Privacy Policy

Thank you for visiting the New York State Liquor Authority (Authority) website. This website is designed to make it easier and more efficient for individuals and businesses to interact with the Authority. The Authority recognizes that it is critical for individuals and businesses to be confident that their privacy is protected when they visit the Authority website.

Consistent with the provisions of the Internet Security and Privacy Act, the Freedom of Information Law, and the Personal Privacy Protection Law, this policy describes the Authority's privacy practices regarding information collected from users of this website. This policy describes what information is collected and how that information is used. Because this privacy policy only applies to this website, you should examine the privacy policy of any website, including other state agency websites, that you access using this website.

For purposes of this policy, "personal information" means any information concerning a natural person which, because of name, number, symbol, mark, or other identifier, can be used to identify that natural person. The Authority does not collect any personal information about you unless you provide that information voluntarily by sending an e-mail, or completing an on-line transaction.


Cookies

Cookies are simple text files stored on your web browser to provide a means of distinguishing among users of this website. The use of cookies is a standard practice among Internet websites. To better serve you, we occasionally use "session cookies" to enhance or customize your visit to this website. Session cookies can be created automatically on the device you use to access this state agency website do not contain personal information and do not compromise your privacy or security. We may use the cookie feature to store a randomly generated identifying tag on the device you use to access this website. A session cookie is erased during operation of your browser or when your browser is closed.

The software and hardware you use to access the website allows you to refuse new cookies or delete existing cookies. Refusing or deleting these cookies may limit your ability to take advantage of some features of this website.


Information Collected When you E-mail This Website or Initiate an Online Transaction

During your visit to this website you may send an e-mail to the Authority. Your e-mail address and the contents of your message will be collected. The information collected is not limited to text characters and may include audio, video, and graphic information formats included in the message. Your e-mail address and the information included in your message will be used to respond to you, to address issues you identify, to improve this website, or to forward your message to another State agency for appropriate action. Your e-mail address is not collected for commercial purposes and the Authority is not authorized to sell or otherwise disclose your e-mail address for commercial purposes.

During your visit to this website you may complete an online transaction such as a license or permit application or renewal. The information, including personal information, volunteered by you in completing the transaction is used by the Authority to operate Authority programs, which include the provision of goods, services, and information. The information collected by the Authority may be disclosed by the Authority for those purposes that may be reasonably ascertained from the nature and terms of the transaction in which the information was submitted.

The Authority does not knowingly collect personal information from children or create profiles of children through this website. Users are cautioned, however, that the collection of personal information submitted in an e-mail will be treated as though it was submitted by an adult, and may, unless exempted from access by federal or State law, be subject to public access. The Authority strongly encourages parents and teachers to be involved in children's Internet activities and to provide guidance whenever children are asked to provide personal information online.


Information and Choice

As noted above, the Authority does not collect any personal information about you during your visit to this website unless you provide that information voluntarily by sending an e-mail or initiating an online transaction. You may choose not to send us an e-mail, or complete an online transaction. While your choice not to participate in these activities may limit your ability to receive specific services or products through this website, it will not prevent you from requesting services or products from Authority by other means and will not normally have an impact on your ability to take advantage of other features of the website, including browsing or downloading publicly available information.


Disclosure of Information Collected Through This Website

The collection of information through this website and the disclosure of that information are subject to the provisions of the Internet Security and Privacy Act. The Authority will only collect personal information through this website or disclose personal information collected through this website if the user has consented to the collection or disclosure of such personal information. The voluntary disclosure of personal information to the Authority by the user, whether solicited or unsolicited, constitutes consent to the collection and disclosure of the information by the Authority for the purposes for which the user disclosed the information to the NYSLA, as was reasonably ascertainable from the nature and terms of the disclosure.

However, the Authority may collect or disclose personal information without consent if the collection or disclosure is: (1) necessary to perform the statutory duties of the Authority , or necessary for the Authority to operate a program authorized by law, or authorized by state or federal statute or regulation; (2) made pursuant to a court order or by law; (3) for the purpose of validating the identity of the user; or (4) of information to be used solely for statistical purposes that is in a form that cannot be used to identify any particular person.

Further, the disclosure of information, including personal information, collected through this website is subject to the provisions of the Freedom of Information Law and the Personal Privacy Protection Law.

The Authority may disclose personal information to federal or state law enforcement authorities to enforce the Authority's rights against unauthorized access or attempted unauthorized access to the Authority's  information technology assets.


Retention of Information Collected Through This Website

The information collected through this website is retained by the Authority in accordance with the records retention and disposition requirements of the New York State Arts & Cultural Affairs Law.  Information, including personal information, that you submit in an e-mail or when you complete an online transaction is retained in accordance with the records retention and disposition schedule established for the records of the program unit to which you submitted the information. Information concerning these records retention and disposition schedules may be obtained through the Internet privacy policy contact listed in this policy.


Access to and Correction of Personal Information Collected Through This Website

Any user may submit a request to the Authority privacy compliance officer to determine whether personal information pertaining to that user has been collected through this website. Any such request shall be made in writing and must be accompanied by reasonable proof of identity of the user. Reasonable proof of identity may include verification of a signature, inclusion of an identifier generally known only to the user, or similar appropriate identification. The address of the privacy compliance officer is:

Public Information Office

80 S. Swan Street, Suite 900

Albany, NY 12210-8002

((518) 474-3114 and select option 3 or send an email to: [email protected]

The privacy compliance officer shall, within five (5) business days of the receipt of a proper request, provide access to the personal information; deny access in writing, explaining the reasons therefore; or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not be more than thirty (30) days from the date of the acknowledgment.

In the event that the Authority has collected personal information pertaining to a user through the state agency website and that information is to be provided to the user pursuant to the user's request, the privacy compliance officer shall inform the user of his or her right to request that the personal information be amended or corrected under the procedures set forth in section 95 of the Public Officers Law.