a purchase;
• Marketing preferences and interests;
• Audio and visual information, such as photographs and security camera footage;
• Geolocation information, such as when you access our Wi-Fi;
• Social media login information, such as profile picture, identification information, and other information that the platform makes available to us for authentication and account creation purposes;
• Employment application and HR information, such as government-issued identification numbers, birth date, educational information, or prior employment, military or veteran status, marital status, if applicable;
• Biometric information may be collected through our service providers in connection with photo capture and redemption services. We may also collect voice recordings during customer service interactions; and
• Other information you may choose to provide directly to us.

Personal information automatically collected

When visiting our Sites or accessing our Wi-Fi at our physical locations, we and/or our service providers will automatically collect certain information. This information may be generated by your computer, laptop, tablet, mobile phone, or other device and may include your IP address or other unique identifier, browser type, operating system, hardware and mobile network information; referring and exit web pages and URLs, the areas within our Sites that you visit and your activities there; and your device location or other geolocation information.

We may use information that we automatically collect for targeted advertising purposes. This means that a third party will place a cookie on your browser, or use a web beacon, to collect personal information about your use of our Sites and Services and provide advertising to you about products and services tailored to your interests, which may appear on our Sites or on other websites you visit. For more information, please see the “Cookies, pixels and other technologies” section below.

Personal information collected from other sources

We may collect personal information about you from our affiliates and marketing partners, and we may use that personal information to send marketing and promotional materials, or targeted advertising, including information relating to our products, services, sales, or promotions, or those of our affiliates and marketing partners.

We may also collect personal information about you from social media or other publicly available sources. When you interact with our Sites through various social media networks, such as when someone “Likes” us on Facebook, follows us, or shares our content on Google, Facebook (Meta), X, or other social networks, we may receive personal information that you permit the social network to disclose to third parties. The information we receive is dependent on your privacy settings with the social network. You should always review the privacy settings on third-party websites, social media networks, and services before sharing information and/or linking or connecting them to other services.

How we use your personal information

We may use personal information for one or more of the following purposes:

• to provide, support, personalize, and develop our Sites and Services;
• to process your requests, purchases, transactions, returns and payments, and prevent transactional fraud;
• to create and verify user accounts;
• to contact you or respond to your requests or inquiries;
• to provide you with updates and information about our Services;
• to display your comments on the Sites;
• to facilitate, operate, manage, secure, and maintain the Services;
• to screen, identify, and evaluate candidates for employment;
• for our, and our affiliates’, marketing purposes, including to send marketing and promotional materials;
• to conduct analytics and personalize your experience when visiting our Sites, or in and around our locations (if you have given permission for location sharing);
• to deliver targeted advertising relevant to your interests;
• to comply with relevant laws or regulations, or to respond to subpoenas or court orders served on us or to bring and defend legal or regulatory claims;
• to respond to requests from government agencies, including law enforcement authorities; or
• to protect against malicious, deceptive, fraudulent, or illegal activity (including violation of our policies and terms and conditions), security incidents, and harm to the rights, property, or safety of HYE and our users, employees, or others.

If you fail to provide personal information

If you fail to provide certain personal information when requested, we may not be able to enter into or maintain our business relationship with you or perform the contract we have entered into with you.

Which legal basis we use to process your personal information

The laws in certain jurisdictions require companies to disclose the legal ground they rely on to process personal information. To the extent those laws apply, we generally rely on the following legal bases to process personal information for the purposes described in the “How we use your personal information” section above: our legitimate business interests (including, but not limited to, where we process your personal information for internal administrative purposes, direct marketing, or conducting market research), contractual necessity (for example, to provide our Services to you), to comply with our legal obligations, or with your consent.

How we disclose your personal information

We may disclose your personal information to the following categories of third parties:

• Service providers. We may use service providers to perform services on our behalf, such as: (i) creating, hosting, maintaining, administering, and updating the functionality of the Sites (including chat functionality); (ii) billing or processing credit cards, and/or electronic or manual payments; (iii) managing our customer relationships (e.g. customer relationship management (CRM) vendors); (iv) IT and other technology support; (v) providing Wi-Fi services at our physical locations; (vi) fraud prevention, spam/malware protection, and other similar purposes; (vii) other business functions relevant to or in connection with our Services.
• Website analytics or advertising partners. We permit third parties to use cookies, web beacons, and similar tracking technologies on our Sites. These technologies allow us to provide analytics or targeted advertising services. To learn about your choices regarding this disclosure of your personal information please see the “Cookies, pixels and other technologies” sections below.
• Affiliates and business partners. We may disclose your personal information to our affiliates, joint ventures, and business or marketing partners.
• In connection with a sale, merger, acquisition, bankruptcy, or other transaction involving the transfer of our business. We may disclose your personal information to a subsequent owner, co-owner, or operator of our business, or in connection with a potential or actual sale, merger, acquisition, bankruptcy, liquidation, or other transaction in which an affiliate or third party acquires all or any part of our business, shares, and/or assets, including during the due diligence process.

To the fullest extent permitted by applicable law, we may also disclose your personal information when required by law or if we believe in good faith that doing so is necessary or appropriate to: (i) protect or defend the rights, safety, or property of HYE, its affiliates, third parties, or the general public (including through the enforcement of this Privacy Policy); (ii) comply with legal and regulatory obligations (e.g., pursuant to law enforcement inquiries, subpoenas, or court orders); or (iii) respond to claims that any content violates the rights of a third party. To the fullest extent permitted by applicable law, we reserve the right to make or not make such disclosures, and to contest or not contest any requests for such disclosures.

We are based in the United States. The use and sharing of your personal information, as described in this Privacy Policy, may involve international transfers, including transfers to countries which do not have data protection laws as strict as those in your jurisdiction of residence.

Where required by law, we will ensure that there are appropriate agreements in place with the recipients of your personal information or other appropriate safeguards for the transfer of your personal information. You can contact us using the details set out in the “Contact us” section below for more information.

How we protect your personal information

We implement administrative, technical, and physical safeguards to protect your personal information. You should be aware, however, that “perfect security” does not exist, and there is always the risk that unauthorized persons may access or use your personal information. As a result, while we strive to protect your personal information, we cannot guarantee the security of personal information you transmit to us, and you do so at your own risk.

How long we store your personal information

We will only retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and in accordance with our data retention policies, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements, resolving disputes, or otherwise as required or permitted by law.

To determine the appropriate retention period for personal information, we consider various factors such as:

• The amount, nature, and sensitivity of the personal information.
• The potential risk of harm from unauthorized use or disclosure of your personal information.
• The purposes for which we process your personal information and whether we can achieve those purposes through other means.
• The applicable legal requirements.

In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use that information without further notice to you. When your relationship with us ends, we will retain and, where required, securely destroy your personal information in accordance with applicable laws and regulations.

Cookies, pixels and other tracking technologies

We and our third-party partners and service providers (including advertising networks, analytics providers and social media platforms) use pixels, cookies, and other similar tracking technologies to gather information when you interact with us on our Sites. Tracking technology can be used to provide advertising to you about products and services relevant to you which may appear on our Sites, on other websites, or in our communications to you.

Promotional messaging

We may use your personal information (such as contact information) for the purpose of providing promotional or marketing messages. We may be required to ask for your consent to provide certain promotional or advertising messages. You can unsubscribe from promotional communications by following the instructions in the applicable message. If you have any questions about unsubscribing from our messages, please contact us as described in the “Contact us” section below.

“Do Not Track” signals

Like many websites, our Sites do not use or respond to “Do Not Track” signals in your web browser.

Global Privacy Control

Our Sites recognize the Global Privacy Control (GPC) opt-out preference signal. If you enable the GPC on your browser, we will treat it as your request to opt-out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising or targeted advertising purposes for the browser or device that communicates the signal.

Your rights and choices

Depending on your residence and applicable law, you may have some or all of the rights listed below relating to your personal information.

Right of access. You may have the right to obtain: (i) confirmation of whether, and how, we are processing your personal information; (ii) information about the categories of personal information we are processing, the purposes for which we process your personal information, and information as to how we determine applicable retention periods; (iii) information about the recipients or categories of recipients with whom we may share your personal information; and (iv) a copy of the personal information we hold about you.

Right to obtain copies or request transfer. You may have the right to obtain a copy of the personal information you have provided to us in a structured, commonly used, portable, or machine-readable format, or to request the transfer of your personal information to another person.

Right to correct. You may have the right to request that we correct or amend any inaccurate or incomplete personal information we hold about you.

Right to deletion. You may have the right to request that we delete your personal information.

Right to restriction. You may have the right to request that we limit certain types of processing of your personal information.

Right to object or opt-out. You may have the right to object or opt-out of certain processing activities. For example, you may have the right to opt-out of the use of your personal information for targeted advertising purposes, or the “sale” or “sharing” of your personal information with third parties, and to object to being subject to a decision that is based solely on automated processing (where a decision is made about you using an electronic system without human involvement), which significantly impacts your rights.

Right to withdraw (or manage) consent. To the extent you have provided consent for the processing of your personal information, you may have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal. Where consent is revoked, we will not further process that personal information unless required or otherwise permitted by applicable law.

Right to complain. You may also have the right to complain to us and/or to the relevant data protection supervisory authority. A list of global data protection supervisory authorities is available here.

You may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights.

These rights are subject to various limitations and exceptions and are not available to individuals in all jurisdictions. If any of the rights listed above are not applicable to you under the law that governs your personal information, we have discretion in providing you with such rights.

You may have the right to appeal our decisions regarding your rights requests if we do not respond to your requests or do not take action regarding your requests.

To exercise any applicable rights, please refer to the “Contact us” section below.

Children’s privacy

HYE recognizes the importance of children’s safety and privacy. The Sites are not intended for use by children under the age of 16. We do not request, or knowingly collect, any personal information from children under the age of 16. If you are the parent or guardian of a child under 16 who you believe has provided their information to us, please refer to the “Contact us” section below to request the deletion of that information.

Links to other websites and services

Our Services may include links to third-party websites, such as to our third-party payment processing partner. Except where we post, link to, or expressly adopt or refer to this Privacy Policy, this Privacy Policy does not apply to, and we are not responsible for, any personal information practices of third-party websites, online services, or the practices of other third parties. None of the links on the Sites should be deemed to imply that HYE endorses or has any affiliation with the links.

Contact us

If you wish to exercise any of your rights and choices as described in this Privacy Policy, please submit a request using the Data Subject Request Form here. You may also submit a request by contacting us in any of the following ways:

• Call us toll-free at +1-332-216-3126
• Email us at [[email protected]]

Before processing certain requests, we may need to verify your identity. In certain circumstances, we may decline your request, including where we are unable to verify your identity or locate your personal information in our systems. We may also decline your request if we determine that we are not legally required to fulfill it.

You may also choose to accept or reject the use of cookies, pixels, and similar tracking technologies by managing the settings here:

 Cookie Settings

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will change the date at the beginning of this Privacy Policy to reflect the date it was last updated. All changes shall be effective from the date of publication unless otherwise provided.

NOTICE TO CALIFORNIA RESIDENTS

This notice provides additional information for California residents under the California Consumer Privacy Act of 2018, as amended (together with its implementing regulations, the “CCPA”). The CCPA provides consumers who reside in California with certain rights with respect to their personal information. This notice only applies if you are a resident of California as determined in accordance with the CCPA and with respect to personal information that is subject to the CCPA. Information required to be disclosed to California residents under the CCPA regarding the collection and processing of their personal information that is not set forth in this notice is otherwise set forth in the Privacy Policy. For purposes of this notice, “personal information”, “sell”, and “share” each have the meaning defined under the CCPA.

Categories of personal information we collect

We may collect (and in the past 12 months may have collected) the categories of personal information described in “What personal information we collect” above. This personal information may include each of the categories listed in Cal. Civ. Code §1798.140(v)(1)(A)-(L).

Purposes for collecting personal information

We may collect (and in the past 12 months may have collected) your personal information for the purposes described in “How we use your personal information” above and may include the business purposes specified in Cal. Civ. Code 1798.140(e).

Disclosure of personal information

We may disclose (and in the past 12 months may have disclosed) your personal information as described in the “How we disclose your personal information” section above.

We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the regulations implementing the CCPA.

“Sale” or “Sharing” of personal information

We may “sell” or “share” (and in the past 12 months may have “sold” or “shared”) personal information that we collect from our Sites or in connection with our Services, including identifiers, Internet or other similar network activity, and inferences drawn from other personal information. We may “sell” or “share” this personal information with advertising networks, marketing partners, and other business partners for purposes of marketing or cross-context behavioral advertising.

We do not have actual knowledge that we “sell” or “share” personal information of consumers under the age of 16.

Retention of your personal information

We will only keep your personal information for as long as reasonably needed to fulfill the purposes for which such personal information was collected and in compliance with applicable laws and regulations. To determine the appropriate retention period for each of the categories of personal information we collect, we consider various factors such as: (i) how long the personal information is needed to provide our Services and otherwise operate our business; (ii) the type of personal information collected; and (iii) whether we are subject to a legal, contractual, or other obligation to retain the personal information (e.g., mandatory data retention laws, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation or disputes).

Rights under the CCPA

Subject to certain limitations (including but not limited to our compliance with U.S. state, local, and non-U.S. laws, rules, and regulations), California residents may have the following rights under the CCPA:

Deletion Rights: You may have the right to request that we delete any of your personal information that we retain, subject to certain exceptions. We will notify you in writing if we cannot comply with a specific request and provide an explanation of the reasons.

Disclosure and Access Rights: You may have the right to request that we disclose to you certain information regarding our collection, use, disclosure, and sale of personal information specific to you over the last twelve (12) months. Such information may include:

• The categories of personal information we collected about you;
• The categories of sources from which the personal information is collected;
• Our business or commercial purpose for collecting such personal information;
• The categories of third parties to whom we disclose the personal information;
• The specific pieces of personal information we have collected about you; and
• Whether we disclosed your personal information to a third party, and if so, the categories of personal information that each recipient obtained.

Correction Right: You have the right to request that we correct any inaccuracies in the personal information that we retain, subject to certain statutory exceptions. We will notify you in writing if we cannot comply with a specific request and provide an explanation of the reasons.

No Discrimination: We will not discriminate against you for exercising your rights under the CCPA, including by denying service, suggesting that you will receive or charging different rates for services, or suggesting that you will receive or providing a different level or quality of service to you.

How to Exercise Your Rights: To exercise any of your rights under the CCPA, or to access this Notice to California Residents in an alternative format, please submit a request using any of the methods set forth in the “Contact us” section in the Privacy Policy.

We will contact you to confirm receipt of your request under the CCPA and request any additional personal information necessary to verify your request. We verify requests by matching personal information provided in connection with your request to information contained in our records. Depending on the sensitivity of the request and the varying levels of risk in responding to such requests (for example, the risk of responding to fraudulent or malicious requests), we may request your login access credentials, if applicable, in order to verify your request.

You may designate an authorized agent to make a request under the CCPA on your behalf, provided that you provide a signed agreement verifying such authorized agent’s authority to make requests on your behalf, and we may verify such authorized person’s identity using the procedures above. If we request that you verify your request and we do not receive your response, we will pause processing your request until such verification is received.

Please refer to the “Contact us” section in the Privacy Policy for any questions.

Shine the Light Law

California Civil Code Section 1798.83, known as the “Shine the Light” law, permits our customers who are California residents to request a list of what personal information (if any) we disclosed to third parties for their direct marketing purposes in the last calendar year and the names and addresses of any such third parties. We currently do not, and have not in the preceding calendar year, disclosed any personal information to third parties for their independent direct marketing purposes.