PRIVACY NOTICE

Last updated on April 3, 2026

This Privacy Notice describes the information collection, use, retention, and sharing practices of Nobu Restaurant Group LLC and its affiliates (“NOBU”, “we”, “us”, “our”) when you interact with us through our website, www.noburestaurants.com (the “Website”), mobile application (the “App”), or other digital products on which this Privacy Notice appears (collectively, the “Services”).

Please note that this Privacy Notice does not apply to NOBU locations operated by NOBU licensees. Please contact or visit the applicable licensee’s website to learn about its collection and use of personal information.

As used in this Privacy Notice, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person. Personal information includes “personal data”, as such term is defined under applicable data privacy laws.

OUR ROLE IN DATA PROCESSING

To the extent the General Data Protection Regulation (“GDPR”), Regulation (EU) 2016/679, and the UK Data Protection Act 2018 (“DPA”) apply (collectively referred to in this Privacy Notice as “EU or UK data protection laws”), the entity responsible for the collection and use (processing) of your personal information is NOBU Restaurant Group LLC, the data controller. You can contact NOBU Restaurant Group LLC at privacy@noburestaurants.com or by mailing a letter to:

Privacy at Nobu

Nobu Restaurants

40 West 57th St, Suite 320

New York, NY 10019

PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG

We collect personal information as you engage with our Services.

Contact us.

When you contact us, we collect, from you, your personal identifiers (name, email address) and any additional information you choose to include in your message. We use this information to respond to your questions or inquiries and to troubleshoot where necessary. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you.

Request a receipt.

When you request a receipt, we collect, from you, your personal identifiers (name, email address, telephone number), sensitive financial information (credit card type, name on credit card, last four digits of credit card number, expiration date), commercial information (estimated amount charged, name of NOBU restaurant, date of visit), and any additional information you choose to include in your message. We use this information to identify and send you a copy of the requested receipt. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you.

Make a purchase.

When you make a purchase, we collect from you or from our third-party payment processor, your personal identifiers (name, email address, physical address) and your sensitive financial information (credit/debit card number, security code, expiration date). We use this information to process your payment for the selected product; however, we do this using the services of a third-party vendor and only get access to card type, and the last four digits of the card. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. We retain this information for up to seven years to satisfy legal, accounting, and audit requirements. Note that if you purchase a gift for someone other than yourself, we will also collect, from you, the personal identifiers (name, mailing address) of the intended recipient and any additional information you choose to include in your message to the recipient. We use this information to ship the gift to the intended recipient. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract.

Place an order for delivery or pickup.

When you place an order for pickup, we collect, from you, your personal identifiers (name, phone number) and your commercial information (items ordered). To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. Please note that if you place an order for delivery or pickup using the services of a third party (e.g., Uber Eats, DoorDash, etc.), the collection and use of your personal information will be subject to the terms of the applicable third party’s Privacy Policy.

Submit a press inquiry.

When you submit a press inquiry, we collect, from you, your personal identifiers (name, email address, telephone number), professional or employment-related information (name of publication, website, location), and any additional information you choose to include in your message. We use this information process and communicate with you about your inquiry. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you. We retain this information for one year.

Book a reservation.

When you book a reservation online, you will be redirected to OpenTable, a third-party reservation booking provider. OpenTable’s collection and use of personal information is governed by its own Privacy Policy. However, if you indicate you wish to receive marketing emails from NOBU upon completing your reservation, we will add you to our marketing email list. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within those communications. Please see the “Subscribe to our newsletter section” for more information.

Subscribe to our newsletter.

When you subscribe to our newsletter we collect, from you, your personal identifiers (name, email address). We use this information to send you news and updates about our products and services. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within each email we send to you. However, we will continue to send you service-related messages. We, through our service provider, use tracking pixels to determine whether you open emails, the time of opening, information about the device you use (including IP address), whether you interacted with the email, the topic of the email, whether it was delivered, sender and recipient addresses. We use this information to:

1. measure the effectiveness of our communications and make them more attractive, particularly by improving email subject lines;
2. limit the frequency of sending or stop it, ensuring emails continue to reach their recipients;
3. detect and analyze suspected fraud;
4. personalize communications based on your interest in received emails and interaction with them. This personalization includes: adapting message content / adjusting sending frequency or communication channel / optimizing campaigns based on reactions (e.g., adjusting email subject lines); and
5. offer tailored content or advertisements on other websites, applications, or communication channels.

You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within each email we send to you.

Interact with us on social media.

When you interact with our social media pages on social networking sites, such as Facebook, X, LinkedIn, Instagram, YouTube, and TikTok (each a “Social Media Page” and collectively, “Social Media Pages”), we collect basic engagement metrics and use it to tailor content and marketing and use it to improve user experience as set forth in this section. Please note that we do not control the use or storage of the information that you have posted to any social networking sites. This information is collected and processed by the social networking sites for their own purposes, including marketing. For more information on how Facebook, X, LinkedIn, Instagram, YouTube, and TikTok use your personal information, please see Facebook’s Privacy Policy, X’s Privacy Policy, LinkedIn’s Privacy Policy, Instagram’s Privacy Policy, YouTube’s Privacy Policy, and TikTok’s Privacy Policy.

Facebook, X, LinkedIn, Instagram, YouTube, and TikTok (the “Social Networks”) process personal information in the USA where the laws may be less protective than in your country of residence. For example, in accordance with U.S. laws, in certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in other countries may be entitled to access your personal information.

Social Media Pages.

When interacting with our Social Media Pages, we collect, from you, your personal identifiers (first and last name) and visual information (photograph (i.e., profile picture)), as well as any information that you provide when interacting with our Social Media Pages (e.g., commenting, sharing, and rating). We use this information to advertise our products, for events and invitations, and to communicate with users via the contribution and comment function. To the extent the EU or UK data protection laws apply, the legal basis for the processing is our legitimate interest in advertising our products via our Social Media Pages and communicating with users, customers, and interested parties. Because our Social Media Pages are publicly accessible, when you use them to interact with other users, for example by posting, leaving comments or liking or sharing posts, any personal information that you post in them or provide when registering can be viewed by others or used by them as they see fit. The content posted on our Social Media Pages or other public areas of social networking Sites can be deleted in the same way as other content that you have created. If at any time you want content posted to be deleted, please email your request to us at privacy@noburestaurants.com.

Community Management.

We collect, from you, your contact, including "likes", shares, messages and other interactions with the content, in order to analyze and evaluate how our content is perceived, to learn from it, and to improve our public relations efforts. To the extent the EU and UK data protection laws apply, the legal basis for analyzing your content is our legitimate interest in organizing, facilitating, and optimizing communication with our users and the general public. If you object to this processing of your personal information and believe you have an overriding interest, you can submit your objection via email to privacy@noburestaurants.com.

Page Insights.

When you visit our Social Media Page, the applicable Social Network records your IP address and other information about your usage behavior on our Social Media Page. The Social Network collects this information through trackers in the browser of your device or via the advertising ID (IDFA from Apple or GAID from Google), when you open the Social Network app through your mobile device (e.g., smartphone or tablet). The Social Network uses this information to provide us with statistical evaluations of the use of our Social Media Page. We receive this information directly from Social Network, in the form of aggregated data and anonymous statistics regarding certain data points, such as: age; gender; city/country; device; inquiries from fans about other Social Media Pages; region and language settings of the users; proportion of men and women; the number of people reached; clicks on posts, "likes” and reactions; comments and shared content; and total video views. We use this information to analyze and improve the advertising campaigns we conduct through our Social Media Pages. We do not collect or process any other personal information in connection with Social Network “Page Insights” function.

To the extent the EU and UK data protection laws apply, we are joint controllers with the Social Network for this processing. For the purpose of the EU and UK data protection laws, the legal basis for this processing is our legitimate interest in statistical evaluation of users on our Social Media Page for the improvement and adjustment of our advertising measures based on the information collected. If you object to this processing of your personal information and believe you have an overriding interest, you can submit your objection via email to privacy@noburestaurants.com.

We do not retain this information independently.

For information on data protection and the storage period on the Social Network in relation to its Insights function, see the Social Network privacy policy linked above. It has been contractually agreed with the Social Network that the Social Network is responsible for providing you with information about the processing for Page Insights.

Information Processed Solely by Social Networks.

We do not know how the Social Networks use personal information for their own purposes, how long the personal information is stored on the Social Networks or whether the Social Networks’ data is passed on to third parties. If you are currently logged in to a Social Network as a user, the Social Network automatically collects, through trackers on your device, your Social Network ID or a link between the Social Network ID and the advertising ID (IDFA from Apple or GAID from Google) when you open the Social Network app through your mobile device (e.g., smartphone or tablet). This enables the Social Network to understand that you have visited our Social Media Page along with other social media pages that you have clicked on, whether you clicked on Social Network buttons integrated into Sites that partner with the Social Network, and other online interactions that report user data to the Social Network. Based on this data, content or advertising tailored to you can be offered. You can find more information about the personal information collected by Social Networks, how it is used and how long it is stored by visiting the Social Network’s privacy policies, linked above.

Interact with the Services.

In addition to the personal information you provide directly to us, we also collect information from you automatically as you use our Services via cookies, pixels, web beacons, and similar tracking technologies. If you are located in the EU or UK, these trackers won’t deploy (i.e. collect your information) unless you provide your consent. To the extent the EU or UK data protection laws apply, the legal basis for the placement and access of strictly necessary cookies is the performance of a contract. These cookies are necessary to provide the Services to you. To the extent the EU or UK data protection laws apply to placement of non-essential cookies on the Services, the legal basis for this processing is your consent. You may withdraw your consent at any time with effect moving forward by visiting Your Privacy Choices. Renew or change your cookie consent

 

We use essential, performance, marketing, and analytics cookies to automatically collect certain internet and other electronic network activity information when you interact with the Services. This includes things like IP address, location, device type, browser type and version, operating system, usage data (e.g. the pages of the Services that you visit, the time and date of your visit, the time spent on those pages), unique device identifiers, and other diagnostic data. We use this information to: (i) track you within the Services; (ii) enhance user experience; (iii) conduct analytics to improve the Services; (iv) prevent fraudulent use of the Services; (v) diagnose and repair technical errors, and, in cases of abuse, track and mitigate the abuse; and (vi) market to you more effectively across different web pages and social media platforms based on your browsing habits and history.

As mentioned above, if you are located in the EU or UK, these trackers won’t deploy (i.e.

collect your information) unless you provide your consent. In the US, our use of third-party marketing and analytics cookies may be considered a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out, please visit Your Privacy Choices. Renew or change your cookie consent

In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. Please note, if you opt out of targeted advertising cookies, your opt-out will be specific to the web browser, app, or device from which you accessed the opt-out. If you use multiple browsers or devices, you will need to opt out of each browser/device that you use. If we detect an opt-out preference signal, we will honor it.

Certain third-party marketing and analytics cookies to note on the Services include the following:

Google Analytics.

We use Google Analytics to collect information on your use of the Services for its improvement. To collect this information, Google Analytics installs cookies on your browser or reads cookies that are already there (for more information about how Google collects and uses the information see here). Google Analytics also receives information about you from applications you have downloaded or services that you use that partner with Google. Google’s ability to use and share information collected by Google Analytics about your visits to the Sites or to another application which partners with Google is restricted by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on, which can be accessed here. You can also adjust your Ad Settings or change settings in your Google My Activity if you are signed into your Google Account. To opt out, please visit Your Privacy Choices. Renew or change your cookie consent

 

Google Tag Manager.

Google Tag Manager is a tag management system to manage tags used for tracking and analytics on the Services. Tags are small code elements that, among other things, are used to manage traffic and visitor behavior and to test and optimize the Services. We utilize Google Tag Manager to manage and organize all third-party tags on the Services and to control when those tags are triggered. You can view more information about Google Tag Manager’s privacy practices here.

Meta Pixel.

We use Meta Pixel to serve you ads on your social media based on your browsing behavior. Meta Pixel sets a cookie on your device that allows your behavior to be tracked after you have been redirected to the Services by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes and to provide targeted advertising. We do not have access to the information collected through Meta Pixel. The information collected via Meta Pixel is stored and processed by Meta. Meta may link this information to your Facebook account and use it for its own promotional purposes in accordance with Facebook's Data Usage Policy. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings. To opt out, please visit Your Privacy Choices. Renew or change your cookie consent

 

Aggregate and anonymize data.

We deidentify and/or aggregate the data we collect and use and share it, in deidentified and/or aggregated form, for benchmarking purposes, advertising, and internal analytics. We maintain and use this data in deidentified form. We will not attempt to reidentify the data unless it is necessary to determine whether our deidentification processes satisfy applicable data protection laws.

NOBU will also use the personal information we collect as described in this section to comply with the law, to efficiently maintain our business, and for other limited circumstances as described in HOW WE SHARE YOUR PERSONAL INFORMATION.

DATA RETENTION

Unless otherwise stated in this Privacy Notice, we retain your personal information (i) for as long as you maintain an account with us, (ii) until we receive a valid request to delete the information, in which case we will delete or anonymize the information, (iii) until we no longer need the information to fulfill the purposes for which we collected it, or (iv) until the information is no longer needed for a service provider or contractor’s operational purpose(s).

We use the following criteria to determine whether it remains reasonably necessary to retain your personal information for such purposes or a service provider or contractor’s operational purpose(s): (i) whether there is a retention period required by statute or regulations; (ii) the existence of actual or threatened litigation for which we are required to preserve the information; (iii) the statutes of limitations for potential legal claims; and (iv) generally accepted best practices in our industry, including in relation to the safety and security of our properties and assets. When we determine that it is no longer reasonably necessary to retain your personal information for one or more disclosed operational purposes based on the above criteria, we will delete or anonymize your personal information.

HOW WE SHARE YOUR PERSONAL INFORMATION

General Sharing

NOBU shares personal information as described in the PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG section, and generally in the following instances:

Within NOBU.

We share your personal information within NOBU for the legitimate business purposes of efficiently and effectively providing the Services, such as accounting and customer service support. Access to your personal information is limited to those on a need-to-know basis. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in providing the Services more efficiently.

In the event of a corporate reorganization.

In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, including without limitation bankruptcy or liquidation, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in carrying out our business operations or, if required by law, consent.

For legal purposes.

We share personal information where we are legally required to do so, such as in response to court orders, subpoenas, governmental/regulatory bodies, law enforcement or legal process, including for national security purposes. We may share your information with our legal advisors or auditors to establish, protect, or exercise our legal rights or as required to enforce our terms of service or other contracts or to defend against legal claims or demands. We also share this information with third parties as necessary to: detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; to comply with the requirements of any applicable law; or to comply with our legal obligations. To the extent the EU or UK data protection laws apply, the legal basis for this processing is compliance with the law or our legitimate interest in complying with non-EU data protection laws to which we are subject.

With your consent.

Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at privacy@noburestaurants.com.

All of the above categories exclude text messaging originator opt-in data and consent.

We will not share this information with any third parties except for service providers that assist us in the delivery of text messages.

Sharing in the Last Twelve (12) Months

For a business purpose.

In the preceding twelve (12) months, NOBU has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors:

We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; web hosting; cloud storage; data analysis; customer service; email delivery; event management; reservation booking; marketing; external auditors; payment processing; takeout order fulfillment and delivery; shipping; and similar services.

We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Services and platform errors.

We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Services.

All of the above categories exclude text messaging originator opt-in data and consent.

We will not share this information with any third parties except for service providers that assist us in the delivery of text messages.

Sale of Personal Information

In the preceding twelve (12) months, NOBU has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Your Privacy Choices. Renew or change your cookie consent

 

YOUR INFORMATION CHOICES

You have the following choices with respect to your personal information:

Correct or View Your Information.

You may access your account to correct or view certain personal information you have provided to us, and which is associated with your account.

Opt Out of Google Analytics.

To prevent your personal information from being used by Google Analytics, you can download the Google Analytics opt-out browser, which can be accessed here.

Opt Out of Meta Pixel.

You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings.

Opt Out of Advertising Cookies.

All session cookies are temporary and expire after you close your web browser. In addition to opting out of certain trackers in Your Privacy Choices. Renew or change your cookie consent

persistent cookies can be removed by following your web browser’s directions. To find out how to see what cookies have been set on your computer or device, and how to reject and delete the cookies, please visit: https://www.aboutcookies.org/. Please note that each web browser is different. To find information relating to your browser, visit the browser developer’s Sites and mobile application. If you reset your web browser to refuse all cookies or to indicate when a cookie is being sent, some features of our Sites may not function properly. If you choose to opt out, we will place an "opt-out cookie" on your device. The "opt-out cookie" is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for essential cookies. If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. By clicking on the “Opt-Out” links below, you will be directed to the respective third-party Sites where your computer will be scanned to determine who maintains cookies on you. At that time, you can either choose to opt out of all targeted advertising, or you can choose to opt out of targeted advertising by selecting individual companies who maintain a cookie on your machine. Our use of third-party marketing and analytics cookies is considered a sale/sharing under certain state privacy laws and is also considered to be what is known as interest-based advertising (IBA). To opt out of the sale/sharing through cookies and IBA across various platforms, please visit the Digital Advertising Alliance’s YourAdChoices program tools (Your Ad Choices) or visit one of the links below.

 

Network Advertising Initiative (NAI) Opt-Out: https://www.networkadvertising.org/managing/opt_out.asp

Digital Advertising Alliance (DAA) Opt-Out: https://optout.aboutads.info

European Union (EU) /European Economic Area (EEA) Opt-Out: http://www.youronlinechoices.eu

In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent.

Opt Out of Email Tracking.

You can disable this tracking by blocking automatic loading of images in your email.

Opt Out of Marketing Communications.

You may opt out of receiving marketing emails from us by clicking the “unsubscribe” link provided at the bottom of each email we send. Please note that we will continue to send you notifications necessary to the Services.

YOUR DATA SUBJECT RIGHTS

Individuals in the European Union and United Kingdom are entitled to certain rights under General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018 (“DPA”), respectively. To the extent these laws apply to our processing of your personal information, you are entitled to the following rights:

Right to access.

For any of the processing described above, you have the right to ask us for copies of your personal information. However, this right has some exemptions, which means you may not always receive all the personal information we process. Applicable exemptions may include the management information exemption (data that we process for management forecasting or management planning about a business or other activity), or certain instances of ongoing or prior negotiations with the requestor, among others.

Right to rectification.

For any of the processing described above, you have the right to ask us to rectify personal information you think is inaccurate or incomplete.

Right to erasure.

When we use cookies and other trackers or send you marketing emails, you have the right to request erasure of your personal information that we are not obligated to keep in some cases (also known as the right to be forgotten). For example, you can request us to delete your personal information if: (i) we no longer need the data for the purpose it was collected for, (ii) we process the data based on your consent and you revoke your consent, (iii) you object to our processing based on legitimate interest (and we do not have an overriding legitimate interest), or (iv) you object to our processing for direct marketing purposes. We may not be able to immediately erase your personal information if we have a lawful reason or a legal or contractual obligation to retain the personal information or continue the processing.

Right to restrict processing.

For any of the processing described above, if you believe that your personal information is inaccurate, that our processing is unlawful, or that we do not need your personal information for a specific purpose, you have the right to request that we restrict the processing of this personal information. You also have the possibility to request that we stop processing your personal information while we assess your request.

Right to object to processing.

You have the right to object to our processing of your personal information when the legal basis for the processing is pursuant to our legitimate interests by referencing your personal circumstances. This may apply, for example to processing in connection with our social media pages. If you object to our processing, you may also request us to restrict processing of your personal information while we make our assessment.

Right to data portability.

You have the right to ask that we transfer the personal information you gave us from one organization to another or give it to you. However, this right only applies when: (i) you have provided your personal information to us; (ii) the legal basis for the processing is your consent or for the performance of a contract; and (iii) the processing is carried out by automated means. You can invoke this right for the processing of the information we automatically collect from you as you interact with the Sites via cookies, pixels, and similar tracking technologies.

Right to lodge a complaint.

If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office at: https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/y or accessicoinformation@ico.org.uk at their helpline on 0303 123 1113. If you are located in the EU, you have the right to lodge a complaint with the relevant Supervisory Authority.

To exercise these rights, please email privacy@noburestaurants.com.

US STATE PRIVACY RIGHTS

Residents of California, Connecticut, and Texas are entitled to certain rights under their respective state’s comprehensive data privacy law. If you are a resident of one of these states, you are entitled to the following rights:

Right to Access/Know.

Unless an exception applies, you have the right to (i) receive confirmation of whether we process your personal information, (ii) receive a list of categories of personal information we have collected, used, disclosed, and sold about you, (iii) receive a list of the categories of third parties to which we have disclosed your personal information, and (iv) access your personal information. If you are a resident of Connecticut, you also have the right to (a) receive a list of specific third parties to which NOBU has sold your personal information, and (b) know whether we derived any inferences about you using your personal information and whether we process your personal information for purposes of profiling to make a decision that produces any legal or similarly significant effect on you. However, NOBU does not process your personal information in a manner that gives rise to the right described in subsection (b) above.

Right to Deletion.

You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking to be deleted, we would not be able to delete the information until we are legally permitted to delete it.

Right to Correct.

You have the right to correct inaccurate personal information that we collect or maintain.

Right to Opt Out.

You have the right to opt out of the processing of your personal information for the purposes of: (i) targeted advertising; (ii) profiling in furtherance of any automated decisions that produce a legal or similarly significant effect; and (iii) the sale or sharing of your personal information to third parties. We do not have actual knowledge that we sell, share, profile, or process for purposes of targeted advertising the personal information of individuals under the age of 18.

Right to Data Portability.

You have the right to request that we transfer your personal information to another organization or give it to you. If you exercise this right, we will provide a copy of your personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another organization.

Right to Non-Discrimination / Non-Retaliation.

You have the right not to receive discriminatory treatment (or in California: not to be retaliated against) in the processing of your information if you choose to exercise your privacy rights. Such discriminatory treatment may include but is not limited to (i) the denial of goods or services, (ii) being charged a different price or rate, or (iii) receiving a different level of quality in goods or services.

Right to Limit Use of Sensitive Personal Information (California residents only).

You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, NOBU does not process personal information in a manner that gives rise to this right.

Right to Appeal (Connecticut & Texas residents only).

You have the right to appeal our refusal to take action on your request to exercise your other rights. In order to request an appeal to our refusal please email us at privacy@noburestaurants.com, subject line: “Appeal My Consumer Request.” We will review the appeal and notify you of our response. If we still refuse to take action on your request, you have the right to file a complaint with applicable state regulator, as follows:

For Connecticut residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Connecticut Attorney General here.

For Texas residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Texas Attorney General here.

Exercising Your Privacy Rights

If you are a resident of one of the states identified above and wish to exercise your privacy rights, you may submit a request by emailing us at privacy@noburestaurants.com. To opt out of the sale or sharing of your data through cookies or the processing of your personal information for purposes of targeted advertising, please visit Your Privacy Choices. Renew or change your cookie consent

. If we detect an opt-out preference signal (such as the Global Privacy Control signal) communicated from your (or your authorized agent’s) browser or device, we will treat the opt-out preference signal as a valid request to opt out of the sale/sharing of your personal information as it pertains to that browser or device (including any associated profile information). If known, we will also apply the opt-out request to any offline sale or sharing of personal information.

 

When submitting a request to know/access, correct, or delete your personal information, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for know/access, correction, or deletion requests with the information provided, we may ask you to provide additional information, including your telephone number, the date and time of your most recent reservation, and/or the last four digits of your credit card number.

Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

NEVADA RESIDENTS

If you are a consumer in the State of Nevada, you may request to opt-out of the current or future sale of your personal information. We do not currently sell any of your personal information under Nevada law, nor do we plan to do so in the future. However, you can submit a request to opt-out of future sales by contacting us at privacy@noburestaurants.com regarding the sale of such information. Please include “Opt-Out Request Under Nevada Law” in the subject line of your message.

CROSS-BORDER TRANSFERS

If you are located in the EU or UK and visiting NOBU’s EU/UK-based Services (i.e.

Nobu Old Park Lane):

Some of the service providers that we engage for the provision of our Services (as described above) are located in the United States, which has not been found by the European Union nor the United Kingdom Secretary of State to provide an adequate level of protection of personal information, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the European Union or United Kingdom. However, we have implemented appropriate safeguards to ensure that any personal information transferred to these service providers remains protected in accordance with the EU and UK data privacy laws. As part of this, we contractually obligate our service providers to adhere to the terms of the European Commission’s Standard Contractual Clauses (and UK Addendum), which requires them to protect the personal information they process from the EEA in accordance with the EU and UK data protection laws.

DO NOT TRACK

We do not respond to Do Not Track requests.

Do Not Track is a preference you can set in your web browser to inform websites and mobile applications that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

INFORMATION SECURITY

We implement appropriate technical and organizational security measures, such as access controls and encryption, to protect the personal information that we collect and maintain from unauthorized access, destruction, use, modification, or disclosure. However, no security measure or modality of data transmission is 100% secure, and we are unable to guarantee the absolute security of the personal information we have collected from you.

CHILDREN’S PRIVACY

The Services are not intended for anyone under the age of eighteen (18).

We do not knowingly collect the personal information of anyone under the age of eighteen (18). If we learn that we have collected or received personal information from individuals under the age of eighteen (18), we will delete the personal information. If you believe we have personal information on individuals under the age of eighteen (18), please contact us at the contact information provided below.

CHANGES TO THIS PRIVACY NOTICE

We may amend this Privacy Notice in our sole discretion at any time.

If we do, we will post the changes to this page and will indicate the date the changes go into effect. We encourage you to review our Privacy Notice to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on the Services and/or via email, and either obtain your opt-in consent (if required) or provide an opportunity to withdraw your consent.

CONTACT US

If you have any questions about this Privacy Notice or need to access this Privacy Notice in an alternative format due to having a disability, please contact us by email at privacy@noburestaurants.com (and use “Privacy Inquiry” in the subject line).