1. Who We Are; Scope; Local Supplements. Stonehenge Management LLC (“Stonehenge,” “we,” “us,” or “our”) is responsible for processing “Personal Information” collected through our websites, mobile apps, resident portals, and any online services that link to this Privacy Policy. This Privacy Policy (this “Policy”) is part of, and incorporated into, the Terms of Use located at https://www.stonehengenyc.com/terms-of-use (the “Terms of Use”). Capitalized terms not defined in this Policy have the meanings given in the Terms of Use. Our Services are intended for use in the United States. Where required by law, we may publish state-specific privacy supplements that modify or supplement this Policy for residents of those states. If a supplement conflicts with this Policy for covered residents, the supplement controls. By accessing and using the Services, you consent to our collection, storage, use and disclosure of your Personal Information and other information as described in this Policy.
2. Categories of Information We Collect. We collect Personal Information (information that identifies or can reasonably be linked to you) and Anonymous/De-Identified Information (data that cannot identify you). The categories may include:
3. Sources of Information.
4. How We Use Information.
We rely on consent where required and otherwise process Personal Information for our legitimate business purposes, contractual performance, or legal obligations. For SPI, we limit use to necessary purposes (e.g., screening, payments, fraud prevention).
5. Cookie Policy – Automatic Data Collection. We and our partners use Cookies, Pixels, web beacons, SDKs, and similar tools (“Tracking Technologies”) to operate our Services, remember preferences, measure performance, and deliver or measure advertising.
5.1. Categories of Cookies:
5.2. Your Choices: Manage cookies via your browser settings, use Google’s opt-out tool (https://tools.google.com/dlpage/gaoptout), and visit Network Advertising Initiative (https://www.networkadvertising.org/choices/) or About Ads (https://optout.aboutads.info). If your browser supports Global Privacy Control (“GPC”), we treat it as an opt-out of sale/share where required by law.
6. How We Share Information. We may share Personal Information as follows:
6.1. Service Providers/Processors: Vendors providing hosting, payments, analytics, communications, or support. They may use information only to perform services for us and must protect it. Although Stonehenge selects vendors that maintain reasonable data-security standards, Stonehenge cannot guarantee or be responsible for the acts or omissions of third-party processors, platforms, or networks.
6.2. Affiliates: Entities under common ownership for internal operations.
6.3. Legal and Safety: When required by law, subpoena, or to protect rights and property.
6.4. Business Transactions: We may share all or some of your Personal Information with any of our subsidiaries, joint venturers, or other companies under common control, in which case we will require them to honor this Privacy Policy. Additionally, in the event we undergo a business transition such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge that such transfers may occur and are permitted by this Privacy Policy, and that any entity that acquires us, is merged with us or that acquires our assets may continue to process your Personal Information as set forth in this Privacy Policy.
6.5. Aggregated or De-Identified Data: Shared for analytics that cannot identify individuals.
We do not sell Personal Information for monetary value. We may “share” data for advertising as defined under California law, and you may opt out.
7. Data Retention. We retain Personal Information only as long as necessary to fulfill the purposes described in this Policy and comply with legal requirements. We delete, de-identify, or aggregate data when it is no longer needed.
8. Security. We employ administrative, technical, and physical safeguards to protect your data, including encryption in transit, access controls, and vendor due diligence. No system is perfectly secure. If required by law, we will notify you of any data breach in accordance with applicable timelines.
9. International Data Transfers. We operate in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S., which may have different privacy laws. When cross-border transfers are required, we implement appropriate safeguards and technical measures.
10. Your Choices.
10.1. Marketing: Unsubscribe using the link in any marketing email.
10.2. Cookies: See Section 5.2 for Cookie management.
10.3. Do Not Track: Our Services do not respond to DNT signals but honor GPC where applicable.
11. Text Message Communications. We may offer you the option to receive text (SMS or MMS) messages from Stonehenge, including messages relating to your residency, account, maintenance updates, package notifications, appointment reminders, or promotional offers (collectively, “Text Communications”). By enrolling in Text Communications, you represent that you are the current subscriber or customary user of the mobile number provided and that you have authority to consent to receive messages at that number. You agree to indemnify Stonehenge for any claims resulting from your provision of a number not owned by you. Stonehenge is not responsible for messages delayed or undelivered due to network or carrier issues. Automated dialing systems are used only to facilitate operational and informational messaging.
11.1. Consent. By providing your mobile phone number, you consent to receive Text Communications from Stonehenge and its affiliates at that number, including through automated means. Consent is not a condition of any lease. Message frequency may vary.
11.2. Opt-Out. You may opt out of Text Communications at any time by replying STOP to any message you receive from us. After you opt out, you may receive a one-time confirmation message acknowledging your request. You may also email privacy@stonehengenyc.com to withdraw consent.
11.3. Costs. Message and data rates may apply depending on your mobile plan and carrier.
11.4. Information Collected Through Text Communications. We may collect and retain information you provide via text (such as maintenance details or appointment confirmations) in accordance with this Policy. We use this information to process your requests, provide Services, and maintain records of your communications.
11.5. Security and Retention. We take reasonable steps to secure information transmitted via text message, but please avoid sending SPI or financial information by SMS. We retain such communications only as long as needed for our business or legal purposes.
12. Your Privacy Rights(U.S. State Laws). Residents of California, Colorado, Connecticut, Utah, and Virginia have some or all of these rights, subject to verification and exceptions: Access/Know; Delete; Correct; Data Portability; Opt Out of sale, sharing, or targeted advertising; Limit use of SPI; and Appeal a denial (CO/CT/VA).
13. Submit a Request: Email privacy@stonehengenyc.com; Mail: Attn: Legal Department, 1675 Broadway, 21st Floor, New York, NY 10019. Include your name, contact info, request type, and verification details. Authorized agents must present proof of authorization. We will not discriminate against you for exercising your rights.
14. California Privacy Supplement. For California residents, the following disclosures apply under the California Consumer Privacy Act (as amended): we collect the categories in Section 2; use them for the purposes in Section 4; and disclose them as in Section 6. We do not sell data for money. We may share certain identifiers and usage data for cross-context behavioral advertising. You may opt out by emailing privacy@stonehengenyc.com. We do not offer financial incentive programs based on your data. Shine the Light: California residents may request a list of third parties to whom we disclosed personal information for direct marketing in the preceding year by emailingprivacy@stonehengenyc.com with “Shine the Light” in the subject line.
15. Children’s Privacy. Our Services are not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided Personal Information to us, contact privacy@stonehengenyc.com and we will delete it promptly.
16. Third-Party Websites and No Liability. Our Services may link to or integrate with third-party sites and services. We are not responsible for their privacy practices or content. Once you leave our Services, their policies govern. We are not liable for unauthorized acts of third parties or for Internet transmission errors.
17. Changes to This Policy. We may update this Policy at any time without prior notice, and any changes will become effective immediately upon being posted unless we advise you otherwise. If changes are material, we will post an updated version with a new “Last Updated” date. Your continued use of the Services constitutes acceptance of the updated Policy.
18. Contact Us. For questions or privacy requests:
Email: privacy@stonehengenyc.com
Mail: Attn: Legal Department, Stonehenge Management LLC, 1675 Broadway, 21st Floor, New York, NY 10019
For your protection, we may need to verify your identity before responding to any request or inquiry. Do not include sensitive information such as Social Security numbers or payment details in unencrypted email. If you have a disability and need this Policy in another format, please contact us via the above methods.
19. Limitation of Liability. TO THE MAXIMUM EXTENT PERMITTED BY LAW, STONEHENGE AND ITS AFFILIATES, OFFICERS, MEMBERS, DIRECTORS, EMPLOYEES, PARENTS, AFFILIATES, SUCCESSORS AND ASSIGNS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR EXEMPLARY DAMAGES ARISING OUT OF OR IN CONNECTION WITH THIS POLICY OR THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
20. State-Specific Supplements. Where required, Stonehenge will publish state-specific supplements (e.g., California, Colorado, Connecticut, Utah, Virginia). If a supplement conflicts with this Policy for residents of that state, the supplement controls.