Privacy Policy

Effective Date: 12/1/2025

1. Introduction

ReverenceNYC Hospitality Group – RoastedDuck, LLC (“we,” “our,” or “us”), operating Subculture Dining and Reverence Provisions, values your trust and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you interact with our restaurants, product offerings, and online services.

We comply with applicable privacy laws, including the General Data Protection Regulation (GDPR) for EU residents and the California Consumer Privacy Act (CCPA/CPRA) for California residents.

2. Information We Collect

We may collect the following categories of personal information:

  • Identifiers: Name, email address, phone number, billing/shipping address.

  • Commercial Information: Purchases, reservations, and payment details (processed securely via third-party providers).

  • Internet/Technical Data: IP address, browser type, device information, and usage patterns.

  • Communications: Emails, inquiries, and feedback you send us.

3. Email Collection & Marketing

  • We collect email addresses when you sign up for newsletters, promotions, or updates.

  • Emails are used to send you information about new menu items, events, and product offers.

  • You can opt out at any time by clicking “unsubscribe” in our emails.

  • We do not sell or rent your email address to third parties.

4. Security & CrowdStrike Integration

  • We use CrowdStrike cybersecurity solutions to monitor and protect our systems against unauthorized access, malware, and data breaches.

  • CrowdStrike’s role is strictly to safeguard our infrastructure; it does not use your personal information for marketing or sales.

  • Your data is encrypted and stored securely, with continuous monitoring to prevent threats.

5. Sharing of Information

We may share your information only with:

  • Service Providers: Payment processors, delivery partners, email marketing platforms, and IT/security vendors (including CrowdStrike).

  • Legal Authorities: When required by law or to protect our rights.

We do not sell personal information.

6. GDPR Rights (EU Residents)

If you are located in the European Union, you have the following rights under GDPR:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Correct inaccurate or incomplete data.

  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data.

  • Right to Restrict Processing: Limit how we use your data.

  • Right to Data Portability: Receive your data in a structured, machine-readable format.

  • Right to Object: Object to processing of your data, including for marketing purposes.

  • Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at [Insert Contact Email].

7. CCPA/CPRA Rights (California Residents)

If you are a California resident, you have the following rights under CCPA/CPRA:

  • Right to Know: Request details about the categories and specific pieces of personal information we collect, use, and disclose.

  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.

  • Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.

  • Right to Correct: Request correction of inaccurate personal information.

  • Right to Limit Use of Sensitive Personal Information: Restrict use of sensitive data to necessary business purposes.

  • Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

California residents may designate an authorized agent to make requests on their behalf.

8. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and maintain security.

9. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the U.S. We ensure appropriate safeguards are in place for such transfers, consistent with GDPR requirements.

10. Cookies & Tracking Technologies

We may use cookies, pixels, and similar technologies to improve your browsing experience, analyze site traffic, and deliver targeted advertising. You can manage cookie preferences through your browser settings. EU residents will be asked for consent before non-essential cookies are placed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the revised effective date.

12. Contact Us

If you have questions or concerns about this Privacy Policy or wish to exercise your rights, please contact us at:

ReverenceNYC Hospitality Group – RoastedDuck, LLCEmail: info@roastedduck.nyc 119 West 72nd st. ste 261 NY NY 10023