Kiosk Privacy Policy

 

Effective Date: 26/05/2026

This Kiosk Privacy Policy describes Areas’ practices in connection with information that Areas collects through kiosks used for placing orders at our restaurants and retail establishments in airports and travel plazas throughout the United States (“Kiosks”). “Areas” is defined as the entities listed on Schedule A of this Kiosk Privacy Policy and may also be referred to as “Company,” “we,” “us”, or “our.” We appreciate the opportunity to serve you and want you to understand our commitment to maintaining the privacy of your personal information. We are pleased, therefore, to provide you with this notice of our Kiosk Privacy Policy. Other privacy policies could apply depending on how you interact with us.

TABLE OF CONTENTS

1. What Information We Collect
2. Where We Get Your Personal Information
3. How We Use Your Personal Information
4. How We Disclose Your Personal Information
5. Security of Data
6. Notice to California Residents Under the California Consumer Protection Act (CCPA)
7. Other California Privacy Rights
8. Other U.S.-State Specific Privacy Rights
9. Children’s Privacy Rights
10. Changes To This Privacy Policy
11. Contacting Us

1. WHAT INFORMATION WE COLLECT

We may collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“Personal Information”) for various purposes, including to provide and improve our service.

  • Identifiers and Demographic Data. This includes data such as names, phone numbers, and email addresses.
  • Commercial Information. Including items which you have purchased from us, and other related financial information (such as payment information).

    • In the preceding 12 months, we have collected the following categories of Personal Information: names, phone numbers, and commercial information.

    Personal Information does not include publicly available information, i.e., information that is lawfully made available from federal, state, or local government records. Personal Information does not include information that is deidentified or aggregate consumer information.

    2. WHERE WE GET YOUR PERSONAL INFORMATION

    We collect your Personal Information from you.
    We will only use and disclose your Personal Information collected through our Kiosks in accordance with this Privacy Policy.

    3. HOW WE USE YOUR PERSONAL INFORMATION

    We use information that you provide to us, including any Personal Information, to:

  • To provide and maintain our services, including notifying you about the status of your order / purchases;
  • For any reason for which you consent or direct us to use your Personal Information;
  • To detect, prevent, protect and address the security or integrity of our businesses; and
  • As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our Affiliates; (f) to protect our rights, privacy, safety or property, or that of you, our Affiliates or others; and (g) to allow us to pursue available remedies or to limit the damages that we may sustain.

    • 4. HOW WE DISCLOSE YOUR PERSONAL INFORMATION

    Within our company and group of companies:

    Because we have operations in many different locations, we may transfer your information from one legal entity to another or from one location to another in order to accomplish purposes listed in this Notice (including those for which we retain service providers as described below). We will transfer your personal information in a manner that is consistent with applicable legal requirements.
    With third parties:

    We may disclose Personal Information to service providers, and sometimes third parties, for various purposes. To this end, we may disclose Your Personal Information to the following entities for the purposes associated with each entity as noted below:

  • To our third-party service providers, who provide services such as credit card processing and point of sale (POS) services. We obligate these service providers not to use or disclose the information they receive from us except as necessary to perform services on our behalf or to comply with legal requirements;
  • To our subsidiaries and affiliated entities for the same purposes as outlined in Section 3;
  • To a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceeding); and
  • As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our subsidiaries and affiliates; (f) to protect our rights, privacy, safety or property, or that of you, our subsidiaries and affiliates or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

    • Areas USA operates restaurants and retail locations under other brand names as a licensee in airports throughout the United State (for example, ABC Café & Bar, XYZ Restaurant, etc.). Personal Information is not shared with the licensors unless it is aggregated and/or anonymized beforehand.

    5. SECURITY OF DATA

    We maintain administrative, technical and physical safeguards to protect your personal information. The security of your data is important to us but remember that no method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. The safety and security of your information also depend on you. You are responsible for taking steps to protect your Personal Information against unauthorized use, disclosure, and access. We will never request credit card information through email.

    6. NOTICE TO CALIFORNIA RESIDENTS UNDER THE CALIFORNIA CONSUMER PROTECTION ACT (CCPA)

    Residents of California have rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA) relating to Personal Information that is collected or disclosed. The rights in this section apply solely to California residents, and do not apply to individuals living elsewhere. The following rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply. Any terms used in this notice and policy that are defined in the CCPA have the same meaning when used in this Policy.

  • Right to Access. You have the right to access Personal Information which we may collect or retain about you. If requested, we shall provide you with a copy of your Personal Information which we collect as permitted by the CCPA. You also have the right to receive your Personal Information in a structured and commonly used format so that it can be transferred to another entity (“data portability”).
  • Right to Know. You have the right to request that we disclose the following about your Personal Information, as defined by the CCPA:

    • The specific Personal Information we may collect;
    The categories of Personal Information we may collect;
    The categories of sources from which we may collect your Personal Information;
    The business purpose(s) for collecting or sharing your Personal Information;
    The categories of Personal Information we may disclose for business purposes; and
    The categories of third parties to whom we may share your Personal Information.

  • Right to Opt-Out/Not Sell My Personal Information. We do not shell or share your Personal Information.
  • Right to Limit Sensitive Personal Information. We do not collect or process Sensitive Personal Information for the purpose of inferring characteristics.
  • Right to Deletion. In certain circumstances, you have the right to request the erasure of your Personal Information, subject to several exceptions, including our legal obligations to maintain the information. Upon verifying the validity of a deletion request, we will delete your Personal Information from our records, and instruct any service providers or contractors to delete your information, when applicable.
  • Right to Correction. If we maintain inaccurate Personal Information about you, you have the right to request the correction of that Personal Information. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate Personal Information.
  • Exercising Your Rights. If you are a California resident, you can exercise any of your rights as described in this Policy and under applicable privacy laws by using the contact information provided in this Policy. We will not discriminate against you for exercising such rights.

    • How to Submit a Request. To submit a request to know, delete or correct, you, or an authorized agent, may:

  • Call us at tel: (305)-267-8510; or
  • Email us at Guest.Experience@areas.com

    • Prior to honoring your request, we will make a reasonable attempt to verify your identity. You may designate an authorized agent to make a request to disclose, correct or to delete your personal information by providing the authorized agent written permission to do so and by verifying your own identity with us. We will not discriminate against you if you take advantage of these rights.

    7. OTHER CALIFORNIA PRIVACY RIGHTS

    California’s “Shine the Light” law (California Civil Code section 1798.83) gives customers who are California residents the right to ask, once a year, (1) what personal information was disclosed to third parties for those third parties’ direct marketing purposes in the prior calendar year; and (2) the identities of the companies with whom the information was shared. The terms “customers” and “personal information” have the meaning given by the Shine the Light (California Civil Code Sec 1798.83).

    We do not share personal information, as defined in California Code Civil Section 1798.83, with third parties for their direct marketing purposes absent your consent. If you are a California resident, you may request information about our compliance with California’s Shine the Light law by sending us a written request to Guest.Experience@areas.com (Attention: CA Privacy – Shine the Light Law Request). Any such written request must include “California Shine the Light Law Request” in the first line of the description and include your name, street address, city, state, and zip code. We are only required to respond to one Shine the Light law request per customer per year, and we are not required to respond to requests made by means other than through this email address and mailing address. Further note that “Shine the Light” rights and CCPA rights are provided under different statutes and must be exercised separately.

    8. OTHER U.S. STATE-SPECIFIC PRIVACY RIGHTS

    To the extent you are a resident of certain U.S. states with comprehensive state privacy laws, such as Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may be eligible for one or more of the following consumer rights where authorized by applicable U.S. state privacy laws. This section provides an overview of these rights (note that some U.S. state privacy laws use different terminology) which we honor where required by applicable law. California residents may review our California Notice at Collection and Privacy Disclosures, above.

  • Right to Access. Subject to certain conditions set forth in the applicable U.S. state privacy laws, you have the right to know and see what personal information we have collected about you and receive a copy of such information in a portable format, purposes for which we collect your personal information, recipients of your personal information to whom we disclose or share, which in some states may include categories of personal information collected, categories of sources of collection, business or commercial purposes for data processing, and categories of 3rd parties with whom we disclose that information.
  • Right to Correct. Subject to certain conditions and exceptions set forth in the applicable U.S. state privacy laws, you have the right to request that we correct any inaccurate personal information that we have collected about you.
  • Right to Delete. Subject to certain conditions and exceptions set forth in the applicable U.S. state privacy laws, you have the right to request that we delete the personal information we have collected about you.
  • Right to Opt-Out. Subject to certain conditions set forth in the applicable U.S. state privacy laws, you have the right to opt out of targeted advertising, profiling, the sale or sharing of your personal information, to the extent such instances occur (as defined under applicable state laws). We do not have actual knowledge that we sell personal information of minors under 16 years of age.
  • Right to Non-Discrimination. You have the right not to be discriminated against for exercising any of your rights under any applicable U.S. state privacy laws.
  • Right to Appeal. To the extent the applicable U.S. state privacy laws provide such rights, you may appeal our denial to act on your consumer rights under the applicable state privacy laws within a reasonable time. We will respond within designated period for responding to U.S. data subject requests and may exercise the right to extend this response period (to the extent authorized by applicable state privacy laws). If your jurisdiction allows you to file a complaint with the state’s Attorney General’s Office regarding any concerns with the result of your appeal request, you may do so by using the following links as may be applicable to you. You may submit a complaint to the Attorney General’s Office by selecting the appropriate link: Virginia (www.oag.state.va.us/consumer-protection/index.php/file-a-complaint), Colorado (coag.gov/file-complaint), Connecticut (portal.ct.gov/AG/Common/Complaint-Form-Landing-page), and Texas (https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint).
  • Right to Limit Use and Disclosure of Sensitive Personal Information. If any U.S. state privacy laws classify your personal information we collect as “sensitive personal information,” we use such data reasonably necessary to provide and perform our Services as requested by you or as otherwise permitted by law.

    • If you have questions or concerns regarding this Section or would like to exercise your consumer rights (to the extent available under applicable U.S. state privacy laws), please use the “Contact Us” details at the end of this Privacy Policy.

    9. CHILDREN’S PRIVACY

    The Kiosks are not intended for usage by anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from children without verification of parental consent, we take steps to remove that information from our systems.

    10. CHANGES TO THIS PRIVACY POLICY

    You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

    11. CONTACTING US

    If you have any questions about this Privacy Policy, please contact us at Guest.Experience@areas.com.