California Consumer Privacy Act

1. Welcome

This notice only applies to individuals (“you”) who reside in the State of California. This Notice shall comply with the California Customer Privacy Act 2018 (“CCPA”).

The CCPA requires us to provide California residents certain information. An extended overview of how we process your personal information can be found on in our Privacy Notice, this separate notice ensures we meet the CCPA’s requirements. This notice contains the following four sections:

We Do Not Sell Your personal information.
Your CCPA Rights
The CCPA Categories of personal information We Collect and the Sources
The CCPA Categories of personal information We Share for a “Business Purpose”

2. We Do NOT Sell Your Personal Information

The CCPA requires us to disclose whether we sell your personal information. We do not sell your personal information.

3. Your CCPA Rights

Under the CCPA, California residents also have rights relating to disclosure and access and deletion of their personal information. These rights are not absolute and are subject to certain exceptions. For instance, we cannot disclose or permit access to specific pieces of personal information if the disclosure or access would present a certain level of risk to the security of the personal information, your account with us or security of the business’s systems of networks.

If you make a request to exercise a consumer right, such as to obtain a data export or delete your data, we will respond within a reasonable timeframe. At a minimum we will acknowledge your request no later than 10 days after it is made and will fulfil it within forty-five (45) days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.

If we cannot comply with a request, we will explain the reasons.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Your Right to Request for Information

You have the right to request that we disclosed to you, for the 12-month period preceding the

date of your request
1. The categories of personal information we have collected about you
2. The categories of sources from which personal data is collected.
3. The business or commercial purpose for which the information was collected,
4. The categories of third parties with whom we have shared personal information, and
5. The specific pieces of personal information we hold about you. Please note that we are only required to fulfil Discloser and Access request from a consumer twice per every 12 months. You can submit such a request by sending an email to (the controller) or calling Customer service (controller).
Please note we may require you to provide identifying information to verify your identity.
Your Right to Opt-out of Sales

Under California Laws, California consumers have the right to opt-out of having their personal information sold. For purposes of California Laws, the definition of “sale” includes sharing personal information with a third party in exchange for anything of value (money or otherwise). WE do NOT sell your personal information.
Your Right to Notification

Under the CCPA, a company like us cannot collect new categories of personal information or use them for materially different purposes without first notifying you.
Non-discrimination for exercising your CCPA Rights

California residents have a right not to be discriminated against do the exercise of their Rights. The CCPA prohibits businesses from discriminating against you for exercising your rights under the law. Such discrimination may include denying services, charging different prices or rates for services, providing a different level or quality of services, or suggesting that you will receive a different level or quality of goods or services as a result of exercising your rights.
Your Right to Delete personal information

You have the right to request that we delete the personal information we have collected or maintained in connection with your use of our service, subject to certain exceptions as provided for under California Laws. We will take reasonable measures to delete your personal information from our records. We will keep certain record (e.g. personal information relating to payments or customer service matters) where we need and have rights to, such as for legal or accounting purposes. We also keep information in order to exercise, defend or establish our rights. While fulfilling a valid deletion request, we will also endeavour to direct our service providers to delete your personal information from their records. You can submit such a request by sending an email to Data.Protection@loungekey.com or call Customer Service.
4. The CCPA Categories of Personal Information we Collect and the Sources

Our Privacy Notice describes the information we collect and its sources. This notice organises that information around the personal information categories set forth in the CCPA.

CCPA Categories	Type of personal information	Sources
Category A – Identifiers includes personal information such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	Email address, telephone number, mobile number, Customer numbers, login details, security answer, IP address, device identifiers	You e.g. when you register your interest or sign up to use our services or provide us with your marketing preference. Our clients or prospective clients who send us your personal information to allow us to give you access to our services or communicate with you. Companies within the Collinson Group assisting us with services we offer you,
Category B - Personal information described in Cal. Civ. Code §1798.80(e) This category includes personal information such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.	name, address, telephone number, date of birth, gender, payment card number,	You e.g. when you register your interest or sign up to use our services. Our clients or prospective clients who send us your personal information to allow us to give you access to our services or to communicate with you. Companies within the Collinson Group assisting us with services we offer you.
Category D - Commercial Information	Services, you access and purchase, Information about your benefit with us, marketing preference,	You e.g. when you register your interest or sign up to use our services or provide us with your marketing preference. Our clients or prospective clients who send us your personal information to allow us to give you access to our services or communicate with you. Companies within the Collinson Group assisting us with services we offer you.
Category F - Internet or Other Electronic Network Activity Information	Browsing history, search history, information on your interaction with our website, application, or advertisement, Traffic information, IP address, time of access, of access, location, device identifiers. Please see our cookie policy.	Your devices e.g. when you connect to our Website, use our Website. Through cookies we use on our Websites to secure our Website, offer you personalised experiences.
Category G - Geolocation Data Physical location or movements.	Location data from your mobile device (eg latitude and longitude).	Your mobile devices e.g when your mobile device is on and we receive your location data to deliver notifications for nearby airport experiences.

5. How we use your personal information

The table outlines the lawful basis we can rely on to process your personal information

What we use your information:

To provide you with access to our website and or our mobile app.

To manage our relationship with you as a user of the website which includes notifying you about changes to our Websites and the services we offer.

To provide you with information you have requested, including without limitation, quotations, Service documentation, brochures, and responses to applications.

To respond to any enquiries from you regarding our services.

To provide you with information about certain other goods and services which we believe may be of interest to you.

To send you targeted electronic communications about our services for marketing purposes.

To send marketing communication by post about our services.

To receive feedback from you on our services

To provide a better customer experience and understand your advertising needs.

To provide customer support services

To protect the company and you from fraud

We may share your personal information outlined in section 4 with the following categories of third parties for business purposes as defined under the CCPA, to support us in the services we offer to you explained in section 5.
Companies we will share your personal information with include:

IT service providers, data disposal service providers, data enrichment service providers and data storage service providers.
Companies within the Collinson Group acting as our processor, to help us provide our services to you e.g. our customer service function to handle your enquiries.
Our providers, AWS, who host our Websites.
Lounges or merchants’ providers which you visit, as part of your program benefit, so they can record and account for your visit.
We also share your personal information with payment service providers and data analytics services.
Companies within the Collinson Group to offer you services or products, where we have your consent.
Other third parties outside the Collinson Group to offer you services or products, where we have your consent.
Where service is a benefit of your payment card and therefore we act as processor for issuers, the Issuers as controllers may instruct us to share your personal data with themour partners or clients which provide joint marketing services.

To help protect you and us from fraud, to combat money laundering and protect our Website from illegal use, we will share your personal information with fraud prevention agencies, payment service providers, banks, financial institutions and similar third parties for checking your identity, monitoring your behaviour on our Website. These additional service providers are Controllers and will have their obligations to protect and secure your data under the CCPA.

We may also share your personal information with law enforcement and statutory authorities when required by the law in the following circumstances:

To comply with a request for information from a governmental body such as law enforcement (police) or other public authorities;
To comply with a court order to disclose your personal information;
To comply with a regulatory investigation; and
The establishment, exercise or defence of a legal claim (including in connection with an investigation or enquiry by a competent regulatory authority).

We may share your data with your Issuers:

Where we are controllers and have contractual obligations to share your data with Issuers.
Where we act as a processor for issuers, the Issuers as controllers may instruct us to share your data with them.

There are other circumstances where we share your personal information:

Within the Collinson Group: Personal information will be shared with companies within the Collinson Group in accordance with Applicable Data Protection Law and the terms of this Privacy Notice to help us provide our services to you or for marketing purposes where you have provided your consent.
Our service providers: To help us deliver our services and ensure we offer you a fantastic customer journey, we share Personal information with our providers who host our websites, provide marketing services, IT services, customer support services, data disposal services and data storage services. We also share your personal information with payment service providers and data analytics services. Where we share your Personal information with our service providers, we enter contracts to ensure they also protect your personal information in line with Applicable Data Protection Law and to this Privacy Notice.
Additional service providers: To help protect you and us from fraud, to combat money laundering and protect our Website from illegal use, we will share your personal information with fraud prevention agencies, payment service providers, banks, financial institutions and similar third parties for checking your identity, monitoring your behaviour on our Website. These additional service providers are Controllers and will have their obligations to protect and secure your data under Applicable Data Protection Law.
Law enforcement and Statutory authorities: We may share your Personal information when required by the law in the following circumstances:
- To comply with a request for information from a governmental body such as law enforcement (police) or other public authorities.
- To comply with a court order to disclose your personal information;
- To comply with a regulatory investigation; and
- The establishment, exercise or defence of a legal claim (including in connection with an investigation or enquiry by a competent regulatory authority).
Sharing in other circumstances: The Collinson Group may transfer all your personal information to a third party if the operator of the Website changes, or if there is a sale of all or any part of its business or its assets or if we go out of business, enter bankruptcy, or go through some other change of control. In the event of any of these transfers occurring, the party who acquires the data will assume the rights and obligations described in this Privacy Notice

Geolocation

If you open or use our App on your mobile device and we have your consent, we will use the location data from your mobile device (e.g. latitude and longitude), to show you a list of our nearby airport experiences.

If you choose not to give us access to your location data, you can still use the App, but you will not receive notifications detailing our nearby airport experiences.

We will also use your mobile device's background location’ to send you notifications about our nearby airport experiences, such as, our contactless ordering options, ready2order. If you have ‘background location’ turned on, our app will, from time to time, tell us about your device’s location even if you are not directly interacting with the App.

Your location data will only be used for the above purposes. Only pseudonymised consumer ID will be shared with Google analytics and Mixpanel. For more information about location data please visit Apple’s Location Services & Privacy page for iOS and Google’s How it uses location information page for Androids.

We may have links to other sites promoting our partners and clients. Please read their Privacy Notices available on their website to find out how they process personal information. This Privacy Notice will not cover their use of personal information.

7. Contact Details

We are LoungeKey part of a group of companies (the “Collinson Group”) owned by Collinson Group Limited. Our Company details are 3 More London Riverside, London, SE1 2AQ with company number 08792537.

The Collinson Group has appointed a Group Data Protection Officer (“DPO”). If you have any questions about this Privacy Notice or would like to know how we handle your personal information, please contact the DPO or the Data Protection Team by post at The Data Protection Officer, 3 More London Riverside, London, SE1 2AQ or by email at Data.Protection@loungekey.com.

8. Updates to the Privacy Notice

We keep our Privacy Notice under regular review, and we will make new versions available on our Privacy Notice page on our website. This Privacy Notice was last updated on 17th May 2021.