Privacy Policy

1. Information We Collect and Receive

We collect and receive the following categories of information:

• Information You Provide Directly. We receive the information you choose to provide when using our Services.
• For example, in connection with certain uses of our Services, such as when you register for our Services, bid on or purchase products on our Services, send or receive tickets, sign up to receive newsletters, email updates, or electronic or other marketing communications, sign up to learn more about our upcoming events, enter a contest or sweepstakes, comment on an article, communicate with customer service, or complete a survey or questionnaire, you may be asked to provide information about yourself including:
  • Identifiers such as your first and last name, username, mailing address, phone number, date of birth, email address and mobile phone number;
  • Commercial information, including payment information and a record of your purchases and services you have obtained;
  • Demographic information, such as language spoken, age, gender, race/ethnicity, household composition, income and size;
  • Passwords, login information and other preferences;
  • Photographs or videos; and
  • Sensitive Personal Information, such as account log-in and password, precise location and racial or ethnic origin.
  • Other information about your use of our Services.
• If you send us personal correspondence by electronic means, such as email, we may collect and maintain information provided by the correspondence in a file specific to you.
• Before gaining access to certain Services, you may be asked to complete a registration form (via formstack or otherwise) and provide personally identifiable information. You also may be asked to choose a user ID and password in order to take advantage of certain features through the Services, such as contests, forums, webcasts or other subscription-based services.
• Chat rooms, forums and message boards may also be available through the Services. Information you post in chat rooms, forums and message boards is public and may be seen by anyone. We strongly recommend that you do not disclose any of your personally identifiable information in any chat room, forum or on any message board, as we cannot control who may view such information.
• Information We Collect or Receive When You Use Our Services. We also collect or receive information when you use our Services. We collect some of this information using cookies, web beacons, and other technologies. This information that we collect automatically may be combined with other information about you in order to personalize content, communications and advertising based on your interests. Depending on how you access and use our Services, we may receive:
  • Internet or other electronic network information. This is information we automatically collect and store when you use and interact with our Services, including, for example:

• Information about your interactions with our Services, including the content you view, the products you bid on or purchase, the amount of time spent on our Services, the date on which you accessed our Services, and information in cookies and similar technologies; and
• Information about how you access our Services, including your browser or operating system, your Internet Protocol (“IP”) address, and browsing history including the websites you visit before and after visiting our Services

• • Device information. This is information we collect and store concerning the device you use when you access our Services. (Note that by “device,” we mean any equipment or technology you use to access our Services.) Device information may include, for example:

• The type of device you are using (e.g., your particular brand of phone or tablet);
• Certain device identifiers which may be unique to your device;
• Your Internet service provider; and
• Depending on your permissions, content you have stored on your device (e.g., contacts stored on your phone).

• • Location information. This information may include specific geolocation data drawn from your device’s GPS, Bluetooth and WiFi signals and nearby cell towers. We receive this information, for example, when you choose to use location-enabled services that we offer.
  • Inferences. We may generate inferences about your preferences and characteristics based on your use of the Services and other information we have about you.
  • Commercial information. We capture certain information automatically when you make purchases or obtain services from us, such as a record of the purchases and services you have obtained and information about the time of the purchase, and ticket transfer/receipt information.
  • Chat.  We may collect information when you use our chat function to have a one-on-one dialogue with our chatbots and representatives.
  • SMS/MMS.  We collect information through SMS and MMS messaging in certain circumstances where we have your consent to do so.
• Information from Third-Party Sources. We receive information from third-party sources such as the National Hockey League (NHL) and its affiliates, Ticketmaster, Fevo, Fanatics, other Business Partners, publicly or commercially available sources, social networking services, and data providers that allow us to append data and build customer profiles.  This Privacy Policy addresses the use and disclosure of information we collect from you. For some services, we may post links to other merchants, sites and services who may collect and use your personal information. We encourage you to read the Privacy Policy of any third-party website or social media platform you visit, and to ask questions and to be very cautious before you disclose your personal information to others.
  • NHL. The NHL may collect information relating to your use of its services and share that information with us.
  • Ticketmaster and Fevo.  We receive certain purchase information (such as ticket purchase, transfer and receipt behavior, your name, address and contact information but not your full payment card information) from Ticketmaster and Fevo when you make a ticket purchase.  For information about Ticketmaster’s or Fevo’s privacy practices, please see the applicable privacy policy on their platforms.
  • Fanatics. The NHL has engaged Fanatics to operate NHLShop.com, NHLShop.ca, and Shop.International.NHL.com (collectively, “NHL Shop”) and Auctions.NHL.com (“Auctions”). We may receive certain purchase information (such as purchase behavior, your name, address and contact information but not your full payment card information) from Fanatics, for example, when you make a purchase on NHL Shop. For information about Fanatics’ privacy practices, please see the applicable Fanatics privacy policy.
  • Other Business Partners. We may receive information about you from other Business Partners, including when you sign up to receive Devils or Prudential Center news and offers on a third-party site or while using a third-party service.
  • Publicly or commercially available sources. We may receive information about you that is publicly or commercially available, including from data vendors where we are permitted to do so.
  • Social networking services. If you choose to connect with social networking services while using our Services, we may receive certain information about you, such as your username. See below for more information about social networking services.
  • Data providers.  We may provide data to data providers so they can provide enhanced data back to us, including demographic information, purchase behavior and other personally identifiable information.

We may combine the information we have collected or received about you in different ways, including to develop inferences about you. For example, we may infer information about your preferences for engaging with us.

3. How We Disclose the Information We Collect and Receive

We may disclose information that we collect and receive with third parties when we have your consent or as described below.

We disclose information with the following types of third parties:

• Our affiliates and related entities. We share information with current and future “affiliates,” a term that includes our parent and subsidiary companies, joint venture partners, or other companies we control, are controlled by, with which we are under common control, or with which we share at least one common owner, for the purposes set out in this Privacy Policy. We also share information with the NHL and its affiliates.
• Our service providers. We provide information to affiliated and unaffiliated service providers and others that perform certain functions or services for us, such as to host our Services and data, fulfill orders, provide products and services, manage databases, perform analyses or advertising services (including vendors that provide enhanced data to allow us to append data and build customer profiles), administer our contests and sweepstakes, collect location data, provide location-based services, process credit card payments, provide customer service, or send communications for us.
• Business Partners. When you consent to receive news and offers from them, we share information about you with select Business Partners, such as our sponsors, retailers, and broadcast partners, so that they can provide you with special offers, promotional materials, and other materials and information that may be of interest to you. To opt out of receiving further communications directly from these Business Partners, please contact the Business Partner. Please see the Your Other Privacy Choices section for more information on the choices we provide you. We also may disclose personal information with co-brand and other partners when you choose to be involved in their programs or where you provide your information to us in order to transact with, donate to, or otherwise interact with the partner. We are not responsible for the privacy practices of our Business Partners or other third party partners, which may use your information for their own purposes.
• Advertising partners. We may also disclose information to our advertising partners for targeted advertising purposes, including through the use of cookies, web beacons, and other technologies as described further in Section 4 below.
• Other parties in response to legal process or when necessary to protect us or our Services. We or our service providers may disclose your information — including the contents of your communications — to other parties when required or permitted by applicable law in the jurisdictions in which we or our service providers are located, such as when we have a good faith belief that:
  • Doing so is necessary to respond to lawful governmental requests or legal process (for example, a court order, search warrant, or subpoena);
  • The information is relevant to a crime that has been or is being committed;
  • An emergency exists that poses a threat to your safety or the safety of another person or persons; or
  • Doing so is necessary to protect our rights or property or to enforce our Terms of Service.
• Other parties in connection with certain business transactions. In the event of a prospective or actual change in ownership of any of the HBSE Parties (or any portion of our assets) as a result of a merger, acquisition, or in the unlikely event of a bankruptcy, your information may be transferred to another entity. If such a transaction occurs, we will notify you in an update to this Privacy Policy or through another appropriate means.
• Interactive features. Information may also be shared with or made available to third parties when you post information to a public user profile or a public area of our Services, such as a chat room, forum, blog, or other community tool, or when you participate in public events or activities. You are responsible for any information you post to these interactive features. We cannot ensure that parties who have access to such information will respect your privacy. Please exercise caution when using these features.

While we do not sell Personal Information in exchange for any monetary consideration, we do share Personal Information for other benefits as defined by California and Connecticut law. We have shared in the preceding 12 months, Personal Information as necessary for specific business purposes above. We do not knowingly sell or share the personal information of children under the age of 16 without affirmative authorization.

We also may share other information with third parties in a manner that does not identify particular users, including, for example, aggregated or deidentified information.

If you would like to opt-out of the selling and sharing of personal information, please see Section 6 or the “Do Not Sell or Share Personal Information” link on our website.

5. Data Subject Rights

Depending on the jurisdiction in which you live, you may have certain rights as a data subject under local law, including:

• To request to access your personal information, including, where applicable, in a commonly-used electronic format, and to request other information about our data processing practices;
• To request to update or correct inaccuracies in your personal information;
• To request to delete certain personal information in our custody and control;
• To request to withdraw or revoke consent, such as where we are relying on consent as the legal basis to process your personal information (where that concept is recognized) or where we are processing your sensitive personal information pursuant to your consent; and
• To request to object to or restrict the processing of your personal information.

In each case, these rights are subject to certain exceptions prescribed by law. If you would like to access, delete, or correct your information or otherwise exercise your rights, please contact us as set out in the Contact Us section below. Depending on the type of request you have made, we may request further information from you to verify your request, such as your account details and, where necessary, copies of government issued identification. You may also be entitled to appeal our decisions with respect to your data rights in accordance with local laws, and may do so by following the instructions provided in the correspondence we sent to you communicating our decision. You may also be entitled to appoint an authorized agent to exercise rights on your behalf, in which case we may request further information to validate the identity of your agent or that the agent is authorized to act on your behalf.

Depending on the jurisdiction in which you live, you also may have the right to request to limit the use or disclosure of your sensitive personal information. You can exercise your right to limit by clicking on the “Your Privacy Choices” link in the footer of relevant websites and mobile applications. You may also, depending on the jurisdiction in which you live, have rights to opt out of the “sale” of your personal information, the “sharing” of your personal information (for targeted advertising), or all processing of your personal information for targeted advertising. You may also click on the “Your Privacy Choices” link to exercise these rights. Please also review the “Your Other Privacy Choices” section below for more information about how to make these advertising-related requests.

We may disclose your personal data by allowing certain third parties (such as online advertising services, social networks, and data analytics providers) to collect personal data through automated technologies on our Services for targeted advertising purposes.  We also may disclose your personal data to Business Partners and other third parties for their own marketing purposes.  These kinds of sharing activities may be considered “sales” under certain laws. They also may be considered sharing or processing of personal data for targeted advertising under applicable law.

We will not discriminate against you for exercising these rights, although some of the functionality and features available to you may change or no longer be available to you.

7. Security & Retention

We have adopted physical, technical, and administrative safeguards to help protect against theft, loss, misuse, and unauthorized access to or disclosure of the information we collect and receive. However, please note that no data transmission or storage can be guaranteed to be 100% secure. As a result, while we strive to protect your information and privacy, we cannot and do not guarantee or warrant the security of any information you disclose or transmit to our Services and cannot be responsible for the theft, destruction, or inadvertent disclosure of your information, or any other disclosures out of our control.

Your online access to some of your information may be protected with a password that you select. We strongly recommend that you select a unique password that is difficult to guess and that you do not disclose your password to anyone. We will never ask you for your password in any unsolicited communication (such as letters, phone calls, or email messages).

We retain personal information for only as long as we need it to provide the Services, for purposes described in this Privacy Policy, after which we take steps to delete or anonymize information. Among the criteria used to determine our retention periods include the length of your relationship with us, any retention periods that are mandated by law, and whether retention is required pursuant to litigation or regulatory investigations.

9. Third Party Links

Our Services may contain links to other sites that we do not own or operate. Also, links to our Services may be featured on third party services on which we advertise. We provide links to third-party services as a convenience to our users. These links are not intended as an endorsement of or referral to the linked services. The linked services should have separate and independent privacy statements, notices, and terms of use, which we recommend you read carefully. We do not have any control over such services, and therefore we take no responsibility and assume no liability for the manner in which the entities that operate such linked services may collect, use, disclose, secure, or otherwise treat your information.

11. Additional California Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) may provide you with the right to:

1. Know About Your Personal Information, including:
   • categories and/or specific pieces of Personal Data we have collected about you,
   • categories of sources for that personal information,
   • Purposes for which we use that information,
   • Categories of third parties with whom we disclose the information to,
   • Categories of information we sell or disclose to third parties.
2. Delete Your Personal Information
   • You may request we delete personal information that we have collected from you, subject to exemptions.
3. Correct Your Personal Information
   • You may ask us to correct certain personal data we hold about you.
4. Opt-Out of the Selling or Sharing of Personal Information
   • You may ask us to stop selling or sharing your personal information.
5. Non-Discrimination
   • We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, please submit a request by emailing privacy@prucenter.com. For email requests, please write “Privacy” in the subject line and include in the body of the email your first and last name, email address, mailing address, and nature of the request. We will respond to your request within forty-five (45) days. However, in certain circumstances, we may require additional time to process your request, as permitted by the CCPA. We will advise you within forty-five (45) days after receiving your request if an extension is necessary and why it is needed. If we cannot fulfill your request, our response to you will explain the reason why we cannot fulfill your request. If an agent is submitting the request on your behalf, we reserve the right to validate the agent’s authority to act on your behalf.

Please see the Your Other Privacy Choices section for information on how to request to opt out of the sale/sharing of personal information. We do not knowingly sell or share the personal information of children under the age of 16 without affirmative authorization.

In addition to those rights outlined in the Your Other Privacy Choices section, California residents may also opt out of having their personally identifiable information shared with third parties for those third parties’ direct marketing purposes by contacting us as set out in the Contact Us section below.

In addition, California residents who are registered users of the Services and are under the age of 18 are entitled, in accordance with California law, to request and obtain removal of content and information that they themselves post as user content on the Services. You may request such removal by sending an email to: privacy@prucenter.com. Please write “Privacy” in the subject line and include in the body of the email (i) a statement that you are requesting, in accordance with California law, the removal of user content; (ii) a description of the material you want removed and information reasonably sufficient to permit us to locate the material; and (iii) your first name, last name, email address, mailing address (including city, state, and zip) and year of birth so that we can process your request. Please note that your request does not ensure the complete or comprehensive removal of the material.

How We Verify Your Identity and Requests

To process your request, we must be able to verify your identity or authority to make the request and confirm the personal information relates to you. Submitting your request through the authorized mechanisms allows us to verify your identity as required by the CCPA. As such, we cannot accept requests through other channels. We cannot process your request if you do not provide us with sufficient detail to respond to the request. We reserve the right to confirm your California residency. If we are not able to successfully identify your residency, we will inform you of the fact.

13 Further Information for visitors outside of the United States, including European Economic Area (“EEA”), United Kingdom, and China Residents.

International Transfers of Personal Information

Our headquarters are in the United States, and, regardless of where you use our Services or otherwise provide information to us, your information may be transferred to, maintained, and processed by the HBSE Parties and their affiliates, operational partners and service providers in the United States or other locations outside of your jurisdiction of residence. Please note that U.S. privacy laws, regulations, and standards may not be equivalent to the laws in your country of residence and such information may be subject to lawful access by U.S. courts, law enforcement, and governmental authorities. Please be aware that information we obtain as a result of your use of the Services may be collected, transferred, stored, and processed in the United States or another country in accordance with applicable law.

Legal Basis for Processing for EEA and UK Residents

To the extent our activities are subject to international data protection laws that specify limited legal grounds to process your information, the legal bases for our processing activities are to perform our contract(s) with you; to meet our legal obligations; and for our legitimate business purposes, including to improve our operations and Services, detect and prevent fraud, and enforce our Terms of Service. We rely on your consent to send you direct marketing messages about our products, services and promotions and to deliver targeted advertisements to you, both on and off the Services. If you do not provide certain information to us, we may, in some circumstances, be unable to comply with our obligations or provide you with the services that you request. We will tell you about the implications of not providing certain information.

EEA/UK Privacy Rights

In accordance with the GDPR, EEA/UK data subjects have the following rights:

• If the processing of personal data is based on your consent, the right to withdraw consent for future processing of that data
• The right to request access to and rectification of your personal data
• Subject to limitations as provided for in the GDPR, the right to request restriction of the processing of your personal data
• Subject to limitations as provided for in the GDPR, the right to request erasure of your personal data
• The right to receive, in a structured, commonly used and machine-readable format, the personal data you have provided to us based on your consent or a contract, and have such information transmitted to another company, where technically feasible (Data Portability)
• If you are not satisfied with our response, you also have the right to lodge a complaint about the processing of your personal data with a local data protection authority

Please see the Your Other Privacy Choices section for more information on how to withdraw your consent at any time and your data protection rights. In addition, you may lodge a complaint with the relevant supervisory authority if you consider that our processing of your personal information infringes applicable law. Contact details for all EEA Supervisory Authorities can be found here. You may exercise these rights by contacting us as provided in the Contact Us section below.

Where required by applicable law, we will request your consent to use cookies, send you promotional messages and deliver advertisements about products, tickets, services, programs, or events, or disclose your data to our partners and other third parties for these purposes.   For more information about our use of cookies, please see our Cookie Policy.

For children located in jurisdictions within the EEA or UK, we comply with the age limits applicable in each Member State.  In these instances, the references in our Privacy Policy to the age of 13 will be deemed to be references to the age limits applicable in each Member State.  Where this Privacy Policy refers to consent in relation to processing the personal data of any person under the age limits applicable in each Member State, such processing will require the consent of that person’s parent or legal guardian.

We may transfer your personal data from the EEA or UK to other jurisdictions as described in the Data Transfers section of our Privacy Policy.  Our practice when transferring personal data is to put in place appropriate safeguards as required by applicable law, such as relying on Standard Contract Clauses (Article 46 of the EU General Data Protection Regulation, the “GDPR”) or, in exceptional cases, individual consent (Article 49 of the GDPR). Subject to applicable law, you may obtain a copy of these safeguards by contacting us as described below.

Information for China Residents

In order to achieve the purposes described in the “How We Use the Information We Collect and Receive” section of this Privacy Policy, we may transfer your personal information to our database or headquarters and affiliates or other third parties outside of China.

If your personal information is transferred to such parties, we will use lawful cross-border transfer mechanisms to transfer your personal information and adopt necessary measures to ensure that such overseas recipients can provide the same level of protection as required under applicable Chinese laws.

15. Contact Us

If you have any questions about this Privacy Policy or the manner in which we or our service providers treat personal information, please contact us at privacy@prucenter.com and write “Privacy” in the subject line or write to us at:

Privacy Officer
Prudential Center
25 Lafayette Street
Newark, NJ 07928