Last Updated: August 30, 2026

Tapestry at Ismaili Center (“Tapestry,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide when visiting or using our website, (the “Website”), contacting us, submitting information, making inquiries, or otherwise interacting with us.

This Privacy Policy explains what information we may collect, how we use and protect it, when we may share it, and the choices and rights you may have regarding your information.

By using the Website, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

The Website is operated by:

Tapestry at Ismaili Center
Ismaili Center, 1st Floor
2323 Allen Parkway
Houston, TX 77019
United States

For purposes of applicable privacy laws, the entity identified above is responsible for determining how personal information collected through the Website is used and processed.

2. Information We Collect

We may collect information directly from you, automatically when you use the Website, or from third parties.

Information You Provide Directly

Depending on how you interact with us, we may collect:

• Name
• Address
• Company or organization name
• Information submitted through contact or inquiry forms
• Reservation or event-related information
• Order information, if online ordering is available
• Newsletter or marketing preferences
• Messages, questions, comments, and other communications
• Information you voluntarily provide when interacting with us
• Any other information you choose to submit

We collect information that is reasonably necessary for the purpose for which it is provided.

3. Information Collected Automatically

When you visit the Website, certain information may automatically be collected by our servers, hosting provider, analytics tools, security services, or other technologies.

This may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Screen resolution
• Approximate geographic location derived from IP address
• Pages viewed
• Links clicked
• Date and time of visits
• Referring website or webpage
• Time spent on pages
• Website navigation and interaction information
• Error and diagnostic information
• Other technical information transmitted by your browser

This information may be used to operate, secure, maintain, analyze, and improve the Website.

4. Cookies and Similar Technologies

The Website may use cookies, pixels, tags, scripts, local storage, and similar technologies.

Cookies are small data files stored on your device that help a website recognize your browser and remember certain information.

We may use these technologies for the following purposes:

Essential Cookies

Essential cookies may be necessary to:

• Operate the Website
• Maintain security
• Remember certain settings
• Process forms
• Provide requested services
• Detect fraudulent or unauthorized activity

Disabling these cookies may affect Website functionality.

Analytics Cookies

We may use analytics services to understand:

• How visitors use the Website
• Which pages are visited
• How visitors navigate the Website
• Which content is most useful
• How the Website performs

Functional Cookies

Functional cookies may allow the Website to remember preferences and provide enhanced functionality.

Advertising and Marketing Technologies

If we use advertising, remarketing, social-media pixels, or similar technologies, those technologies may collect information about your Website activity to help us measure advertising campaigns or provide relevant advertising.

If the Website does not use advertising or remarketing technologies, this section should be removed.

5. How We Use Personal Information

We may use personal information for legitimate business purposes, including to:

• Operate and maintain the Website
• Respond to inquiries and requests
• Provide requested products or services
• Process reservations, orders, registrations, or event requests
• Communicate with visitors and customers
• Send requested information
• Send newsletters or promotional communications where permitted
• Manage customer relationships
• Improve our Website, services, offerings, events, and visitor experience
• Understand Website usage and visitor preferences
• Conduct analytics and performance measurement
• Maintain Website security
• Detect and prevent fraud, abuse, or unauthorized activity
• Troubleshoot technical problems
• Comply with applicable laws and legal obligations
• Establish, exercise, or defend legal claims
• Protect the rights, property, safety, and security of Tapestry, our visitors, employees, and others
• Fulfill other purposes disclosed at the time information is collected

We will not use personal information for materially different purposes without providing additional notice where required by law.

6. Marketing Communications

If you voluntarily subscribe to our communications or otherwise provide consent where required, we may send information concerning:

• Tapestry
• Café offerings
• Events
• Programs
• News and announcements
• Promotions
• Special offers
• Other information relevant to your relationship with us

You may unsubscribe from promotional communications at any time using the applicable unsubscribe mechanism provided with the communication.

Unsubscribing from promotional communications does not necessarily stop transactional or service-related communications that are necessary to fulfill a request or provide a service.

7. How We Share Personal Information

We do not sell personal information for money unless we clearly disclose such activity and provide any rights or choices required by applicable law.

We may share personal information with carefully selected third parties when reasonably necessary to operate our business.

Service Providers

These may include providers of:

• Website hosting
• Website maintenance
• Email delivery
• Analytics
• Cybersecurity
• Cloud storage
• Customer relationship management
• Website forms
• Reservation management
• Event registration
• Online ordering
• Payment processing
• IT support

These providers may access personal information only as reasonably necessary to perform services on our behalf or as otherwise permitted by law.

Payment Providers

If online payments are offered, payment information may be processed directly by third-party payment providers.

We generally do not store complete payment-card information on our own servers.

Payment providers may collect and process payment information according to their own privacy policies.

Legal Requirements

We may disclose personal information when reasonably necessary to:

• Comply with a subpoena, court order, legal process, or government request
• Enforce our agreements
• Protect our legal rights
• Investigate fraud or security incidents
• Protect the safety of individuals
• Comply with applicable law

Business Transfers

If Tapestry or substantially all of its assets are acquired, merged, reorganized, or transferred, personal information may be transferred as part of that transaction, subject to applicable law.

8. Third-Party Websites and Services

The Website may contain links to third-party websites, applications, social-media platforms, reservation systems, ordering platforms, maps, payment providers, or other third-party services.

These third parties operate independently from Tapestry.

Once you leave our Website or interact directly with a third-party service, that third party’s privacy policy and terms may apply.

We are not responsible for the privacy, security, content, or practices of third-party websites or services.

9. Social Media

The Website may contain links or integrations with social-media platforms.

If you interact with social-media content, widgets, buttons, or links, the applicable social-media provider may collect information about your interaction according to its own privacy policy.

We encourage you to review the privacy practices of any social-media platform you use.

10. Google Maps and Location Services

If the Website uses Google Maps or another mapping service to display our location, the mapping provider may collect information according to its own privacy policy.

This may include information about your device, IP address, location, or interaction with the map.

If no mapping service is installed on the Website, this section should be removed.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide requested services
• Maintain business and transaction records
• Fulfill legal and regulatory obligations
• Resolve disputes
• Enforce agreements
• Prevent fraud
• Maintain security
• Protect our legal interests

Retention periods vary depending on the type of information and why it was collected.

When personal information is no longer reasonably required, we may securely delete, anonymize, or otherwise dispose of it, subject to applicable legal and business requirements.

12. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, destruction, or misuse.

Security measures may include:

• Encryption in transit
• Access controls
• Authentication mechanisms
• Secure hosting
• Security monitoring
• Software and plugin updates
• Backups
• Administrative safeguards
• Limiting access to personal information to individuals who require it for legitimate business purposes

However, no method of transmission over the Internet or method of electronic storage is completely secure.

Accordingly, we cannot guarantee absolute security.

13. Children’s Privacy

The Website is intended for a general audience and is not directed to children under 13.

We do not knowingly collect personal information from children under 13 through the Website.

If we learn that we have collected personal information from a child under 13 without appropriate parental consent, we will take reasonable steps to delete the information.

14. Your Privacy Rights

Depending on where you live and whether applicable privacy laws apply to our business, you may have certain rights concerning your personal information.

These rights may include:

• The right to know what personal information we collect
• The right to access personal information
• The right to obtain information about how personal information is used
• The right to know the categories of third parties with whom information is shared
• The right to correct inaccurate information
• The right to request deletion of personal information
• The right to opt out of certain sales or sharing of personal information
• The right to opt out of certain targeted advertising
• The right to limit certain uses of sensitive personal information
• The right to obtain a copy of certain personal information
• The right to appeal a privacy-rights decision where required by law
• The right not to receive discriminatory treatment for exercising applicable privacy rights

Not every right applies in every circumstance. Certain legal exceptions may permit or require us to retain or continue processing information.

15. How to Exercise Your Privacy Rights

To submit a privacy request, you may contact Tapestry by mail at:

Tapestry at Ismaili Center
Ismaili Center, 1st Floor
2323 Allen Parkway
Houston, TX 77019
United States

Your request should include:

• Your name
• A description of your request
• Sufficient information for us to reasonably verify your identity
• Any additional information reasonably necessary to process your request

We may need to verify your identity before completing certain requests in order to protect personal information from unauthorized disclosure or deletion.

We will respond to verified requests within the time period required by applicable law.

If we cannot fulfill a request, we will explain the reason where required.

16. California Residents

If you are a California resident and applicable California privacy law applies to our processing of your personal information, you may have additional rights.

These may include the right to:

Know/Access

Request information about the categories and specific pieces of personal information we collect, use, disclose, or otherwise process.

Delete

Request deletion of personal information, subject to applicable exceptions.

Correct

Request correction of inaccurate personal information.

Opt Out

Opt out of the sale or sharing of personal information where applicable.

Limit

Limit certain uses or disclosures of sensitive personal information where applicable.

Non-Discrimination

Not receive discriminatory treatment for exercising rights provided by applicable law.

Where required, we will provide appropriate mechanisms for California residents to exercise applicable privacy rights.

17. Texas Residents

If you are a Texas resident and the Texas Data Privacy and Security Act applies to our processing of your personal data, you may have rights including:

• Confirm whether we process your personal data
• Access your personal data
• Correct inaccurate personal data
• Delete personal data
• Obtain a copy of personal data in a portable format
• Opt out of targeted advertising
• Opt out of the sale of personal data
• Opt out of certain profiling

Texas law may also provide a right to appeal certain decisions concerning privacy requests.

18. Sensitive Personal Information

We generally do not request sensitive personal information unless it is reasonably necessary for a specific purpose and permitted by applicable law.

Sensitive information may include categories such as:

• Government identification numbers
• Financial-account credentials
• Precise geolocation
• Biometric information
• Certain health information
• Certain religious or philosophical information
• Other categories defined as sensitive under applicable privacy laws

You should not submit sensitive personal information through a general Website contact form unless specifically requested for a legitimate purpose.

19. Do Not Track Signals

Some web browsers offer a “Do Not Track” feature.

Because there is currently no universally accepted standard for responding to browser-based Do Not Track signals, the Website may not respond to such signals unless required by applicable law.

Where legally required, we will honor recognized privacy preference signals in accordance with applicable requirements.

20. International Visitors

The Website is operated from the United States and is primarily intended for visitors in the United States.

If you access the Website from outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions where we or our service providers operate.

Privacy and data-protection laws in those locations may differ from the laws of your country.

If the Website intentionally targets visitors in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions with additional privacy requirements, this Privacy Policy should be supplemented with appropriate international privacy disclosures.

21. Third-Party Analytics

We may use third-party analytics providers to understand Website traffic and user behavior.

These providers may use cookies or similar technologies to collect information such as:

• IP address
• Device information
• Browser information
• Pages viewed
• Traffic sources
• General geographic information
• Website interactions

Analytics information helps us understand Website performance and improve our content and services.

22. Online Ordering and Payments

If the Website provides online ordering or payment functionality, payment information may be processed through third-party payment providers.

For security reasons, we recommend that complete payment-card information not be submitted through general Website forms.

Payment providers may independently collect and process:

• Name
• Billing information
• Payment information
• Transaction information
• Device information
• Fraud-prevention information

Their respective privacy policies govern their processing of this information.

23. Events, Reservations and Registrations

If the Website allows visitors to register for events, make reservations, request information, or participate in activities, we may collect information necessary to administer those activities.

This may include:

• Name
• Address
• Number of attendees
• Reservation information
• Event preferences
• Accessibility requests voluntarily provided
• Payment information where applicable

We use this information to administer the requested event, reservation, or service and for related operational purposes.

24. User-Submitted Content

If the Website allows you to submit reviews, testimonials, comments, photographs, or other content, please do not submit personal information that you do not want made publicly available.

If you voluntarily submit content for publication, you understand that it may become publicly accessible.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our business
• Changes to the Website
• New services or technologies
• Changes in applicable laws
• Changes to our privacy practices

When we make material changes, we may update the “Last Updated” date at the top of this policy and provide additional notice where required by law.

We encourage you to periodically review this Privacy Policy.

26. Contact Us

For questions concerning this Privacy Policy or our privacy practices, you may contact us by mail at:

Tapestry at Ismaili Center
Ismaili Center, 1st Floor
2323 Allen Parkway
Houston, TX 77019
United States

For privacy-rights requests, please provide your name, the nature of your request, and sufficient information for us to reasonably verify your identity.

Last Updated: August 30, 2026