PRIVACY POLICY

Last Updated: June 09, 2026

PRIVACY NOTICE: SCOPE AND APPLICABILITY

This Privacy Notice applies to information we collect when you use our websites, mobile applications, online services, ordering platforms, loyalty or promotional programs, and any other websites, mobile applications, or services that post a link to this Privacy Notice (collectively, the “Websites” or “Services”).

This Privacy Notice describes how Lwin Family Co, LLC d/b/a Hissho Sushi (“Hissho,” “Company,” “we,” “our,” or “us”) collects, uses, discloses, retains, and protects Personal Information relating to consumers, website visitors, loyalty or promotion participants, customer-service contacts, job applicants, franchisees and prospective franchisees, host and retail partners, suppliers, business contacts, and individuals involved in customer incidents, food-safety inquiries, allergen matters, or claims.

Hissho Sushi operates sushi bars and related food-service locations in supermarkets, cafes, hospitals, universities, corporate food service locations, and other host locations. Some locations may be operated by independent franchisees or other third parties. Except where expressly stated otherwise, this Privacy Notice describes Hissho’s own privacy practices and does not control the privacy practices of independently owned or operated franchisees, host locations, delivery platforms, payment processors, social media platforms, or other third parties. This Privacy Notice also does not apply to information collected outside the Websites or Services except to the extent such information is combined with information collected by us through the Websites or Services.

By using our Websites or Services, you consent to our collection, use, disclosure, retention, and other practices as described in this Privacy Notice, subject to applicable law. If a law requires consent for a specific collection, use, disclosure, or processing activity, we will seek consent in the manner required by that law.

For purposes of this Privacy Notice, “Personal Information” means information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked with an identified or identifiable individual or household. Personal Information does not include information that is deidentified, aggregated, or otherwise excluded from protection under applicable law.

California-Specific and Other State-Specific Disclosures: California residents and residents of other states with applicable consumer privacy laws should review the “Additional Disclosures for State Residents” section below for more information about how we collect, use, disclose, sell, share, and otherwise process Personal Information and the rights available under applicable law.

Nothing in this Privacy Notice is intended to alter the independent-contractor status of any franchisee or to state or imply that Hissho controls the employment practices, employment decisions, payroll, scheduling, supervision, discipline, or day-to-day personnel management of any independently owned or operated franchisee.

1. COLLECTION OF INFORMATION

1.1 Categories of Personal Information We Collect: Depending on how you interact with us, we may collect the following categories of Personal Information:

(a) Identifiers: name, alias, postal address, email address, telephone number, account username, online identifier, IP address, device identifier, loyalty or customer number, signature, and similar identifiers.
(b) Contact and Account Information: information used to create or manage an account, respond to inquiries, provide customer service, manage subscriptions, administer loyalty or promotional programs, and communicate with you.
(c) Commercial Information: records of products or services purchased, obtained, or considered; transaction history; gift-card information; coupon or promotion participation; loyalty activity; preferences; and purchasing or consuming tendencies.
(d) Payment Information: payment-card information and billing details. Payment-card information may be collected and processed by our payment processors on our behalf.
(e) Internet, Device, and Network Activity Information: browsing history, search history, pages viewed, links clicked, referring URLs, access times, device type, browser type, operating system, application usage, session identifiers, advertising identifiers, and information about interactions with advertisements or emails.
(f) Geolocation Information: approximate location inferred from IP address and, if enabled on your device, more precise location information to identify nearby Hissho Sushi locations or support location-based features. We do not collect precise geolocation information unless permitted by applicable law and, where required, with consent.
(g) Sensory Information: audio recordings of customer-service calls, photographs or videos submitted by consumers, and video footage or other incident-related information relating to customer claims, security incidents, or food-safety matters.
(h) Health, Allergen, and Incident-Related Information: information about allergies, dietary restrictions, health-related incidents, injury claims, food-safety inquiries, or product quality issues, when provided by you or by a host location, retail partner, franchisee, insurer, or other involved party. We use this information only for responding to inquiries, investigating incidents, handling claims, complying with legal obligations, and protecting health and safety.
(i) Demographic and Preference Information: age range, birthday or month of birth, household information, preferences, survey responses, interests, and other voluntarily provided information.
(j) Professional, Business, Franchise, and Partner Information: business contact information, job title, company or organization, franchise application information, ownership information, financial qualification information, insurance information, training records, compliance information, operational performance data, and other information necessary to evaluate, establish, administer, or manage franchise, supplier, host-location, or other business relationships.
(k) Employment and Applicant Information: application materials, resume information, employment history, education history, references, background-check information where permitted by law, interview notes, work authorization information, and other information used to evaluate or manage employment or contractor relationships.
(l) User Content: content you submit, post, upload, or otherwise provide through the Services, including, but not limited to, comments, reviews, photographs, videos, survey responses, contest entries, and other communications.
(m) Sensitive Personal Information: account credentials, precise geolocation, health or incident-related information, information about known minors, and information that may reveal dietary restrictions, allergies, or health conditions. We use and disclose Sensitive Personal Information only for purposes permitted by applicable law or with consent where required.
(n) Inferences: inferences generated from the information described above, including, but not limited to, preferences, characteristics, behavior, and likely product interests, used to improve our Services, personalize experiences, and deliver relevant communications, subject to applicable opt-out rights.

1.2 Information You Provide to Us. We collect information you provide directly to us via the Websites or Services, such as when you register, create an account profile, subscribe to emails or mobile messages, post on forums or blogs, participate in a sweepstakes, contest, promotion, survey, or poll, place an order, request customer support, apply for a job, submit a franchise inquiry, interact with a loyalty or promotional program, report an incident, ask food-safety or allergen questions, or otherwise communicate with us.

Personal Information you provide may include your name, alias, email address, postal address, ZIP code, billing and shipping addresses, telephone number, account username, password, payment-card information, signature, photo, loyalty or customer number, device identifier, online identifier, and any other information you choose to provide. Personal Information may also include Sensitive Personal Information, such as account credentials, precise geolocation, health or incident-related information, information about known minors, and information revealing dietary restrictions, allergies, or health conditions. We use Sensitive Personal Information only for purposes permitted by applicable law or with consent where required.

1.3 Information We Collect Automatically. We, our service providers, affiliates, and third parties may automatically collect information when you access the Websites or Services, including IP address, browser and device type, operating system, clickstream data, pages viewed, access times, session identifiers, and advertising identifiers. Methods include log files, cookies, web beacons, pixels, embedded scripts, location-identifying technologies, SDKs, and in-app tracking (collectively, “Tracking Technologies”).

1.4 Information From Other Sources. We may obtain Personal Information from franchisees, host locations, retail partners, suppliers, insurers, claims administrators, payment processors, delivery platforms, analytics providers, advertising partners, public sources, social media platforms, and other business partners. To the extent we combine such information with Personal Information collected via the Websites or Services, we treat the combined information as Personal Information under this Privacy Notice.

1.5 Combining Information. Information we automatically collect may be combined with Personal Information you provide or that we receive from other sources. Where automatically collected information is associated with your Personal Information, we treat the combined information as Personal Information.

2. USE OF INFORMATION

We may use your Personal Information for the following purposes:

(a) Facilitate and improve your online experience.
(b) Provide, operate, maintain, and improve the Websites and Services.
(c) Process your registration with our Websites or Services, including verifying that your email address is active and valid.
(d) Manage your online accounts, including purchases, orders, payments, returns, exchanges, forum and blog posts, loyalty activity, coupons, promotions, and gift cards.
(e) Process transactions, fulfill orders, administer gift cards, manage loyalty programs, provide coupons or promotions, and deliver customer support.
(f) Respond to your comments, questions, requests, complaints, food-safety inquiries, allergen questions, quality concerns, incident reports, and claims, and provide customer service.
(g) Operate and support sushi bars and related food-service programs at supermarkets, cafes, hospitals, universities, corporate food service locations, and other host locations.
(h) Evaluate, establish, administer, monitor, and manage franchise, host-location, supplier, and other commercial relationships.
(i) Administer franchise training, operational support, quality assurance, brand standards, food-safety procedures, and regulatory compliance programs.
(j) Evaluate job applicants and manage recruiting, hiring, onboarding, and workforce-related processes.
(k) Send you technical notices, updates, security alerts, support messages, administrative messages, transactional communications, operational communications, and service-related communications.
(l) Communicate with you about products, services, offers, promotions, coupons, newsletters, rewards, surveys, events, and information we think may be of interest to you, subject to applicable consent and opt-out rights.
(m) Improve our Websites, mobile applications, marketing efforts, products, and services.
(n) Personalize your online experience and provide advertisements, content, offers, or features that match your profile and interests, subject to applicable opt-out rights.
(o) Monitor and analyze trends, usage, and activities.
(p) Process and deliver contest, promotion, survey, poll, and sweepstakes entries and rewards.
(q) Process and track your redemption of digital coupons and associate those redemptions with your account.
(r) Link or combine information we get from others to help understand your needs and provide you with better service.
(s) Contact you about your use of the Websites or Services and, in our discretion, changes to our policies.
(t) Conduct analytics, research, product development, service improvement, business planning, focus groups, and surveys.
(u) Detect, investigate, prevent, and respond to fraud, security incidents, unlawful activity, misuse of the Websites or Services, or violations of applicable terms or policies.
(v) Protect the rights, property, safety, health, and security of Hissho, consumers, franchisees, host partners, employees, contractors, business partners, and others.
(w) Comply with applicable laws, regulations, legal processes, and regulatory obligations, including food-safety, public-health, franchise, employment, tax, accounting, privacy, and consumer-protection requirements.
(x) Establish, exercise, or defend legal claims; handle insurance matters; respond to subpoenas or governmental requests; and manage disputes or investigations.
(y) Conduct activities in connection with corporate transactions, including mergers, acquisitions, financing, reorganizations, asset sales, joint ventures, or similar business transactions.
(z) Carry out other purposes that are reasonably necessary and proportionate to the products, services, transactions, relationships, or interactions you request or that are otherwise disclosed to you, subject to applicable law and any consent or opt-out rights required by law.
(aa) Use Personal Information with your consent or at your direction.

In our discretion, we may also use aggregated, deidentified, and other non-Personal Information as permitted by applicable law.

3. LEGAL BASES FOR PROCESSING

Where a legal basis for processing is required under applicable law, we rely on one or more of the following bases:

(a) Performance of a Contract. We process Personal Information as necessary to provide products or services you request, process transactions, manage accounts, administer franchise or partner agreements, and fulfill related contractual obligations.
(b) Legitimate Interests. We process Personal Information as necessary for our legitimate business interests, including operating and improving our Websites and Services, maintaining safety and security, communicating with consumers and business contacts, conducting analytics, preventing fraud, managing claims, supporting food-safety and quality programs, and protecting legal rights. Where required, we balance these interests against the rights and expectations of the individuals involved.
(c) Consent. We process Personal Information on the basis of consent where you opt in to marketing communications, permit precise geolocation collection, participate in certain promotions, authorize processing of Sensitive Personal Information, or consent to cookies or Tracking Technologies where required by applicable law. You may withdraw consent at any time using the methods described in this Privacy Notice.
(d) Compliance with Legal Obligations. We process Personal Information as necessary to comply with applicable laws and regulations, including food-safety, public-health, franchise, employment, tax, accounting, privacy, and consumer-protection requirements.
(e) Protection of Vital Interests. We process Personal Information where necessary to protect health, safety, or security in connection with an incident, allergen matter, food-safety concern, or emergency.

4. ADVERTISING, ANALYTICS, AND ONLINE TRACKING

We may engage third parties to serve advertisements on our behalf across the Internet, provide us with data about you, and provide analytics about the use of our Websites or Services. We may participate in online advertising networks and exchanges that display relevant advertisements to visitors based on their interests as reflected in their browsing of the Websites, Services, and certain third-party sites participating in the same networks and exchanges.

These entities may use cookies, web beacons, pixels, embedded scripts, SDKs, and other Tracking Technologies to automatically collect information about your use of the Websites or Services, such as your IP address, web browser, pages viewed, time spent on pages, links clicked, conversion information, device identifiers, and advertising identifiers. This information may be used by us and others to analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on the Websites, Services, and other websites or platforms, and better understand your online activity. This practice is sometimes referred to as “interest-based advertising,” “retargeting,” “cross-context behavioral advertising,” or “targeted advertising.”

We do not sell Personal Information for monetary consideration. Certain privacy laws define “sale,” “sharing,” or “targeted advertising” broadly to include disclosures of Personal Information for valuable consideration or for cross-context behavioral advertising. Our use of third-party advertising technologies, analytics tools, pixels, cookies, SDKs, and similar technologies may constitute a “sale,” “sharing,” or processing for “targeted advertising” under applicable state privacy laws.

You may opt out of the sale or sharing of Personal Information and the use of Personal Information for targeted advertising by: (a) using the “Do Not Sell or Share My Personal Information” link on our Websites or Services; (b) using our cookie-preference tool; (c) sending a recognized opt-out preference signal such as Global Privacy Control where required by applicable law; or (d) contacting us using the methods described in Section 10. Browser-based opt-outs are specific to the device and browser on which they are set.

Where required by applicable law, we honor recognized opt-out preference signals, including Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device transmitting the signal. We do not knowingly sell or share Personal Information of consumers under 16 years of age without affirmative authorization where required by law. We do not use Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects unless disclosed and permitted by applicable law; where required, we provide opt-out rights for such profiling.

5. YOUR CHOICES REGARDING ANALYTICS AND ADVERTISING

You may exercise the following choices regarding analytics and advertising technologies used in connection with the Websites or Services.

Google Analytics. You may opt out of the collection and use of information by Google Analytics by visiting https://tools.google.com/dlpage/gaoptout or by downloading the Google Analytics Opt-out Browser Add-on.

DAA AdChoices Program. Certain advertising networks and exchanges may participate in the Digital Advertising Alliance (“DAA”) AdChoices Program and may display an Advertising Option Icon for interest-based ads. You can learn more about the DAA AdChoices Program at http://www.youradchoices.com/ and its opt-out program for mobile applications at http://www.aboutads.info/appchoices.

NAI Opt-Out Tool. Certain advertising networks and exchanges may participate in the Network Advertising Initiative (“NAI”). The NAI has developed a tool that allows consumers to opt out of targeted advertising delivered by NAI members’ ad networks. To learn more or to use the tool, visit http://www.networkadvertising.org/choices/.

Limitations of Browser-Based Opt-Outs. Even if you opt out of certain kinds of targeted advertising, you may continue to receive other types of ads. If your browsers are configured to reject cookies when you visit opt-out webpages, or you subsequently erase your cookies, use a different device or web browser, or use a non-browser-based method of access, your browser-based opt-out may not be effective or may no longer be effective. Browser-based opt-outs are specific to the device and browser on which they are set.

Do Not Track Settings. Browser settings may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. “Do Not Track” is distinct from legally recognized opt-out preference signals such as Global Privacy Control. We may not alter our practices when we receive a Do Not Track signal unless required by applicable law. Where applicable law requires recognition of opt-out preference signals, we honor such signals as described in this Privacy Notice.

6. SHARING AND DISCLOSURE OF INFORMATION

Our agents, vendors, consultants, contractors, service providers, and other providers may have access to or receive from us your Personal Information and other information about you to carry out work on our behalf. We do not authorize our service providers to use your Personal Information for any purpose other than to provide services to us or as otherwise permitted by applicable law.

Where reasonably and commercially possible, we require service providers, contractors, and processors that process Personal Information on our behalf to use the information only for the services they provide to us, maintain reasonable security safeguards, help us respond to legally required privacy requests, and comply with applicable contractual restrictions required by privacy laws.

We may disclose Personal Information to the following categories of recipients:

(a) Service Providers and Contractors: vendors performing hosting, IT, security, payment processing, order fulfillment, loyalty administration, customer support, analytics, marketing, email and SMS delivery, legal, accounting, auditing, insurance, claims administration, background-check, recruiting, and compliance services.
(b) Franchisees and Franchise Support Participants: franchisees, prospective franchisees, franchise support personnel, trainers, and auditors, where necessary to evaluate, administer, support, or monitor franchise relationships, brand standards, food-safety protocols, and customer service matters.
(c) Host Locations and Retail Partners: supermarkets, cafes, hospitals, universities, corporate food service locations, and other host or retail partners, where necessary to fulfill orders, investigate incidents, handle claims, address food-safety or allergen matters, or manage location operations.
(d) Payment Processors and Financial Institutions: to process payments and prevent fraud.
(e) Advertising, Analytics, and Technology Partners: recipients that may receive identifiers, device information, internet or network activity, commercial information, and inferences for measurement, analytics, personalization, and targeted advertising, subject to applicable opt-out rights.
(f) Insurers, Claims Administrators, Professional Advisors, and Legal Authorities: where necessary to manage claims, comply with law, respond to legal process, or protect rights and safety.
(g) Business Partners, Affiliates, and Other Third Parties: for purposes described in this Privacy Notice, including marketing purposes where permitted by applicable law and subject to available opt-out rights.
(h) Suppliers: where necessary to process and track your redemption of digital coupons, fulfill a promotion, administer supplier-related programs, or manage product or quality matters.
(i) Law Enforcement, Governmental Authorities, or Other Parties: to the maximum extent permitted by applicable law, in response to subpoenas or other legal process; if, in our good faith opinion, disclosure is required or permitted by law; at the request of governmental authorities conducting an investigation; to defend applicable terms, conditions, or policies; or to protect the rights, property, life, health, security, or safety of us or any third party.
(j) Corporate Transaction Parties: in connection with or during negotiations of any proposed or actual merger, acquisition, financing, reorganization, asset sale, joint venture, or similar business transaction involving all or a portion of our business or assets.
(k) Third-Party Websites and Platforms: where you interact with such websites or platforms through the Websites or Services or direct us to share information.
(l) Recipients at Your Direction or With Your Consent: when you direct us to disclose Personal Information, authorize disclosure, or interact with a third-party feature or platform.

As permitted by applicable law, we may also use and disclose aggregated, deidentified, and other non-Personal Information without obligation to you.

7. INFORMATION YOU DISCLOSE PUBLICLY OR TO OTHERS

The Websites or Services may permit you to submit ideas, photographs, user profiles, writings, music, video, audio recordings, computer graphics, pictures, data, questions, comments, suggestions, or other content, including Personal Information (collectively, “User Content”), such as on blogs and forums and in association with your account or user profile.

We or others may store, display, reproduce, publish, distribute, or otherwise use User Content online or offline in any media or format currently existing or later developed and may or may not attribute it to you. Others may have access to User Content and may have the ability to share it with third parties. Please think carefully before deciding what information you share, including Personal Information, in connection with User Content.

Hissho does not control who will have access to information that you choose to make public and cannot require parties who have access to such publicly available information to respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available on the Websites or Services or what others do with information you share with them on the Websites or Services. We are not responsible for the accuracy, use, or misuse of any User Content that you disclose or receive from third parties through the Websites or Services. We are not responsible for User Content you submit to third-party websites or platforms via our Websites or Services.

8. SWEEPSTAKES, CONTESTS, SURVEYS, POLLS, AND PROMOTIONS

We may offer sweepstakes, contests, surveys, polls, and other promotions (each, a “Promotion”) that may require registration or submission of Personal Information. Participation in any Promotion is voluntary. If you choose to enter a Promotion, your Personal Information may be disclosed to third parties in connection with the administration of the Promotion, including for winner selection, prize fulfillment, and as required by law, such as publication on a winners list.

By entering a Promotion, you agree to the official rules governing that Promotion. Official rules may contain specific requirements applicable to you, including, except where prohibited by law, allowing the sponsor and other parties to use your name, voice, likeness, biographical information, or submitted content in advertising or marketing materials.

Hissho may offer opportunities to enter a contest, sweepstakes, or other feature jointly with a third party. As a result of your participation in such a jointly offered feature, your information may be shared with the third party that is jointly offering the feature. We will disclose the identity of such third party at the time your information is collected.

9. THIRD-PARTY WEBSITES, PLUG-INS, AND SOCIAL FEATURES

The Websites or Services may contain hyperlinks to other websites or locations, including career, gift-card, online ordering, delivery, payment, social media, or online shopping sections of our Websites or Services, plug-ins, third-party Tracking Technologies, and other third-party applications and content made available on or through our Websites or Services that are operated by third parties (“Third-Party Websites”).

We make no representations and accept no responsibility or liability for the policies or business practices of Third-Party Websites. You should familiarize yourself with their privacy policies before accessing them or otherwise providing them with your Personal Information. In some cases, we and Third-Party Websites may each post terms and policies on a Third-Party Website, in which case our terms and policies govern us and the Third-Party Website operator’s terms and policies govern that operator.

Information collected by Third-Party Websites is governed by those third parties’ privacy notices and practices. If we receive Personal Information from a Third-Party Website or platform and determine the purposes and means of our processing of that information, we process that information in accordance with this Privacy Notice and applicable law, subject to any additional restrictions imposed by the third party. Otherwise, information collected, stored, and shared by third parties remains subject to their privacy policies and practices. You should read the privacy notice of each Third-Party Website because such Third-Party Websites may use their own cookies, web beacons, and other Tracking Technologies to independently collect information about you.

Certain functionality in connection with the Websites or Services is specifically designed to permit social and other interactions that you initiate between the Websites or Services and Third-Party Websites, including third-party social networks (“Social Features”). Examples of Social Features include enabling you to transmit content to the Websites or Services from your account on a Third-Party Website; to “like” or “share” our content to Third-Party Websites; to log in to the Websites or Services using your username and password for a Third-Party Website; and to otherwise connect our Websites or Services to a Third-Party Website.

If you choose to use Social Features, information you post or provide access to, including User Content, may be publicly displayed on our Websites or Services or by the provider of the Social Feature that you use. If you post information on a third-party platform that references our Websites or Services (for example, by using a hashtag associated with Hissho), your post may be published on our Websites or Services and treated as User Content. Both Hissho and the third party may have access to certain information about you and your use of our Websites or Services and the Third-Party Website. We may also receive information about you if other users of a Third-Party Website give us access to their profiles and you are one of their connections, or if information about you is otherwise accessible through your connections’ pages on Third-Party Websites.

10. CONSUMER PRIVACY RIGHTS AND HOW TO EXERCISE THEM

Depending on your state of residence and subject to applicable exceptions, you may have one or more of the following rights with respect to your Personal Information:

(a) Right to Know and Access: You may request whether we process your Personal Information and obtain access to the Personal Information we maintain about you.
(b) Right to Data Portability: You may request a copy of your Personal Information in a portable and readily usable format where required by law.
(c) Right to Delete: You may request deletion of Personal Information we collected from or about you, subject to applicable exceptions.
(d) Right to Correct: You may request correction of inaccurate Personal Information we maintain about you.
(e) Right to Opt Out of Sale, Sharing, or Targeted Advertising: You may opt out of the sale or sharing of Personal Information and the processing of Personal Information for targeted advertising.
(f) Right to Opt Out of Certain Profiling: You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, where required by applicable law.
(g) Right to Limit Sensitive Personal Information: You may limit certain uses and disclosures of Sensitive Personal Information where applicable law provides this right.
(h) Right to Obtain Information About Third Parties: You may request information about the categories or specific third parties to whom we disclose Personal Information, where required by law.
(i) Right to Appeal: You may appeal our decision regarding a privacy-rights request where applicable state law provides this right.
(j) Right to Non-Discrimination: We will not unlawfully discriminate against you for exercising privacy rights.

You may submit a privacy-rights request through any of the following methods:

Email: privacy@hisshosushi.com
Webform: [privacy rights request webform coming soon…]
Mail: Lwin Family Co, LLC d/b/a Hissho Sushi, Attn: Privacy / Legal, 3623 Lazy Hawk Rd, Suite 101, Rock Hill, South Carolina 29730

You may also use the “Do Not Sell or Share My Personal Information” link and cookie-preference tool on our Websites or Services, where applicable.

We will verify your request by asking for information sufficient to confirm your identity and your relationship with us. The verification information required will depend on the nature of the request, the sensitivity of the information involved, and applicable law. We may deny a request if we cannot verify it or if an exception applies. We will respond within the time required by applicable law and will notify you if an extension is needed.

You may designate an authorized agent to submit a request on your behalf where permitted by applicable law. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us, unless an exception applies.

California residents may designate an authorized agent to submit a California Consumer Rights Request. The agent may use the methods described above and should provide the consumer’s name, email address, ZIP code, and phone number, along with the agent’s own name and email address, a statement indicating authorized-agent status, and, if applicable, evidence of a power of attorney valid under California law. After submission, we may contact the consumer to verify identity and gather information needed to fulfill the request.

11. SALE, SHARING, TARGETED ADVERTISING, PROFILING, AND SENSITIVE PERSONAL INFORMATION

We do not sell Personal Information for monetary consideration. Certain privacy laws, however, define “sale,” “sharing,” or “targeted advertising” broadly to include disclosures of Personal Information for valuable consideration or for cross-context behavioral advertising. As described in Sections 4 and 5, our use of third-party advertising technologies, analytics tools, pixels, cookies, SDKs, and similar Tracking Technologies may constitute a “sale,” “sharing,” or processing for “targeted advertising” under applicable state privacy laws.

You may opt out of such activities using the methods described in Sections 4, 5, and 10, including the “Do Not Sell or Share My Personal Information” link on our Websites or Services, our cookie-preference tool, recognized opt-out preference signals such as Global Privacy Control where required by applicable law, or by contacting us directly. We process legally recognized opt-out preference signals where required by applicable law.

We do not knowingly sell or share Personal Information of consumers under 16 years of age without affirmative authorization where required by law. We do not use Personal Information to make decisions that produce legal or similarly significant effects concerning consumers unless disclosed and permitted by applicable law. Where required, we provide opt-out rights for profiling in furtherance of decisions that produce legal or similarly significant effects.

We use and disclose Sensitive Personal Information only for purposes permitted by applicable law, including: providing requested products or services; maintaining account security; processing transactions; responding to incidents or claims; addressing health, safety, allergen, food-safety, or quality concerns; complying with legal and regulatory obligations; preventing fraud; and protecting rights and safety. We do not use Sensitive Personal Information to infer characteristics about individuals unless permitted by applicable law or authorized by consent where required. We do not sell Sensitive Personal Information.

Where applicable law requires a stricter standard, we collect, process, disclose, or retain Sensitive Personal Information only when reasonably necessary, proportionate, or strictly necessary, as applicable, for the specific product, service, transaction, relationship, legal obligation, health and safety purpose, claim, or incident response for which the information is processed.

Where applicable law requires opt-in consent for the collection or processing of Sensitive Personal Information, we obtain such consent before processing. Where applicable law provides consumers with a right to limit the use or disclosure of Sensitive Personal Information, we provide the required mechanism, including through the “Limit the Use of My Sensitive Personal Information” link on our Websites or Services or by contacting us using the methods described in Section 10.

12. ADDITIONAL DISCLOSURES FOR STATE RESIDENTS

This section supplements the rest of this Privacy Notice with information required under specific state privacy laws. The rights and obligations described in this section apply only to the extent Hissho is subject to the applicable law and the individual is within the scope of that law.

12.1 California. This Privacy Notice is intended to comply with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”). In the preceding 12 months, we may have collected the categories of Personal Information described in Section 1.1 from the sources described in Sections 1.2, 1.3, 1.4, and 1.5; used them for the purposes described in Section 2; and disclosed them to the categories of recipients described in Section 6 and Section 12.6.

Categories of Personal Information that may be sold, shared, or used for targeted advertising include identifiers, internet or network activity information, commercial information, geolocation information, and inferences. Recipients of such information may include advertising networks, analytics providers, social media platforms, and marketing technology providers.

We do not knowingly sell or share Personal Information of consumers under 16 years of age without affirmative authorization. California residents may exercise rights to know, access, delete, correct, opt out of sale or sharing, limit uses of Sensitive Personal Information, and non-discrimination using the methods in Section 10.

California’s “Shine the Light” law permits California residents to request information about disclosures of Personal Information to third parties for direct marketing purposes. Such requests should include “California Shine the Light Request” in the subject line and should be submitted using the contact information in Section 10.

If we offer a financial incentive or price or service difference related to the collection, retention, sale, sharing, or deletion of Personal Information, we will provide a notice of financial incentive as required by applicable law.

12.2 Virginia, Colorado, Connecticut, and Utah. Residents of Virginia, Colorado, Connecticut, and Utah may have rights under applicable state consumer privacy laws, including rights to access, delete, correct, obtain a copy of Personal Information in portable format, opt out of sale, opt out of targeted advertising, opt out of certain profiling, appeal certain request decisions, and exercise rights relating to sensitive data. These rights may be exercised using the methods described in Section 10. Where state law requires recognition of opt-out preference signals, we honor such signals as described in Sections 4 and 5.

12.3 Other State Laws. Residents of Delaware, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Maryland, Minnesota, Kentucky, Rhode Island, and other states with applicable consumer privacy laws may exercise the rights available under those laws using the methods in Section 10. Where state law requires recognition of opt-out preference signals, we honor such signals as described in Sections 4 and 5.

12.4 Consumer Health Data Privacy Notice for Washington and Nevada. This Consumer Health Data Privacy Notice supplements Hissho’s Privacy Notice and applies to consumer health data covered by Washington’s My Health My Data Act, Nevada’s consumer health data law, and similar laws. Consumer health data may include information you provide or that we receive about allergies, dietary restrictions, food-safety inquiries, health-related incidents, injury claims, symptoms, product quality concerns, or related communications. We collect and use consumer health data only to respond to your request, investigate and manage incidents or claims, address food-safety, allergen, quality, or health and safety matters, comply with law, protect rights and safety, and provide products or services you request. We do not sell consumer health data. We share consumer health data only with service providers, processors, franchisees, host or retail partners, insurers, claims administrators, professional advisors, legal authorities, and other parties where necessary for the purposes described in this notice or as permitted by law.

12.5 California Workforce and B2B Privacy Notice. This California Workforce and Business Contact Privacy Notice applies to California residents whose Personal Information Hissho collects in a job applicant, employee, contractor, franchise, supplier, host partner, retail partner, or other business-contact context. It supplements Hissho’s Privacy Notice and describes the categories of Personal Information we collect, the purposes for which we use it, the categories of recipients to whom we disclose it, applicable retention criteria, and the rights available under California law.

12.6 California Collection and Disclosure Categories. The following disclosures summarize categories of Personal Information we may collect, the sources of that information, the purposes for which we may use it, and the categories of recipients to whom we may disclose it. We may also use any category of Personal Information to comply with legal obligations, pursue or defend against legal actions or claims, and protect the rights, property, life, health, security, or safety of us or any third party.

Category	Sources	Purposes	Recipients
Identifiers	Customers, website visitors, service providers, affiliates, franchisees, host locations, retail partners, business partners	Customer service, order processing, payment processing, promotions, marketing, analytics, fraud prevention, auditing, claims administration	Website providers, service providers, retail partners, affiliates, law enforcement, insurers, advertising networks, analytics providers
Financial Information	Customers, payment processors	Order and payment processing, fraud prevention, customer service	Website providers, retail partners, payment processors, financial institutions, service providers, law enforcement
Physical Characteristics or Description	Retail partners, customers, franchisees, host locations, insurers, claims administrators, law enforcement	Security incidents, fraud prevention, claims administration, health and safety	Website providers, retail partners, affiliates, law enforcement, insurers, claims administrators
Medical, Health, Allergen, or Incident-Related Information	Retail partners, franchisees, host locations, customers, insurers, claims administrators	Claims administration, incident handling, food-safety and allergen inquiries, legal compliance, health and safety	Website providers, retail partners, franchisees, host locations, insurers, claims administrators, professional advisors, legal authorities
Demographic Information	Retail partners, customers, service providers, affiliates, business partners	Customer service, research, marketing, analytics, promotions, claims administration	Website providers, retail partners, affiliates, service providers, law enforcement
Commercial Information	Retail partners, customers, service providers, affiliates, loyalty providers, ordering platforms, business partners	Customer service, order processing, marketing, analytics, fraud prevention, loyalty and promotion administration	Website providers, retail partners, affiliates, service providers, advertising networks, analytics providers, law enforcement
Internet or Other Electronic Network Activity	Retail partners, service providers, affiliates, advertising partners, analytics providers, automatically from browsers and devices	Customer service, marketing, analytics, research, fraud prevention, auditing, debugging, targeted advertising	Website providers, retail partners, affiliates, advertising networks, analytics providers, marketing technology providers, law enforcement
Geolocation Data	Customers, browsers, devices, service providers	Customer service, location-based features, suggesting nearby Hissho Sushi locations	Service providers, technology providers
Audio, Visual, or Sensory Information	Retail partners, host locations, franchisees, customers, service providers	Customer service, security incidents, fraud prevention, claims administration	Website providers, retail partners, host locations, franchisees, insurers, claims administrators, service providers, law enforcement
Survey, Promotion, and Preference Information	Retail partners, service providers, affiliates, customers, promotion partners	Customer service, marketing, analytics, research, promotion administration	Website providers, retail partners, promotion partners, affiliates, service providers
Professional, Franchise, Partner, Applicant, and Workforce Information	Franchisees, prospective franchisees, host partners, retail partners, suppliers, job applicants, employees, contractors, business contacts, service providers, public sources	Franchise evaluation and administration, regulatory compliance, training, brand standards, food-safety programs, recruiting, hiring, legal compliance	Service providers, franchise support personnel, trainers, auditors, insurers, professional advisors, legal authorities, host partners
Other Information	Customers, business contacts, service providers, affiliates, retail partners, franchisees, host locations, insurers, claims administrators	Purposes disclosed at collection, customer service, claims management, legal compliance, rights protection	Website providers, service providers, retail partners, franchisees, host locations, affiliates, insurers, claims administrators

13. NOTICES TO FRANCHISEES, HOST PARTNERS, BUSINESS CONTACTS, JOB APPLICANTS, AND WORKFORCE PARTICIPANTS

13.1 Franchisees, Prospective Franchisees, Host Partners, and Business Contacts: We collect Personal Information from franchisees, prospective franchisees, franchise owners, principals, guarantors, operators, host partners, retail partners, suppliers, university contacts, hospital contacts, corporate food service contacts, and other business representatives. This information may include business contact details, financial qualification information, ownership information, background information, contract and insurance information, tax information, training records, operational data, compliance information, and communications.

We use this information to evaluate franchise applications, comply with franchise disclosure and regulatory obligations, administer franchise and commercial agreements, provide training and support, protect brand standards, support food-safety and quality programs, manage disputes, evaluate operational performance, maintain business records, and comply with applicable law.

13.2 Franchisee Independence: Franchisees are independent businesses and may separately collect and process Personal Information from their own customers, employees, contractors, and business contacts. Unless Hissho expressly states otherwise, this Privacy Notice does not govern the independent privacy practices of franchisees.

13.3 Job Applicants and Workforce Participants: If you apply for employment or otherwise interact with us in a workforce-related capacity, we may collect and use Personal Information to evaluate your application, communicate with you, conduct interviews, verify information, conduct background checks where permitted by law, make hiring decisions, comply with legal obligations, and protect legal rights.

13.4 Exercising Rights: Franchisees, host partners, business contacts, job applicants, and workforce participants whose rights are covered by applicable law may exercise those rights using the methods described in Section 10.

14. DATA RETENTION, CHILDREN’S PRIVACY, DATA SECURITY, INTERNATIONAL USERS, CHANGES TO THIS NOTICE, AND CONTACT INFORMATION

14.1. Data Retention: We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Notice, unless a longer period is required or permitted by law. Retention criteria include the nature of the information, the purpose of collection, legal and regulatory requirements, food-safety and incident-management obligations, franchise and business-record obligations, contractual obligations, dispute and claim considerations, and operational requirements. When Personal Information is no longer needed, we delete, deidentify, aggregate, or otherwise dispose of it in accordance with our records-retention practices.

14.2. Children’s Privacy: Our Websites and Services are not directed to children under 13 years of age, and we do not knowingly collect Personal Information from children under 13 without verifiable parental consent. If we learn that we have collected such information without required consent, we will delete it or obtain required consent. We do not knowingly sell or share Personal Information of consumers under 16 years of age without affirmative authorization where required by law.

14.3. Data Security: We take reasonable steps to maintain administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, disclosure, alteration, and destruction. These safeguards may include access controls, vendor management, employee training, encryption where appropriate, monitoring, and incident-response procedures. No method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure. While we strive to protect your Personal Information, we cannot guarantee the security of information collected through the Websites or Services. If we identify a security incident involving Personal Information, we will provide notices required by applicable law.

14.4. Users Outside of the United States of America: We are based in the United States, and the information we collect is governed by U.S. law. If you access the Websites or Services from outside the United States, information collected through the Websites or Services may be transferred to, stored in, processed, and used in the United States, where privacy laws may differ from those in your jurisdiction. Where required, we use lawful transfer mechanisms for Personal Information transferred from the European Economic Area, the United Kingdom, Switzerland, or other jurisdictions requiring such mechanisms.

14.5. Changes to this Privacy Notice: We may change this Privacy Notice from time to time. If we make changes, we will notify you by revising the date at the top of this Privacy Notice and, in some cases, by providing additional notice through our Websites, email, or other appropriate means. Any changes will be effective upon posting of the revised Privacy Notice or as otherwise stated. Your continued use of the Websites or Services after the revised Privacy Notice becomes effective indicates your consent to the Privacy Notice then posted, to the extent permitted by applicable law. If you do not agree, discontinue use of the Websites and Services and uninstall applicable downloads and apps. We will not use Personal Information collected under a prior Privacy Notice in a materially different manner without providing notice or obtaining consent where required by applicable law. To the extent any provision of this Privacy Notice is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.

14.6. Contact Us: If you have questions or concerns about this Privacy Notice, our privacy practices, or your privacy rights, you may contact us at:

Lwin Family Co, LLC d/b/a Hissho Sushi, Attn: Privacy / Legal, 3623 Lazy Hawk Rd, Suite 101, Rock Hill, South Carolina 29730
Email: privacy@hisshosushi.com
Webform: [privacy rights request webform coming soon…]