Privacy Policy

Change your cookie preferences.

Bryant Park Corporation (“BPC” “we,” “us,” or “our”) is dedicated to protecting the privacy of your personal data. We have created this Privacy Policy to explain what personal data we collect from visitors to bryantpark.org and any related websites, including the Bryant Park Shop website (the “Sites”), participants of our events and programs, and users of any other technologies, features, mobile applications, content, and other services we offer (collectively, the “Services”); how we use that information; and how we share it with others. We encourage you to read this Privacy Policy and reach out to us using the contact methods at the end of the Privacy Policy if you have any questions. We also encourage you to review our Terms of Use, which govern your use of the Services.

This Privacy Policy does not apply to third-party websites, products, or services, even if they may link to our Sites or if our Sites link to them. We recommend that you review the privacy practices of those third parties before accessing third-party websites and sharing any personal data.

If you are a visually-impaired customer, a customer who has another disability or a customer who seeks support in other language, you may access this Privacy Policy by emailing us at privacy@bryantpark.org.

Personal Data We Collect
We collect personal data when you interact with us through our Services and by other means.
How We Use Personal Data
We use personal data in various ways in accordance with applicable law.
Disclosure of Personal Data
We may disclose personal data to certain third parties, including our service providers and advertising partners.
Children’s Privacy
Our Sites are not intended for use by children under the age of 16, and we do not knowingly collect personal data about children under the age of 16.
Cookies and Other Tracking Technologies
We collect information about your use of out Sites through cookies and other tracking technologies.
Data Security and Retention
We use reasonable and appropriate technical and organizational measures to protect personal data, and will retain personal data only for as long as is necessary for the purposes set out in this Privacy Policy.
Opting Out of Promotional Communications
We explain how you may opt out of receiving promotional communications.
Data Transfers
Our Services are operated exclusively in, and your personal data may be transferred to, the United States.
Notice for Nevada Residents
We provide additional disclosures and rights to Nevada residents.
Notice for New Jersey Residents
We provide additional disclosures and rights to New Jersey residents.
Consumer Health Data Privacy Notice
We provide additional disclosures and rights related to our limited collection of consumer health data.
Changes to this Privacy Policy
Updates to this Privacy Policy become effective on the date they are posted.
Contact Us
You may contact us for comments or questions in various ways.

* * * * * *

1. PERSONAL DATA WE COLLECT

For the purposes of this Privacy Policy, “personal data” means individually identifiable information about an individual consumer collected online by the operator and maintained by the operator in an accessible form. Personal data does not include “aggregate” or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, service, or users that is not personally identifiable or from which individual identities are removed.

Personal Data You Provide to Us
We may ask you to provide us with certain information when you contact us, sign up for our promotional emails, otherwise interact with us, or register for and/or participate in our events or programs, including your name, email address, address, and phone number.

If you make a purchase on our Sites or in person, we may collect your name, physical address, billing address, email address, telephone number, and payment information such as your credit or debit card number (via Shopify, our third-party payment processor) and any other personal data that you choose to share with us on our Sites.

In limited circumstances, we may also collect personal data in connection with your use of our ice rink via ice rink incident reports including your name and contact information, age, gender, the name and contact information of any witnesses, a description of your injury, and any additional actions taken (including whether first aid was administered). Some of this information may be considered “consumer health data” as defined by some state laws. If you are a resident of Connecticut, Nevada, or Washington, we encourage you to review our Consumer Health Data Privacy Notice (Section 11) for more information.

Personal Data Automatically Collected Through Your Use of the Services
When you visit the Sites, certain information about your visit is automatically logged, which may include information about the type of browser you use, the server name and IP address through which you access the Internet, the date and time you access the site, the pages you access while on the Sites, Internet service provider information, operating system name and version, device identifiers, device type, and the language version and the Internet address of the website, if any, from which you linked directly to, or depart from, the Sites. We may also collect information about your general location using your IP address. If you access or use the Sites from a mobile device, we may collect more precise geolocation information from your mobile device . You can disable geolocation services in the settings on your mobile device. For more information, please review Section 5 (Cookies and Other Tracking Technologies).

We may also use also use live stream webcams in outdoor public areas in Bryant Park. This live web cam feed is streamed in real time by YouTube (available post-stream for twelve hours) and can be accessed by anyone via an internet connection. In some situations, your image or personally identifying traits may be temporarily displayed in web cam footage. We do not store webcam data.

Personal Data Collected from Others
We may also collect personal data from:

our service providers, including communications, analytics, payment processors, and ticketing vendors
social media and other content platforms such as Meta, X, and YouTube, if you interact with us on these platforms
other third parties, including our affiliates and marketing partners

2. HOW WE USE PERSONAL DATA

In general, we use personal information collected about you to:

manage and improve the Sites
provide and maintain the Services
provide customer service
communicate with you, including to provide you updates, notices, invitations, and other information about the Services, and respond to your questions, inquiries, and comments
enable you to register for events and reserve tickets
help establish and verify your identity
open, maintain, administer, and service accounts or memberships, including for Winter Village ticketing
process or service transactions, and send related communications
provide updates, notices, invitations, and other information about the Services
maintain the security and integrity of our systems and data
internal analytics
internal business purposes, including general business administration
audit, compliance, legal, policy, procedure, and regulatory obligations
customer claims and fraud investigation and prevention
protecting the safety of our employees and others
to complete ice rink incident reports
market our products and services
market the products and services of others
targeted advertising
any other purpose consistent with your consent and expressed preferences
as otherwise permitted or required under applicable laws, rules, and regulations

3. DISCLOSURE OF PERSONAL DATA

We may disclose personal data that we collect:

Among our brands and affiliates. We may share personal data among our various brands and affiliates to provide our Services, and for internal administrative purposes. If you prefer that we do not share your personal data with our affiliates and marketing partners, please contact us using the information in Section 13.
Our service providers. We share personal data with our service providers to provide services on our behalf, such analytics, advertising, hosting, marketing, payment processing (including Shopify), ticketing vendors (including Peek Pro), customer and technical support, insurance, and other services. These service providers have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use the information for any other purpose.
Third-party platform advertising. We may share your information with third-party platform providers, including advertising, social media, and analytics companies, who assist us in serving advertising regarding the Services to others who may be interested. We also partner with third parties who use cookies to serve interest-based advertising and content on their respective third-party platforms that may be based on your preferences, location and/or interests.
Other third parties. We may share your information with other third parties including our marketing partners and vendors .
Compliance and harm prevention. Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities.
Affiliate and business transfers and transactions. If we or our subsidiaries are involved in a merger, acquisition, asset sale, or other corporate combination, your personal data may be transferred to the acquiring or surviving entity.

Note that phone numbers and SMS consent will not be shared with third parties for marketing purposes.

4. CHILDREN'S PRIVACY

Our Sites are not directed to children under 17. We do not knowingly collect personal data from children under the age of 17, except in limited circumstances through our ice rink incident reports.

If you believe we may have inadvertently collected personal data from a child younger than 17, please contact us at privacy@bryantpark.org, and we will do our best to promptly remove such information from our records.

5. COOKIES AND OTHER TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to track the activity on the Sites and we hold certain information. Cookies are files with a small amount of data which may include unique identifier. Cookies are sent to your browser from a website and stored on your device. We also use other tracking technologies, such as beacons, tags and scripts to collect and track information and to improve and analyze our Sites.

Cookies on the Sites generally fall into the following categories:

Strictly Necessary Cookies: These are required for the Sites to work properly. They include, for example, cookies that enable you to log into secure areas.
Performance Cookies: These cookies allow us measure how visitors use the Sites, which pages are popular, and what our traffic sources are. This helps us improve how the Sites work and make it easier for all visitors to find what they are looking for.
Functionality Cookies: These cookies help us personalize content and functionality for you, including remembering changes you have made to parts of the website that you can customize, or selections for services made on previous visits.
Targeting/Advertising Cookies: These record your visit to the Sites, the pages you visit and the links you follow so we can recognize you and track your activity on the Sites and other websites you visit. These cookies are persistent cookies because they remain on your device for us to use during your next visit to the Sites.

You can modify your browser settings to decline or accept cookies and can also manage your cookie preferences here. If you decline cookies, some of our Sites’ features may not function as designed.

Analytics
We may use Google Analytics or other service providers for analytics services. These analytics services may use Cookies to help us analyze how users use the Service. Information generated by these services (e.g., your IP address and other usage information) may be transmitted to and stored by Google Analytics and other service providers on servers in the U.S. (or elsewhere) and these service providers may use this information for purposes such as evaluating your use of the Services, compiling statistic reports on the Service’s activity, and providing other services relating to Services activity and other Internet usage. You may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.

Third-Party Ad Networks
Certain companies may participate in the Digital Advertising Alliance ("DAA") AdChoices Program and may display an Advertising Option Icon for Interest-based Ads that links to an opt-out tool which allows you to exercise certain choices regarding targeting. You can learn more about the DAA AdChoices Program at https://www.youradchoices.com/ and its opt-out program for mobile apps at https://www.aboutads.info/appchoices.

In addition, certain advertising networks and exchanges may participate in the Network Advertising Initiative (“NAI”). NAI has developed a tool that allows consumers to opt out of certain Interest-based Ads delivered by NAI members' ad networks. You can learn more about opting out of such targeted advertising or to use the NAI tool here. Please be aware that, even if you are able to opt out of certain kinds of Interest-based Ads, you will continue to receive non-targeted ads. Opting out of one or more NAI or DAA members only means that those selected members should no longer under the DAA / NAI rules deliver certain targeted ads to you. This will affect this and other services, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). If your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different device or web browser(s), or use a non-browser-based method of access (e.g., mobile app), your NAI/DAA browser-based opt-out may not, or may no longer, be effective. Mobile device opt-outs will not affect browser-based Interest-based Ads even on the same device, and you must opt-out separately for each device. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

Please note that the Sites do not support Do Not Track functionality. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

Social Media Widgets
The Sites include social media features such as social media widgets that allow you to link to a social media website or share website content. These social media features may collect your IP address, which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Your interactions with these social media features are governed by the privacy policy of the company providing it.

6. DATA SECURITY AND RETENTION

The security of your personal data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. We maintain appropriate technical, administrative, and physical safeguards to help protect the security of your personal data against unauthorized access, destruction, loss, alteration, disclosure or misuse, but we cannot guarantee its absolute security. We encourage you to secure your account with a strong password and to keep your password private.

We will retain your personal data for as long as necessary for the purposes outlined in this Privacy Policy. This information will be used and retained to the extent necessary to comply with any legal obligations or policies, to resolve disputes, and/or enforce legal agreements. Personal data may also be retained for internal analytic purposes. This information is retained for a shorter period of time, unless it used to enhance security features or improve the functionality of our Sites. Our determination of precise retention periods will be based on (i) the length of time we have an ongoing relationship with you (such as whether you are a current employee or contractor) (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position, including regard to applicable statutes of limitations, litigation or regulatory investigations.

7. OPTING OUT OF PROMOTIONAL COMMUNICATIONS

We may send you emails from time to time related to news updates, online transactions, donations, events, security, or the administration of the Sites. From time to time, we may also wish to send you other messages or updates about our Services. If you do not wish to receive these communications, please send an email containing your request to privacy@bryantpark.org with the word “Unsubscribe” in the subject line. You will also have regular opportunities to opt-out by following the instructions listed on our solicitation materials.

You may also opt-out of any emails that we send for promotional purposes by clicking the “unsubscribe” links provided at the bottom of those emails . Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required to provide you with our Services or for other reasons disclosed in this Privacy Policy. You will continue to receive these emails, if appropriate, even if you unsubscribe from our optional communications.

8. DATA TRANSFERS

Our Services are operated exclusively in the United States and intended for users located in the United States. We may transfer, store, and use information we collect and maintain about you, including personal data outside of your state, province, country, or other governmental jurisdiction. For such transfers, we take the necessary measures to ensure that your personal data receives an adequate level of protection. Data protection laws in the United States may be different from those of your country of residence, and in certain circumstances, your personal data may be subject to access requests from governments, courts, law enforcement agencies or regulatory agencies in those other jurisdictions.

9. NOTICE TO NEVADA RESIDENTS

We do not “sell” personal data as that term is defined under Nevada law, but Nevada residents have the right to request to opt out of any future sale of their personal data under Nevada SB 220. If you are a Nevada resident and would like to make such a request, please contact us using the contact information provided below. You must include your full name, email address, and postal address in your email or mail request so that we can verify your Nevada residence and respond. In the event we sell your personal data after the receipt of your request, we will make reasonable efforts to comply with such a request.

10. NOTICE TO NEW JERSEY RESIDENTS

This Notice to New Jersey Residents (“Notice”) contains additional information for residents of New Jersey about our personal data practices and your privacy rights. The provisions contained within this Notice are intended to provide disclosures in compliance with the New Jersey Data Protection Act (“NJDPA”). This Notice does not apply to certain personal data that is already subject to certain federal and state regulations.

Our Personal Data Practices
The NJDPA provides rights to New Jersey residents to receive certain disclosures and access regarding collection, use, sale, and sharing of personal data. Details about what kinds of personal data we may collect or have collected, how we collect it, why we collect it, and who we may disclose it to is found in Sections 1 through 3 of this Privacy Policy.

We may “sell” personal data to third parties to participate in targeted advertising, as that term is defined by the NJDPA.

Your Privacy Rights
If you are a New Jersey resident, you have the following rights in relation to your personal data, subject to certain exceptions:

Right to know and access. You have the right to know what personal data we collect, use, disclose, and/or sell or share as those terms are defined under applicable law. You may ask us to provide you a portable copy of this information up to two times in a rolling twelve-month period.
Right to delete and erase. You have the right to request under certain circumstances that we, as well as our service providers and contractors, delete the personal data that we collect about you.
Right to correct inaccurate personal data. You have the right to request the correction of inaccurate personal data.
Right to non-discrimination.You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.
Right to opt out. You have the right to opt-out of targeted advertising, the sale of your personal data, and profiling decisions that could produce legal or similarly significant effects concerning the consumer.
Rights concerning sensitive personal data. We cannot and will not process your sensitive data (as defined by applicable law) or your sensitive data inferences, or use your personal data for certain purposes without your affirmative consent.

How to Exercise Privacy Rights
To exercise your privacy rights described above, please contact us using the information in Section 13. All requests are subject to certain exceptions under the NJDPA.

Please note that any request you submit to us is subject to an identification and residency verification process as permitted under applicable law. You may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent’s authorization by you and/or verification of the agent’s own identity. We cannot respond to your request or provide you or your agent with personal data if we cannot verify or authenticate your identity or authority to make the request and confirm that the personal data relates to you, which requires providing at minimum, your first and last name and email address. We will only use personal data provided in a verifiable or authenticated consumer request to verify your (or your authorized agent, as applicable) identity or authority to make the request.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Except where otherwise noted, we will respond to your request within forty-five (45) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary. We will deliver our written response by mail or electronically, at your option.

How to Appeal Decisions About Privacy Rights
To appeal our decision about a request that you have made, please contact us using the information provided in Section 13. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact New Jersey’s Office of the Attorney General by phone at (800) 242-5846 or by submitting a form here.

11. CONSUMER HEALTH DATA PRIVACY NOTICE

This Consumer Health Data Privacy Notice (“Notice”) provides additional information regarding the consumer health data that we collect, how we use it, what sources it is derived from, and to whom we disclose it. This Notice applies to Connecticut, Nevada, and Washington residents about whom we collect consumer health data, and is intended to provide notices in compliance with the Connecticut Data Privacy Act, Nevada SB 370, and Washington’s My Health, My Data Act.

“Consumer health data” means personal data that is linked or reasonably linkable to an individual and that identifies the individual’s past, present, or future health status or mental health status, as may be applicable.

Collection, Use, and Disclosure of Consumer Health Data
We only collect consumer health data directly from you or your guardian for the purpose of preparing ice rink incident reports in connection with accidents, health events, or emergencies. We may collect or have collected, the following consumer health data about you:

Description of your injury sustained on our ice rink
Type of aid given in response to your injury
Whether you were taken to a hospital, and if so which hospital
Any actions taken related to your injury if you were not taken to a hospital

We do not sell consumer health data. We may share ice rink incident reports that contain consumer health data with our ice rink operator, Rink Management Services Corporation, and insurance company to facilitate the resolution of the incident or as required by law. Additionally, subject to applicable law, we may disclose consumer health data in the event of a merger, acquisition, bankruptcy, or other sale or transfer of all or a portion of our assets.

Consumer Health Data Privacy Rights
Connecticut residents have the following rights in relation to your consumer health data, subject to certain exceptions:

Right to know and access. You have the right to know what consumer health data we process. You may ask us to provide you a portable copy of this information up to two times in a rolling twelve-month period.
Right to delete. You have the right to request under certain circumstances that we, as well as our service providers and contractors, delete the consumer health data that we collect about you.
Right to correct inaccurate consumer health data. You have the right to request the correction of inaccurate consumer health data.
Right to opt out. You have the right to opt out of targeted advertising, our sale of your personal data, and profiling decisions that could produce legal or similarly significant effects.
Rights concerning sensitive personal data. We cannot process your consumer health data, or use your consumer health data for certain purposes without your affirmative consent.
Right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

Nevada and Washington residents may have the following rights in relation to your consumer health data, subject to certain exceptions:

Right to know. You have the right to know what consumer health data we collect, share, or sell, as those terms are defined under applicable law. You also have the right to obtain a list of all third parties and affiliates with whom we have shared or sold your consumer health data, and an active email address or other mechanism that you may use to contact these third parties. If you are a Washington resident or otherwise protected by Washington law, you also have the right to access your consumer health data that we collect, share, or sell.
Right to withdraw consent. You have the right to withdraw consent from the collection and sharing of your consumer health data.
Right to delete. You have the right to request that we, as well as our service providers and contractors, delete the consumer health data that we collect about you.
Right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

How To Appeal Decisions About Privacy Rights

Connecticut. If you are a Connecticut resident and want to appeal our decision regarding a request that you have made, please contact us. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact Connecticut’s Office of the Attorney General by phone at (860) 808-5420 or by submitting a form here.
Nevada. If you are a Nevada resident and want to appeal our decision regarding a request that you have made, please contact us. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If your appeal is not successful, you may submit a complaint with the Nevada Attorney General here.
Washington. If you are a Washington resident or located in Washington and want to appeal our decision regarding a request that you have made, please contact us. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact Washington’s Office of the Attorney General by phone at (800) 551-4636 or by submitting a complaint here.

12. CHANGES TO THIS PRIVACY POLICY

We may modify or supplement this policy at any time, in its sole discretion, including to address changes in our data practices or relevant laws. We will let you know via email and/or a prominent notice on our Sites, prior to the change becoming effective, and update the “Effective Date” at the top of this Privacy Policy. We recommend periodically reviewing this Privacy Policy for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. CONTACT US

If you have any questions about this Privacy Policy or our information practices, please contact our membership office at privacy@bryantpark.org, or by calling 212-768-4242.