Privacy Policy

Last updated on: 12/16/2019

This Privacy Policy applies to personal information collected online by Penn Station, Inc., its affiliates, its subsidiaries and Franchisees (collectively referred to as “Penn Station”) in connection with its U.S.-based websites, microsites, mobile sites, or mobile apps that expressly adopt, display, or link to this Privacy Policy (collectively referred to as our “Sites”). It also applies to personal information Penn Station collects in connection with its pages on social media sites, such as Facebook®, Twitter®, or others (collectively referred to as our “Social Media Pages”). Our Sites are not directed at children under the age of 13, and no one under the age of 13 should provide personal information on our Sites.

This Privacy Policy answers the following questions:

  1. What information does Penn Station collect about you on our Sites and Social Media Pages?
  2. How do we use the information we collect about you?
  3. How is technology used to serve our advertisements on other sites that you visit, and what choices do you have?
  4. Does Penn Station share your information with third parties?
  5. What choices do you have over how Penn Station uses your information?
  6. How does Penn Station secure your information on its Sites?
  7. Will this Privacy Policy change?
  8. How can I contact Penn Station?

1. What information does Penn Station collect about you on our Sites and Social Media Pages?

We and/or our third-party service providers (e.g., those providing fraud or security protection) may collect information about you from a variety of sources, including when:

  • you provide us information
  • we observe or collect information through technology
  • we collect information on our Social Media Pages
  • we receive information about you from third parties and combine it with information collected on our Sites

Information You Provide

We may ask you to provide information about yourself directly to our Sites, such as the following:
  • name
  • address
  • email address
  • telephone number
  • username and password
  • birthday
  • payment card information
  • financial information associated with becoming a franchisee (e.g., net worth and liquidity)
  • information related to customer surveys
  • personal preferences
  • location information

You may also provide information similar to the above without a specific request from Penn Station. For example, in connection with filling out an online inquiry form, you are provided with a free-form space and could choose to enter any information into that space.

We may allow you to use your personal social media account on social media sites (“Personal Social Media Account”) to provide information to us when you participate in certain features on our Sites. This information may include any information you have shared on your Personal Social Media Accounts, such as the following:
  • your name
  • profile picture
  • gender
  • networks
  • user ID
  • list of friends
  • language
  • birthday
  • education
  • work history
  • address
  • interests
  • likes
  • country

It is also possible that we will be able to continue collecting this information from your Personal Social Media Accounts should the information be revised by you later.

You may choose not to provide us with certain requested information, but then you might not be able to take advantage of some of the features on our Sites.

Information Observed or Collected Through Technology

a. Navigational Information. Navigational information, such as the following, is collected by us and our third-party service providers when you use our Sites:
  • browser type and version
  • operating system
  • the Internet service provider used to access our Sites
  • IP Address
  • use of links to arrive at our Sites
  • web pages requested and viewed
  • time spent on our Sites
  • for our mobile websites and apps, technical information about the device used, such as screen size, cookie support by the device, and how images may appear
b. Location Information. Our Sites and emails include features that may require collecting different types of location information that we then use for the specific feature you have selected, such as:
  • Find a Location. Our Sites may allow you to search for Penn Station locations near you. If you access one of our Sites through a mobile device and you have enabled location-based services, specific location information may be collected for these features. If you access these features through a desktop device, you may be able to choose to have your browser provide us your location information to respond to your request. The specificity of the desktop device location information can vary depending on the browser you are using and how you are connected to the Internet.
  • Email. Our emails may use your IP address to determine the postal code where you are located when you open the email. This allows us to tailor content to you, such as a map of nearby Penn Station locations. The specificity of the location can vary depending on the device used to open our emails.
  • Mobile offers. If you consent to receive them, we may send offers to your mobile devices when you are in certain locations

c. Cookies and other similar technology. We and our third-party service providers use “cookies.” Cookies assign a unique identification to your device and are typically stored on your device by your web browser. We may also use pixel tags (also known as web beacons, web bugs, and clear GIFs) on the Sites and in emails. A pixel tag is a nearly invisible pixel-sized graphic image on a web page or in an email message.

The information we and our third-party service providers collect through cookies, pixel tags, and similar technology includes the following:
  • your interactions with our Sites and with our advertisements
  • the time of your visit to our Sites
  • confirmation when you open email from us, including the time you open the email and whether you click on any links in the email
  • sites you visit after visiting one of our Sites.

For additional information on the use of cookies for advertising, see “3. How is technology used to serve our advertisements on other Sites that you visit and what choices do you have?”.

Information Collected on Penn Station Social Media Pages

Personal information may be collected directly by us through our Social Media Pages. The type of information we would collect is similar to what is described above under “Information You Provide.” Personal information may also be collected by the social media site hosting our Social Media Pages. Our Privacy Policy does not cover the privacy and security practices of the social media sites on which Penn Station has its Social Media Pages.

Information Obtained from Third Parties

The information we collect may be combined with information from outside sources (e.g., demographic information, navigational information, additional contact information.

2. How do we use the information we collect about you?

The information we learn from you helps us personalize your experience with us and our communications to you, and helps us continually improve your experience on our Sites.

We use the information you provide, information collected through your Personal Social Media Accounts, and information collected on our Social Media Pages for things like:
  • fulfilling your orders and processing your transactions
  • improving and developing our Sites
  • servicing our customers
  • advertising and marketing, including emails and postal mail
  • personalizing your experience when visiting our Sites
  • responding to your inquiries
  • market research and surveys
  • conducting events, promotions, contests and sweepstakes
  • analytics
  • opening an online account
We use navigational information gathered through technology for determining things like:
  • which parts of our Sites are most visited or used
  • what features/products are browsed
  • how to improve and better transact business
  • the effectiveness of our Sites
  • lead generation
  • difficulties visitors may experience in accessing our Sites
  • monitoring the number of visitors to our Sites
  • average time spent on our Sites
  • any programming errors or failures on any of our Sites
We use information collected through cookies and similar technology to determine many of the same things listed for navigational information above. In addition, cookies and similar technology are used for things like:
  • personalizing your experience on our Sites
  • serving tailored ads on other sites, as described below
  • tailoring email marketing to you based on your preferences on or use of our Sites
  • determining return visitors
  • measuring the effectiveness of our advertising.

We use third-party analytics providers, such as Google Analytics, to measure traffic and usage trends, and to help us better understand your use of and interaction with our Sites and Social Media Pages. For more information on how Google uses data when you use our Sites, click here.

Similar to the navigational information described above, the social media sites where we have our Social Media Pages may provide aggregate information and analysis to us about visitors to our Social Media Pages. This allows us to better understand and analyze our user growth and general demographic information about the users of, and interaction with content on, our Social Media Pages.

3. How is technology used to serve our advertisements on other sites that you visit, and what choices do you have?

We may contract with third-party advertising companies to tailor online advertising to be directed to you on other websites. These third-party advertising companies place, use, or rely on technology, such as cookies and pixel tags, to obtain information about your interactions with our Sites as well as with other websites. This information helps us select advertising to serve to you and where to serve it based on your experience on our Sites and other sites that you visit.

For information about opt-out programs that these third-party advertising companies may participate in and the effect of opting out, click the following: DAA Opt Out click here or NAI Opt Out click here. By clicking this website, you will then leave our Site for another online site where you may specify your preferences under that opt-out program. You can also click the preference icon that may appear on some of our advertising served through these technologies. You should also note that our systems may not recognize “Do Not Track” headers from some or all browsers.

4. Does Penn Station share your information with third parties?

We do not sell, rent, or trade your personal information to unrelated third parties except as set forth below. We may share your personal information with the following:
  • our contractors, vendors, and affiliates so that they can provide information to you about their products and services
  • our contractors, vendors, franchisee and affiliates, and third-party service providers in order to perform tasks on our behalf such as the following:
    • • facilitating your transaction
    • • gift card support
    • • assisting in servicing our products
    • • providing and improving our communications with you
    • • responding to requests
    • • security and fraud prevention
    • • cloud-based and hosting services
  • when it is necessary for completing or servicing any transactions that you have authorized and, in some instances, to verify the existence or condition of your account with a financial institution, credit bureau, or other third party
  • as required to cooperate with a subpoena, search warrant, or other legally valid inquiry, court order, or other legal process, or as required or permitted by law
  • to protect the rights, property, or safety of our Sites, our users, or others, including where necessary for the establishment, exercise, or defense of legal claims
  • as necessary and appropriate to protect Penn Station from harm due to fraud or other illegal activities.

If Penn Station were ever merged with or acquired by another company, or if we acquire another business entity or are involved in a corporate reorganization or other change of control, or if we sell substantially all the assets of a division, affiliate, or subsidiary, some or all of the personal information collected about you could be shared with the acquiring or acquired company.

We may also share aggregate data about our sales, customers, traffic patterns, and other related Site information with third parties, but none of this data is connected to an individual’s personal information.

5. What choices do you have over how Penn Station uses your information?

We give you choices about the information we collect and how we communicate with you.

  1. Email: You may opt-out of our marketing emails by following the instructions listed in the email that you received. However, even if you opt-out you may still receive non-marketing emails, such as customer service communications.
  2. Location Information:
    • a. Mobile Device Location Information. Your mobile device settings may allow you to disable location-based services, which will prevent our Sites from accessing your precise mobile device location information. We recommend you review the help or user manual provided with your device for instructions.
    • b. Desktop Device Location Information. Your desktop web browser may allow you to remove permission you granted through your desktop device for our Sites to access your location information and/or completely block requests for location information. We recommend you review the help or user manual provided with your browser for instructions.
    • c. Email Location Information. Your email program may allow you to prevent the pixel tags or images in the emails you receive from us from downloading, which will also prevent our service provider from accessing your location information. You can also unsubscribe from receiving our marketing emails, as described in the “Email” section above.
  3. Postal Marketing: If you no longer want to receive marketing materials from us via regular postal mail, please fill out our online “contact us” form found here, and tell us that you want to be removed from Penn Station postal mailing list, including the postal address you wish to have removed.
  4. California Opt-Out Rights: Under California law, if you are a resident of California and have previously communicated with us or purchased something from us, you may make a written request to Penn Station about how we have shared your personal information during the prior calendar year with third parties for their direct marketing purposes. In response to your written request, Penn Station is allowed to provide you with a cost-free means to opt-out of such sharing rather than providing the information about these third parties. We are providing the opportunity to opt out, which you can do by submitting an opt-out request here, that includes your name and all of the postal addresses and email addresses that you have provided to us.

6. How does Penn Station secure your information on its Sites?

Our Sites utilize encryption technology. We also use firewalls and have implemented other reasonable technical, administrative, and physical measures designed to protect the personal information in our custody or control from unauthorized access, use, modification, and disclosure. Moreover, we regularly monitor our systems for possible vulnerabilities and attacks. While we implement these security measures on our Sites, you should be aware that 100% security is not always possible.

We may enable you to navigate to third-party websites through links on our Sites. We do this for your convenience. If it is not one of our Sites, then we don't endorse, may not have any affiliation with, do not control, and aren't responsible for those third-party websites and/or their Internet and web practices. Whether the third-party content appears within our Site environment (like a map frame) or you leave our Site for another website to view it, the terms, conditions, and privacy policies of those other websites govern your online experience. Please review their terms of service or use and privacy policies if you have any question about their practices.

7. Will this Privacy Policy change?

We may make changes to this Privacy Policy at any time, so please review it periodically. We will update the effective date of the Privacy Policy at the time a change is made.

8. How can I contact Penn Station?

If you have questions or concerns with respect to our Privacy Policy, you can email us at [email protected] or fill out an online “contact us” form available here, making sure to include your question, name, and contact information.
Penn Station signature cheesesteak, fries and lemonade