Privacy Policy

Effective Date: July 10, 2026

TABLE OF CONTENTS

1. INTRODUCTION
2. CHANGES AND UPDATES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES
3. IMPORTANT INFORMATION AND WHO WE ARE
4. PURPOSE OF THIS PRIVACY POLICY
5. THIRD-PARTY WEBSITES
6. THE COLLECTION OF PERSONAL INFORMATION
7. THE SOURCES FROM WHICH WE COLLECT YOUR PERSONAL INFORMATION
8. HOW WE USE YOUR PERSONAL INFORMATION
9. CHOICES ABOUT YOUR PERSONAL INFORMATION
10. CHILDREN’S PRIVACY
11. DISCLOSURES OF YOUR PERSONAL INFORMATION
12. INFORMATION SECURITY
13. INFORMATION RETENTION
14. COLLECTION AND USE OF BIOMETRIC INFORMATION
15. CONTACT INFORMATION

INTRODUCTION
ParTech, Inc. and its subsidiaries PAR Payment Services, LLC, AccSys, LLC, and Punchh, Inc., (collectively referred to as “ PAR,” “ us,” “ we,” or “ our” as the context may require) respect the privacy of our business customers, employees of business customers, guests, and visitors (collectively, “you” and “your”) and are committed to protecting your personal information. This Privacy Policy (the “ Privacy Policy”) applies to information collected through the websites and mobile applications that we operate (collectively, the “ Sites”) or online and offline in our provision of hardware, software, software as a service, and data services to the restaurant and retail industries (collectively, the “ Products and Services”) and does not cover any information collected by third parties (unless specifically stated).

For purposes of this Privacy Policy, “ personal data” or “ personal information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer, such as deidentified or aggregated information.  We reserve the right to convert, or permit others to convert, your personal information into deidentified information or aggregate information, and may elect not to treat publicly available information as personal information, to the extent permitted by applicable law. We will not attempt to reidentify information that we maintain as aggregated or deidentified.

By accessing or using the Sites, using our Products and Services, or otherwise providing us with personal information, you agree to the terms and conditions of this Privacy Policy and any updates we make to it. If you do not agree to the terms and conditions of this Privacy Policy, then please do not access or use the Sites, use our Products and Services, or otherwise provide us with your information.

CHANGES AND UPDATES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES
We regularly review our Privacy Policy. We reserve the right to alter, modify, update, add to, subtract from or otherwise change this Privacy Policy at any time. We will use your personal information in a manner consistent with the Privacy Policy in effect at the time we collected your personal information. Your continued use of the Sites or our Products and Services after we make changes is deemed to be your acknowledgment of those changes and you are responsible for periodically visiting the Sites and this Privacy Policy to check for any changes.

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us by contacting us (see “Contact Information,” below).

IMPORTANT INFORMATION AND WHO WE ARE
PURPOSE OF THIS PRIVACY POLICY
This Privacy Policy provides you with information on how PAR collects and processes your personal information, including any information provided to us by customers who use and operate our Products and Services (our “ Business Customers”) or that you may provide directly to us when you:

• contact us for information on our Products and Services;
• purchase products from our Business Customers;
• purchase Products or Services from us;
• join one of our online communities (e.g., PAR Brink POS User Community); and
• connect with us via social media (e.g., Facebook).
  In most cases, we collect and process personal information solely in our capacity as a service provider (or “processor” for purposes of the GDPR and certain U.S. Privacy Laws) to our Business Customers. In that context, we receive personal information about you from a Business Customer or collect information from you on behalf of a Business Customer for the business purpose of providing Products and Services to such Business Customer and other legally permitted uses. If you are a customer of one of our Business Customers on whose behalf we have collected or processed your personal information, the rights described below do not apply to personal information collected and processed on behalf of such Business Customer. If you have questions or wish to exercise your rights relating to such personal information, please contact that Business Customer directly.

THIRD-PARTY WEBSITES
Some components of the Sites are operated by third parties or may include links to third-party websites, plug-ins and applications, and are therefore subject to additional terms found in the policies of those third parties. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third-party websites and are not responsible for their privacy policies. When you leave our Sites, we encourage you to read the privacy policy of any third-party website you may visit.

THE COLLECTION OF PERSONAL INFORMATION
The categories of personal information we have collected about you in the previous 12 months and the purposes for which we used such personal information are as follows. The numbers listed under the column “Purposes for Collection” correspond to the purposes described in Section 4 below.

As permitted by U.S. Privacy Laws, we also collect, use and share “ Aggregated Information” such as statistical or demographic information for any legal purpose. Aggregated Information could be derived from your personal information but is not considered personal information under applicable laws, as this information will not directly or indirectly reveal your identity. For example, we may aggregate your personal information to calculate the percentage of users accessing a specific feature of our Sites, Products or Services, or as a consumer of one of our Business Customers through our Products or Services to provide certain data analytics to our Business Customers. However, if we combine or connect Aggregated Information with your personal information so that it can directly or indirectly identify you, we treat the combined information as personal information that will be used in accordance with this Privacy Policy. We may share or use anonymized information in any manner we choose. Anonymized information, which is also referred to as de-identified or non-personal information, is information assembled into groupings that can no longer be reasonably used to identify you or your organization.

THE SOURCES FROM WHICH WE COLLECT YOUR PERSONAL INFORMATION
We use different sources and methods to collect personal information from and about you, including through:

• Direct interactions. You may give us personal information in our capacity as a service provider or processor to our Business Customers or for our own permitted purposes, by filling in forms or by corresponding with us by mail, phone, email or otherwise. This includes personal information you provide when you:

  • inquire about, purchase or request support for our Products or Services;
  • register for one of our communities;
  • request marketing to be sent to you;
  • connect with us via social media;
  • participate in a promotion or survey; or
  • give us feedback or contact us.

• Interactions with our Business Customers. We may collect personal information that you provide to our Business Customers, in our capacity as a service provider or processor, when you:

  • place orders for food and drink;
  • purchase or redeem a gift card;
  • sign up for a Business Customer’s loyalty or online ordering program; or
  • work as an employee of our Business Customer, including scanning your finger on a point-of-sale device that we have provided to our Business Customer.

• Automated technologies or interactions. As you interact with our Sites or our Products and Services, we will automatically collect personal information about your equipment, browsing actions and patterns. We collect this personal information by using cookies and other similar technologies. We may use third party analytics services like Cloudflare and Google Analytics to ensure the security and stability of our website and to provide us with a clearer picture of how you use the Sites or our Products and Services, including when you view specific pages or take specific actions on the Sites or use certain features or functionality within our Products and Services. If you wish to learn more about our information collection process, please see our Cookie Policy for further details.

• Affiliates, third parties or publicly available sources. We may receive personal information about you from our affiliates and various third parties, either in our capacity as a service provider or processor to our Business Customers or for our own permitted purposes, as set out below:

  • from affiliated companies controlled by, controlling or under common control with PAR;
  • from analytics providers;
  • from search information providers;
  • from providers of technical, payment and delivery services such as banks;
  • from third-party service providers or processors of our Business Customers that integrate with our Products and Services on behalf of our Business Customers;
  • from data brokers, event sponsors (e.g., tradeshows) or aggregators; and
  • from publicly available sources, such as government and administrative bodies.

HOW WE USE YOUR PERSONAL INFORMATION
We will only use your personal information in accordance with applicable global privacy laws and as directed by our Business Customers, where we are acting as a service provider or processor, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us (See “ Contact Information,” below). If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so, to the extent required under applicable law. Please note that we may process your personal information without your knowledge or consent, in compliance with this Privacy Policy, where this is required or permitted by law.

CHOICES ABOUT YOUR PERSONAL INFORMATION
You have choices about how we use your information. Please understand that if you choose not to disclose information to us, it may affect your ability to use some features of the Site, Products, or Services. We have established the following ways for you to control your personal information that you have shared with us:

• Promotional Offers from Us. You will receive promotional communications from us if you have requested information from us or purchased Products or Services from us and you have not opted out of receiving that marketing.
• Marketing Messages. You will receive marketing messages from us if you have provided your contact information to us. You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.
• Cookies. You can set your browser to refuse all or some browser cookies, or to alert you when our Sites set or access cookies. If you disable or refuse cookies, please note that some parts of the Sites may become inaccessible or not function properly. For more information, please see our Cookie Policy.
• Do-Not-Track. Many web browsers include a Do Not Track (“ DNT”) feature or setting that signals your preference not to have information about your online browsing activities monitored and collected. However, there is currently no uniform standard for recognizing and implementing the DNT signals.

CHILDREN’S PRIVACY
We recognize the importance of children’s safety and privacy on the Internet. For this reason, we do not knowingly sell or share (as “share” is defined by the CCPA) any information, including personal information, from children under 16 years of age. If you think we may have unknowingly collected personal information of an individual under 16 years old, please contact us (See “ Contact Information,” below). We encourage parents to monitor their children’s Internet usage and/or to use web filtering technology to supervise their children’s access to the Internet.

DISCLOSURES OF YOUR PERSONAL INFORMATION
We may share your personal information with the parties set out below for the purposes set out in Section 4 above, and in some cases, legal authorities.

• ” Affiliates” includes parents, subsidiaries, business units, and other companies that share common ownership with us.
• Service providers. Third parties acting as processors who provide services to us, including: (a) IT and system administration services (e.g., hosting); (b) marketing and advertising services; (c) financing for the purchase of our Products and Services; or (d) support, equipment installation or maintenance in connection with our Products and Services and third-party service providers or processors of our Business Customers that integrate with our Products and Services on behalf of our Business Customers.
• Business Customers. Our customers, for which we act as a service provider or processor in connection with providing the Products and Services. Examples of Business Customers to whom we may disclose Personal Information are restaurants, retailers, and their franchisees (including their respective service providers and processors).
• Law enforcement and other government agencies. We may share information with third parties such as law enforcement or other government agencies to comply with law or legal requirements; to enforce or apply our Website Terms of Use and other agreements; and to protect our, our users,’ or third parties’ rights, data, property or safety.

INFORMATION SECURITY
We have put in place reasonable security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. If you have reason to believe that your personal information is no longer secure (for example, if you feel that the security of your account has been compromised), please contact us immediately at privacy@partech.com.

INFORMATION RETENTION
The length of time for which we retain each category of personal information described above depends on the purposes for which we collected and use it and our requirements to retain it in order to comply with applicable laws. We keep your personal information for no longer than reasonably necessary to achieve the purposes for which it was collected or processed, including to comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes.

COLLECTION AND USE OF BIOMETRIC INFORMATION
Our Business Customers may use certain equipment (finger scanners) made by other companies that obtain information from a scan of a user’s finger in connection with our subscription software services. The scan reads certain characteristics of the user’s finger, and a hexadecimal string of random letters and numbers (token) is generated and retained within PAR’s subscription software services on behalf of our Business Customers.

CONTACT INFORMATION
For general questions or comments, we can be reached by telephone at: (315) 738-0600 or 1-800-448-6505, option #5; by email at: privacy@partech.com or by mail at ParTech, Inc., PAR Technology Park, 8383 Seneca Turnpike, New Hartford, New York, 13413 USA, Attention: Privacy Compliance.