Effective Date: July 2026

​

Kythira NP, Cengo Suites, and our affiliates, subsidiaries, and restaurants (collectively, "Kythira," "we," "us," or "our") respect your privacy and are committed to protecting your Personal Information.

​

This Privacy Policy explains how we collect, use, disclose, retain, and protect Personal Information when you:

• Visit our websites;

• Purchase products or services online;

• Make reservations or purchases;

• Interact with our restaurants;

• Use our Wi-Fi or other digital services;

• Visit our social media pages that we control;

• Receive or respond to our emails;

• Contact us by phone, email, or other means.

 

Throughout this Privacy Policy, these websites, social media pages, emails, products, services, and digital offerings are collectively referred to as the "Services."

​

If you are a California resident, please review the California Residents section below for additional disclosures and information about your rights under California law.

 

Acknowledgment and Consent

By accessing or using our Services, purchasing our products or services, or otherwise interacting with us, you acknowledge that you have read and understand this Privacy Policy and consent to our collection, use, disclosure, and retention of your Personal Information as described herein.

If you do not agree with this Privacy Policy, please do not use our Services.

Your use of our Services is also governed by our Terms of Use, which are incorporated into this Privacy Policy by reference. Capitalized terms not defined in this Privacy Policy have the meanings assigned to them in the Terms of Use.

 

What Information Does This Privacy Policy Cover?

This Privacy Policy applies to Personal Information, meaning information that identifies you or can reasonably be linked to you.

We may collect the following categories of Personal Information:

Identifiers

• First and last name

• Email address

• Postal address

• Telephone number

• Customer or account number

• IP address

• Device identifiers (including mobile device IDs)

• Cookies

• Pixel tags

• Beacons

• Mobile advertising identifiers

 

​

Commercial Information

Information about products or services you purchase, as well as your purchasing or consumption history and preferences.

Payment Information contained on checks you send to us. Payment card transactions are processed by third-party payment processors. We do not collect or store your full payment card number, although we may receive tokenized payment information.

​

Demographic Information

Information such as your age and family status.

​

Online Activity Information

Information about how you interact with our websites, emails, online advertisements, and digital services.

​

Call Recordings

If you contact our customer service by telephone, your call may be recorded.

​

Professional or Employment Information

Information such as your occupation or employer.

​

Location Information

Location information derived from your IP address or, with your permission, your mobile device.

​

Inferences

Information derived from the categories above to create a profile reflecting preferences, interests, characteristics, or behavior.

Personal Information does not include information that has been anonymized or aggregated so that it can no longer reasonably identify you.

 

​

Third-Party Payment Processing

Payments made through our Services may be processed by independent third-party payment providers.

When you make a payment, your payment information may be collected directly by the payment processor rather than by Kythira and will be governed by that provider's privacy policy. We are not responsible for the privacy or security practices of these third-party payment providers.

 

​

Children Under 16

Our Services are not directed to children under the age of 16, and we do not knowingly collect Personal Information from anyone under 16 years of age. If you are under 16, please do not provide us with any Personal Information.

 

​

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or Services.

The most current version will always be posted on our website and will become effective upon posting unless otherwise stated.

Your continued use of our Services after changes become effective constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically for any updates.

​

 

How We Collect Personal Information

We collect Personal Information from a variety of sources, including information you provide directly to us, information collected automatically when you use our Services, and information we receive from third parties.

​

Information You Provide Directly

You may provide Personal Information when you:

• Complete forms on our website or other digital platforms.

• Purchase products or services.

• Make a reservation.

• Subscribe to newsletters or marketing communications.

• Contact us with questions or customer service requests.

• Use our digital services, including our guest Wi-Fi.

• Report a problem with our website, products, or services.

• Visit one of our restaurants or place an order by phone.

• Register for an event.

• Participate in surveys or research.

• Apply for employment opportunities.

• Enroll in or participate in a loyalty or rewards program.

• Communicate with us by email, telephone, social media, or other means.

 

We may also retain records of your correspondence and communications with us.

​

Information We Collect Automatically

When you visit or interact with our Services, we may automatically collect certain information through technologies such as cookies, web beacons, pixel tags, mobile advertising identifiers, server logs, and similar technologies.

This information may include details about how you use our website, interact with our emails, browse our digital services, and engage with online advertising. For more information, please see the Cookies and Other Automated Data Collection Technologies section below.

​

Information We Receive from Third Parties

We may receive Personal Information about you from other sources, including:

• Third-party websites and mobile applications that share information with us or our advertising partners.

• Data providers that supply demographic or consumer information.

• Joint marketing partners.

• Online advertising and analytics providers.

• Fraud prevention and identity verification services.

• Payment processors.

• Reservation, fulfillment, and delivery service providers.

• Social media platforms, including information you make available through those platforms.

• Friends, family members, or other individuals who make reservations or otherwise provide information about you.

 

We may combine information received from these sources with information we collect directly from you in accordance with this Privacy Policy.

 

​

How We Use Personal Information

We use Personal Information for a variety of business and operational purposes, including to:

• Provide, operate, maintain, and improve our Services.

• Process purchases, reservations, payments, and event registrations.

• Deliver products and services you request.

• Respond to your inquiries and provide customer support.

• Send confirmations, receipts, service updates, and other administrative communications.

• Send newsletters, promotional offers, and other marketing communications, where permitted by law.

• Personalize your experience with our Services.

• Administer contests, sweepstakes, promotions, and similar programs.

• Analyze website usage, customer preferences, and business performance.

• Develop new products, services, and features.

• Detect, investigate, and prevent fraud, security incidents, and other unlawful activity.

• Protect the rights, safety, property, and security of Kythira, our customers, and others.

• Comply with applicable laws, regulations, legal processes, and governmental requests.

• Enforce our Terms of Use and other agreements.

• Carry out any other purpose disclosed at the time your Personal Information is collected or with your consent.

 

We may also use Personal Information to support analytics, targeted advertising, and other marketing activities as described in the Cookies and Other Automated Data Collection Technologies section of this Privacy Policy.

 

 

How We Share Personal Information

We may share your Personal Information with the following categories of recipients when necessary to operate our business, provide our Services, comply with legal obligations, or protect our rights.

​

Service Providers

We may share Personal Information with third-party service providers that perform services on our behalf, including:

• Website hosting

• Payment processing

• Reservation and order fulfillment

• Information technology and technical support

• Data analytics

• Identity verification

• Customer service

• Marketing and email communications

• Survey administration

• Advertising services

• Auditing

• Other business support services

 

These service providers are authorized to use your Personal Information only as necessary to provide services for us or as otherwise permitted by law.

 

Promotions and Sweepstakes

If you choose to participate in sweepstakes, contests, giveaways, or similar promotions, we may share your Personal Information with third-party sponsors and administrators responsible for operating those programs.

Some promotions may have separate privacy terms. We encourage you to review those terms before participating.

 

Social Media

If you connect your account with a social media platform or choose to share content through social media features available on our Services, your Personal Information may be shared with:

​

• Your social media platform;

• Other users of that platform; and

• Individuals with whom you choose to share content.

 

The use of your information by social media platforms is governed by their own privacy policies, not this Privacy Policy.

If you do not want this information shared, do not connect your social media accounts to our Services or use our social sharing features.

 

Business Transactions

If Kythira is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other business transaction, your Personal Information may be transferred as part of that transaction or in anticipation of such a transaction.

 

Legal Requirements and Protection of Rights

We may disclose Personal Information when we believe doing so is necessary or appropriate to:

• Comply with applicable laws or legal obligations.

• Respond to lawful requests from courts, government agencies, or other public authorities.

• Enforce our Terms of Use or other agreements.

• Protect the rights, property, safety, or security of Kythira, our employees, customers, or others.

• Detect, investigate, or prevent fraud, security incidents, or illegal activity.

• Establish, exercise, or defend legal claims.

 

SMS Communications

If you provide your mobile phone number for SMS communications, we will not sell, rent, or share your phone number with third parties for their own marketing purposes without your consent.

 

De-Identified and Aggregated Information

We may use and disclose information that has been de-identified, anonymized, or aggregated so that it can no longer reasonably identify you. We may use or share this information for any lawful business purpose.

 

​

Cookies and Other Automated Data Collection Technologies

When you visit or interact with our Services, we and our service providers may automatically collect information using cookies, web beacons, pixels, mobile advertising identifiers, server logs, and similar technologies ("Cookies").

These technologies may help us...

• remember your preferences;

• improve website performance;

• personalize your experience;

• support analytics;

• deliver targeted advertising if we choose to use those technologies.

​

The information collected may include your interactions across our websites and, where permitted by law, across third-party websites, applications, and devices.

​

How We Use Cookies

We use Cookies to:

• Remember your preferences and settings.

• Improve the performance and functionality of our Services.

• Maintain the security and operation of our website.

 

Targeted Advertising

We and our advertising partners may use Cookies and similar technologies to display advertising based on your interests and online activities over time and across websites, applications, and devices.

These advertisements may appear on third-party websites, mobile applications, social media platforms, email communications, or other digital channels.

​

To learn more about interest-based advertising or to opt out of certain targeted advertising in the United States, please visit:

• https://youradchoices.com/control

• https://optout.networkadvertising.org

 

Do Not Track Signals

Some web browsers offer a "Do Not Track" feature that allows you to indicate your preference regarding online tracking.

Because there is currently no consistent industry standard for responding to these signals, our Services do not respond to browser-based Do Not Track requests.

​

Please note that disabling Cookies may affect the functionality of certain features of our Services, and some tracking technologies may continue to operate even if you adjust your browser settings.

 

 

Security

We maintain administrative, technical, and physical safeguards designed to protect the Personal Information we collect from unauthorized access, use, alteration, disclosure, or destruction.

While we take reasonable steps to safeguard your information, no method of transmitting or storing information over the Internet is completely secure. As a result, we cannot guarantee the absolute security of your Personal Information, and you provide information to us at your own risk.

 

Your Privacy Choices

You have choices regarding how we use your Personal Information.

​

Marketing Communications

If you no longer wish to receive marketing emails from us, you may unsubscribe at any time by clicking the unsubscribe link included in our emails or by contacting us directly.

​

Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to your purchases, reservations, account activity, or other interactions with our Services.

 

Accessing or Updating Your Information

If you would like to review, correct, update, or request deletion of the Personal Information you have provided to us, please contact us using the information provided in the Contact Us section.

Where required by law, we will respond to your request in accordance with applicable legal requirements.

 

​

California Residents

If you are a California resident, this section describes how we collect, use, disclose, and share your Personal Information, as well as the rights available to you under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CPRA").

This section applies only to California residents and supplements the remainder of this Privacy Policy.

 

Categories of Personal Information We Collect

During the previous twelve (12) months, we have collected the following categories of Personal Information:

​

Identifiers

Examples include your name, postal address, email address, online identifiers, Internet Protocol (IP) address, account information, and similar identifiers.

We disclose this information to service providers, affiliates, promotional partners, legal authorities when required, and parties involved in corporate transactions.

Except as described below for Internet activity associated with IP addresses, we do not sell or share this category of Personal Information for cross-context behavioral advertising.

 

Contact, Employment, and Financial Information

This category includes information such as your telephone number, employer, occupation, and financial information you voluntarily provide.

We disclose this information as necessary to provide our Services and operate our business.

We do not sell or share this information.

 

Commercial Information

This includes information about products or services you purchase, your purchasing history, and related preferences.

We may disclose this information to service providers and may share it with analytics and digital advertising providers to:

• Better understand how our Services are used.

• Improve our Services.

• Measure the effectiveness of advertising campaigns.

• Deliver advertising that may be more relevant to your interests.

• Support analytics and reporting.

 

Internet or Other Electronic Network Activity

This category includes browsing history, interactions with our websites, online services, advertisements, and similar digital activity.

We may disclose or share this information with website analytics providers and digital advertising partners to:

• Operate and improve our Services.

• Personalize user experiences.

• Better understand visitor behavior.

• Protect the security of our Services.

• Measure advertising effectiveness.

• Support analytics and reporting.

• Deliver interest-based advertising where permitted by law.

 

Sources of Personal Information

We collect Personal Information from the categories of sources described in the How We Collect Personal Information section of this Privacy Policy.

 

Business Purposes

We collect, use, disclose, and retain Personal Information for the business and commercial purposes described throughout this Privacy Policy, including to provide our Services, operate our business, comply with legal obligations, improve customer experiences, and protect our legal rights.

 

Data Retention

We retain Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or as otherwise required or permitted by applicable law.

 

​

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CPRA"), provides you with certain rights regarding your Personal Information.

These rights are subject to applicable exceptions and limitations under California law.

​

Right to Know

You have the right to request information about how we collect, use, disclose, sell, or share your Personal Information.

Upon receiving a verifiable request, we may provide information, including:

• The categories of Personal Information we have collected about you.

• The categories of sources from which your Personal Information was collected.

• The business or commercial purposes for collecting, using, selling, or sharing your Personal Information.

• The categories of third parties with whom we disclose, sell, or share Personal Information.

• The specific pieces of Personal Information we have collected about you.

​​

You may also request information regarding:

• The categories of Personal Information we have disclosed for a business purpose and the categories of recipients who received that information.

• The categories of Personal Information we have sold or shared (if any) and the categories of third parties that received that information.

 

Right to Request Deletion

You have the right to request that we delete Personal Information we have collected from you.

​

In certain circumstances, we may retain Personal Information when permitted or required by law, including where retention is necessary to complete transactions, comply with legal obligations, detect security incidents, protect against fraud, exercise legal claims, or for other purposes authorized by the CPRA.

​

If we deny your request, we will explain the reason to the extent required by applicable law.

 

Right to Correct

You have the right to request that we correct inaccurate Personal Information that we maintain about you, taking into account the nature of the information and the purposes for which it is processed.

 

Right to Opt Out of the Sale or Sharing of Personal Information

Kythira does not sell your Personal Information for monetary compensation. If we use third-party advertising or cross-context behavioral advertising technologies in the future, we will update this Privacy Policy and provide any rights required by applicable law.

 

Right to Limit the Use of Sensitive Personal Information

We do not currently collect or use Sensitive Personal Information in a manner that requires us to offer a right to limit its use under the CPRA.

If our practices change in the future, we will update this Privacy Policy accordingly.

 

Right to Non-Discrimination

We will not discriminate against you for exercising any rights provided under the CPRA.

Unless permitted by law, exercising your privacy rights will not result in:

• Denial of goods or services;

• Different prices or rates;

• A different level or quality of services; or

• Any other discriminatory treatment.

 

 

How to Exercise Your Privacy Rights

To exercise your California privacy rights, you or your authorized agent may submit a verifiable consumer request by contacting us using the information provided in the Contact Us section below.

​

If you maintain an online account with us, we may verify your identity through your account credentials.

​

If you do not maintain an account, we may request additional information necessary to verify your identity before processing your request.

We will use the information you provide solely for purposes of verifying your identity and responding to your request.

 

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. Our contact info is on the Location & Hours page.

We may require proof of the agent's authority and may also require you to verify your identity directly before fulfilling the request, as permitted by applicable law.

Parents or legal guardians may also submit requests on behalf of their minor children where authorized by law.

 

California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information regarding certain disclosures of Personal Information to third parties for their direct marketing purposes.

​

Kythira does not currently disclose Personal Information to third parties for their own direct marketing purposes.

​

If you have questions regarding this section, please contact us using the information below.

 

Contact Us

If you have questions about this Privacy Policy or would like to exercise any applicable privacy rights, please contact us:

​

Email
info@kythiranp.com

​

Mail
Kythira NP
32 Grand Street
New York, NY 10013

​

​

​