Last Updated: September 5, 2025

321 H Opco, LLC, MZK Hospitality, LLC, and their respective affiliates (collectively, “Harthall” or “us” or “we” or “our”) operate the website available at harthallhotel.com (“Site”) which provides information to current and potential customers of our hotel services and amenities, and allows users to book hotel accommodations (collectively with the Site, the “Services”). To provide the Services, we may need to collect personal information from you and other individuals through our Site and/or at our physical hotel location. “Personal information” generally refers to information that can directly or indirectly identify or be associated with an individual or, in some cases, an individual’s household. Personal information does not generally include data that is anonymized, de-identified, or publicly available. This Privacy Policy (“Policy”) describes how we collect, use, share, retain, and otherwise process your personal information.

Changes to our Policy

We reserve the right to change this Policy at any time. Since this Policy may change as we modify or expand our Services or to comply with changes in applicable laws, we suggest you revisit this Policy from time to time to stay informed of any changes. Any substantive changes to this Policy will be described at the beginning of this Policy for a period of thirty (30) days. Our Policy’s most recent effective date will always be set forth at the beginning of the Policy. Any changes will be immediately incorporated into this Policy and will be prospective only. We will not make any changes that have retroactive effect unless legally required to do so. Your continued use of the Services after any changes are made to this Policy constitutes your acceptance of the changes. If any changes are unacceptable to you, you should cease all use of the Services. We will not collect new types of personal information beyond what is disclosed in this Policy without providing you with notice prior to the collection of that personal information. We will not use your personal information for an unexpected purpose beyond what is disclosed in this Policy without first providing you with notice of such change and, to the extent required under law, obtaining your consent.

IF YOU DO NOT AGREE WITH ANY ASPECT OF THIS POLICY, PLEASE DO NOT ACCESS OR USE THE SERVICES OR OTHERWISE PROVIDE US WITH YOUR PERSONAL INFORMATION. YOUR CONTINUED USE OF OUR SERVICES SIGNIFIES YOUR ACCEPTANCE OF THIS POLICY.

Policy Scope

Children’s Personal Information

The Services and this Policy apply to individuals who are 18 years of age or older. If you are not 18 years of age or older, you are NOT permitted to access or use the Services. If you learn that anyone younger than 18 has provided us with personal information, please contact us, and we will take steps to delete such information.

Non-US Resident Personal Information

In order to provide the Services, we will process your personal information in the United States, and we may need to share your personal information with service providers and business partners located in the United States and in other jurisdictions that may not afford the same level of privacy protection as the country where you currently reside. If you do not wish to have your personal information transferred to the United States, please do not provide us with your personal information or otherwise visit our Site. By providing us with your personal information and/or continuing to use our Site, you expressly consent to the transfer of your personal information to the United States. We process your personal information either in performance of a contract, for other legitimate interests, and/or with your consent. We are the data controller regarding the processing activities covered under this Policy,

Third Party Links

This Policy only applies to personal information that Harthall or our service providers collect from you through the Services. Please note that our Site may link to third-party services and/or external websites, which include social media platforms, reservation providers, and affiliates or marketing partners (collectively, “Third Parties”). However, we do not own or control these Third Parties, and we are not responsible for the content or privacy practices of such Third Parties, including their level of data sharing with other third parties. Additionally, we are not responsible for the data processing activities of the internet browser provider you choose to use when accessing our Site. Such Third Parties and internet browser providers may have their own privacy policies, and you should consult those policies accordingly before using their websites or applications.

For example, certain rooms or accommodations at our location are leased to tenants who may sublease such rooms or accommodations through platforms or services operated by Third Parties such as Airbnb. Such tenants and Airbnb also are Third Parties for purposes of this Policy, and if you reserve a room or other accommodations at our location through such Third Parties, then that transaction and any other interaction you have with such Third Parties will be subject to Airbnb’s privacy policy (currently available here) and any other terms and conditions applicable to Airbnb’s services.

Our Data Processing Activities

For information on the personal information we collect, use, and share from our website visitors and customers, please see the tables below. For further information on our online tracking activities on our Site, please see our Cookie Policy. 

Personal Information We Collect About You

Table 1: Personal information collected and purposes of collection

General Purposes

Any personal information described in Table 1 above may also be processed for any of the following general purposes:

• To provide customer support or technical support;
• To maintain our Site;
• To comply with legal, law enforcement, and/or government requirements or requests;
• To ensure the safety of our employees and customers;
• To monitor fraud or illegal activity;
• To exercise our legal rights; and
• To run our day-to-day business and facilitate corporate or other business transactions.

Sensitive Personal Information

We do not knowingly collect sensitive personal information about you. If you choose to provide sensitive personal information to us (for example food, accommodation, or venue requests that may indirectly reveal health information, religious beliefs, sexual orientation, or marital status), you consent to us processing your sensitive personal information in accordance with this Policy.

Personal Information Recipients

To provide the Services, we may need to share your personal information with the categories of service providers and third parties described in the table below.

Table 2: Categories of third parties who may receive your personal information 

General Recipients

The following third parties may receive any personal information listed in Table 1: 

• Data storage providers – to provide document retention or data storage services;
• IT or support service providers – to provide IT maintenance or support services;
• Law enforcement, government authorities, or judicial bodies – in the event of a legal requirement, inquiry, or investigation; and
• Potential purchasers or new managers of the hotel – in the event there is a change in our ownership or management status. 

Other Processing Activities

Email Marketing

You can opt out or unsubscribe to any marketing or promotional emails we send to you at any time by clicking on the “unsubscribe” link at the bottom of the email. 

If you forward or share any email communications you have received from us or our service providers, you assume responsibility for the email communication. Even if you have opted out of receiving marketing communications from us or our Third Party partner, please be aware that we may still contact you for other purposes. For example, we may contact you to provide communications you have otherwise consented to receive regarding the Services we provide to you, or if you contact us with an inquiry. 

Text Messages

We may send text messages to provide information on your bookings and/or to provide you with promotional information about our Services, provided that you must consent to receive automated text messages through an app provided by a Third Party, Kipsu. For more information about how Kipsu may collect and handle your personal information through this process, please review Kipsu’s privacy policy which is currently available here. If you wish to opt out of receiving automated text messages, please follow the instructions in any such message. Standard data usage fees may be charged by your mobile phone carrier when receiving text messages, so please be aware of such fees.

Your Privacy Rights and Choices

Depending on where you reside, you may have certain rights or choices that allow you to make requests with respect to your personal information (subject to applicable legal exceptions) including rights and/or choices to:

• Confirm whether we are processing your personal information and to access such information;
• Obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable format;
• Delete your personal information, (unless an applicable legal exception applies);
• Correct inaccuracies in your personal information;
• Consent to certain processing activities and later withdraw consent;
• Opt-out of the sale or sharing of your personal information for targeted advertising based on your browsing behavior before and after you visit our Site (if applicable); 
• Opt-out of any processing of your personal information for profiling in furtherance of decisions that produce legal or similarly significant effects (if applicable);
• Submit an appeal if we initially reject your privacy request; 
• Submit a complaint to your applicable State Attorney General or regulatory authority; and/or
• Not have discriminatory action taken against you for exercising your rights.

Sale of Personal Information / Sharing of Personal Information for Targeted Advertising

We do not sell your personal information but we share your personal information for targeted advertising purposes.

Profiling / Automated Decision-making

We do not process your personal information for purposes of creating a profile about you based on your interests or behavior and you will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless we have a lawful basis for doing so and we have notified you.

How to Submit a Privacy Request 

If you would like to submit a request to exercise any of the above rights (“Privacy Request”), please contact us using the information in this Policy. Further information on the steps needed to complete your Privacy Request is detailed below. 

Step 1: Verifying your Privacy Request.

Before we can fulfill your Privacy Request, we need to (a) verify your identity or your authority to make the request (if the Privacy Request is submitted through an authorized agent, as described below) and (b) confirm that the personal information you are requesting belongs to you. 

For most requests, we will ask you to provide information that matches at least two pieces of personal information we store about you before responding to your Privacy Request. If you would like to request specific pieces of personal information that we have collected, you will need to match at least three pieces of information we store about you, and you must provide a signed declaration under penalty of perjury that you are the consumer whose personal information you are requesting.  

We may refuse any request if we are unable to verify the identity of the person making the request or if we cannot authenticate the legitimacy of the request using commercially reasonable efforts. Under such circumstances, we may follow up with you for additional information as reasonably necessary to authenticate your request. We will only use personal information provided in a Privacy Request to verify the requestor’s identity or authority to submit the Privacy Request.

Authorized Agents

You may grant an authorized agent written permission to submit Privacy Requests, but we may deny requests from an authorized agent if we are unable to verify your identity directly as the subject of the personal information at issue. We also may deny Privacy Requests if we cannot confirm that the agent has the authority to make the request on your behalf. To verify a Privacy Request from an authorized agent, we may require you to directly confirm with us that you provided permission for the authorized agent to submit your Privacy Request, and we may ask you to verify your identity directly with us.

Step 2: Responding to your Privacy Request.

After verifying your identity, we will respond by either fulfilling your Privacy Request or explaining why we denied your Privacy Request. The timeframe in which we respond will vary based on the applicable law where you reside. If we deny your Privacy Request, you may have the option under applicable law to appeal this decision by contacting us. If you are concerned with the result of your appeal, you may have the right to contact your State Attorney General or applicable data protection authority.   

Deletion Requests

Please note that for deletion requests, any removal of content by us does not ensure or guarantee complete or comprehensive removal in all places. The content may have been shared or reposted by other parties who act outside of any business relationship with us or who may not cooperate with our request to delete your personal information, or federal or state law may require maintenance of the content or information. We will do our best to accommodate your Privacy Request, but we cannot guarantee we can remove all personal information from the specified uses. Therefore, please be as specific as possible in your Privacy Request. If the Privacy Request relates to information that we need to provide Services to you, you may not be able to use the Services properly moving forward. We reserve the right to maintain proper business records as required by law, or for otherwise legitimate business purposes to the extent permitted by law, even if such records contain your personal information.  

Data Retention

We retain personal information as needed to provide our Services or for other legitimate purposes such as ensuring the security of our data and systems, complying with legal obligations, complying with tax, audit, or other recordkeeping policies, resolving disputes, conducting internal investigations, and enforcing our agreements or other legal rights. Due to the different purposes for retaining your personal information, the actual retention timeframes may vary depending on the type of personal information we collect from you and the purposes for which we use your personal information. If we determine that your personal information is no longer needed for the purposes described above, it will be archived, deleted, or anonymized so that it can no longer be attributed to you. Our collection times will be consistent with applicable law. Please note that residual copies of your personal information may be removed from backup systems subject to our backup data retention schedule. 

Data Security

We have implemented technical and organizational measures that are reasonably designed to address the risk of loss, misuse, alteration, or unauthorized disclosure of personal information under our control. We limit access to your personal information to those employees, agents, contractors, service providers, and other third parties who have a need to know such information to provide the Services or in instances where disclosure is necessary in special cases, such as in response to a physical threat to you or others, as permitted by applicable law. We require our service providers to only process your personal information to provide services on our behalf and to implement security measures designed to keep your information confidential and secure.

While we have employed security procedures to assist in safeguarding your personal information, no system or network can be guaranteed to be 100% secure, and we cannot guarantee that any information you send over the internet is fully secure. You should exercise discretion in what information you disclose and/or transmit through our Site. The transmitted information may be intercepted by others before it reaches us. If you are concerned about sending information to us over the internet, please send the information by mail or call us to make other arrangements. We are not responsible for the security of information transmitted online. Likewise, when you click on Third Party links from our Site, we cannot control the security measures used on such Third Party sites or applications. 

Contact Information

If you have any questions about this Policy or wish to submit a Privacy Request or complaint, please contact us at:

Email: guestservices@harthallhotel.com 
Phone: 629-231-4001
Address: 321 Hart St., Nashville, TN  37210