Privacy Policy

Last updated: 29 January 2026

1. Background and purpose

Constellation RFB Limited (company no: 14819224) operates and manages Le Café by Nicolas Rouzaud ("we" or "us").

We understand the importance of a seamless and bespoke experience. To achieve this, we share your personal data amongst our different locations. This ensures that we can tailor your experiences to your preferences and needs each time you visit us, no matter the location. This approach is essential to providing you with a continued luxury experience and providing individually crafted services.

References in this Privacy Notice to data protection laws mean all applicable data protection laws including the EU General Data Protection Regulation 2016/679 and the UK Data Protection Act 2018.

For any questions about this Privacy Notice or to exercise your rights under data protection law, please contact our Data Protection Officer at info@nicolasrouzaud.com

This Privacy Notice covers how we collect, use, store and disclose the data that you supply to us and your rights to access, amend and remove data that we hold about you. We are committed to protecting the privacy and security of your personal information and we will always treat you and your data with the respect you deserve.

This Privacy Notice covers personal data that we process about you in relation to:

You visit one of our location or make an inquiry about purchasing a product from one of our location;
Your interactions on Le Café by Nicolas Rouzaud's website.

2. Data Controller

Constellation RFB Limited (company no: 14819224) is the data controller with respect to your personal data and is registered with the UK Information Commissioner's Office.

3. The personal data we will collect about you

Personal data means any information about an individual which makes that person identifiable. It does not include data where the identity has been removed (anonymous data). We may process the following personal data about you:

Identity Data: includes name, nationality, country of residence, marital status, title, date of birth, profession, and gender.
Contact Data: includes address, email address, mobile phone numbers and preferred contact method.
Booking Data: includes communications with you, dates and details relating to your visits to Le Café.
Profile Data: includes information about your interests and preferences.
Marketing Data: includes your preferences in receiving marketing from us and your communication preferences.
Usage Data: includes website usage information such as date and time, originating IP address, domain name, type of browser and operating system used, URL of the referring page, object requested, completion status of requests, geographic location, device identifier and type, mobile network carrier name, browsing behaviour, search history, pages viewed, web logs, and language preferences.

We do not collect data which is, by its nature, particularly sensitive (e.g. genetic data, biometric data, data revealing racial or ethnic origin, political opinions, sex life, sexual orientation, religion or other beliefs, data concerning health, criminal background or trade union membership) ("Special Category Data") unless it is volunteered by you.

We may use Special Category Data where it is permitted by law or where you have given your explicit consent to us. Such Special Category Data will only be shared with other Nicolas Rouzaud locations or our third party service providers acting as data processors for the purpose of providing the services you request and will not be shared or used by us for any other purposes.

Examples of Special Category Data we may collect and process include:

food allergies;
dietary requirements which may imply or suggest your religion, health, or other sensitive personal data;
mobility requirements;
disabilities;
medical conditions.

Our website and services are not intended for individuals under the age of 18. Generally, we do not collect personal data from individuals under the age of 18.

4. How we collect your personal data

We use different methods to collect personal data from and about you including through:

Direct interactions:

You may give us your Identity, Contact, and other Data by filling in forms or by corresponding with us by post, phone, email, using online forms or in any other way. This includes personal data you provide when you:

visit Le Café by Nicolas Rouzaud;
visit our website and use our website to make enquiries or subscribe to our marketing materials;
give us feedback or contact us.

To ensure that you are provided with a first-class service, telephone calls may be monitored or recorded for quality control and training purposes. We will always let you know in advance if we are going to record your call.

Indirect interactions:

To provide our highly personalised service, we may also add details about you to your guest profile based on our in-person or digital interactions with you. For example, if you inform us of any personal preferences regarding your experience with us.

We may also collect your personal data from other third parties such as providers of technical services.

Personal data we collect automatically:

When you visit our website, we may also collect certain Usage Data using "cookies" and other automated means. Cookies are small pieces of data that are stored by your browser on your computer's hard drive. We use cookies to gather data about the visitors to our websites, to enable us to improve our websites and deliver a better and more personalised service.

To learn more about cookies, how they are used and how to exercise your choice with respect to their collection of information on this site, please refer to our Cookie Notice.

5. How we use your personal data

We will use your personal data for the purposes listed in the appendix to this Privacy Notice. However, in general terms, these purposes include:

providing you with a seamless experience;
facilitating your financial transactions;
making arrangements at Le Café;
liaising with you to receive your comments, preferences, and feedback;
customising and improving our digital services;
tailoring your communications;
prioritising your safety and security;
offering you exclusive promotions that align with your preferences.

6. Sharing your personal data with anyone else?

We may transfer your personal data with trusted third parties in some circumstances, including:

Le Café by Nicolas Rouzaud and Nicolas Rouzaud Maison de Haute Patisserie locations

We may send personal data about you to other Nicolas Rouzaud locations. For example, if you visit Le Café by Nicolas Rouzaud in London, then plan a visit to our location at The Connaught or in Doha, we will make sure that these locations have access to your Profile Data, to ensure that they are aware of your preferences and can ensure you have a seamless and personalised experience with them.

External Third Parties

We may also provide limited personal data about you to other third parties outside of Nicolas Rouzaud, to ensure that you have a seamless experience. This could be to hotels, chauffeur services, restaurants, and bars.

We may also share personal data with the following:

Service providers acting as processors who provide IT and system administration services.
Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services.
Tax authorities, regulators and other authorities acting as processors or joint controllers who require reporting of processing activities in certain circumstances.
Law enforcement agencies.
Third parties to whom we may choose to sell, transfer, form a joint venture with, or merge parts of our business or our assets. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Notice.

International data transfers

Nicolas Rouzaud may need to transfer your personal data outside of the country from which it was originally provided. This may be within Nicolas Rouzaud locations or to third parties that we work with who may be located outside the UK and EU. Whenever we transfer personal data outside of the UK and EU, we take legally required steps to make sure that appropriate safeguards are in place to protect your personal data. This may include the use of Standard Contractual Clauses issued following the Commission Implementing Decision (EU) 2021/914 of June 4, 2021, and the UK Addendum issued by the UK Information Commissioner. Please contact us if you would like more information about the safeguards we use.

7. Direct marketing

We may use your personal data to send you direct marketing communications about our café, experiences, or our related services. This will be in the form of telephone, email, and post.

Where we are legally required, we will seek your permission before sending you any direct marketing. You have the right to stop receiving direct marketing at any time – you can do this by following the opt-out links in electronic communications (such as emails).

8. Data retention

Nicolas Rouzaud will only retain your personal data for as long as we feel that we have a relationship with you and will only use it for clear and explicit purposes, this may also include satisfying any legal, accounting or reporting requirements. Typically, where your information is no longer required, we will ensure it is disposed of in a safe manner.

Nicolas Rouzaud will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of complying with agreements that we have in place with you and for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements. For more information about our retention periods, please contact us.

We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely.

9. Updating your personal profile and preferences

You can update or change your preferences for the way you would like us to communicate with you – including how you receive news updates from us, or details of our latest offers by following the unsubscribe instructions in the correspondence we send to you.

10. Changes to this Privacy Notice

Le Café by Nicolas Rouzaud may periodically update this Privacy Notice. This may relate to changes in the law, best practice, changes in our services or treatment of your personal data. Where necessary, we will notify you of these changes. We will always display when this Privacy Notice was last amended on the website.

11. Your rights under data protection law

Under certain circumstances, you have rights under data protection laws in relation to your personal data. If you wish to exercise any of the rights set out below, please contact us at info@nicolasrouzaud.com.

You have the right to:

"Request access" to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

"Request correction" of the personal data that we hold about you. This enables you to have any incomplete or inaccurate personal data we hold about you corrected, though we may need to verify the accuracy of the new personal data you provide to us.

"Request erasure" of your personal data which enables you to ask us to delete or remove your personal data where: (i) there is no good reason for us continuing to process it, or (ii) where you are exercising your right to object to our processing (see below). We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

"Object to processing" of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

"Request restriction of processing" of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:

If you want us to establish the personal data's accuracy.
Where our use of the personal data is unlawful but you do not want us to erase it.
Where you need us to hold the personal data even if we no longer require it as you need it to establish, exercise or defend legal claims.
You have objected to our use of your personal data but we need to verify whether we have overriding legitimate grounds to use it.

"Withdraw consent at any time" where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

"Right to decide on the future of your data after your death" – define directives concerning the storage, deletion, and communication of personal data after his or her death. A data subject can also designate a person to carry out these directives.

12. Contact us

If you have any questions in connection with your personal data, you can contact our team at Email: info@nicolasrouzaud.com

13. How to complain

Nicolas Rouzaud is committed to working with you to obtain a fair resolution of any complaint or concerns about privacy. If, however, you believe that Nicolas Rouzaud has not been able to assist with your complaint or concern, you have the right to make a complaint to the Information Commissioner's Office, the supervisory authority for data protection issues in England and Wales.

Information Commissioner's Office

Wycliffe House, Water Lane

Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113

Appendix

We will only use your personal data when the law allows us to. The table below explains the ways we plan to use your personal data and the legal bases we rely on for each purpose.

Purpose	Personal Data	Legal Basis
Fulfil your orders placed at Le Café by Nicolas Rouzaud or via our website.	- Identity Data - Contact Data - Booking Data - Financial Data - Transaction Data	Contract – necessary to perform our contract with you.
Fulfil your requests made at Le Café or via our website.	- Contact Data - Booking Data - Profile Data	Legitimate Interests – necessary to provide you with personalised services and enhance your experience.
Respond to your inquiries or requests.	- Contact Data - Booking Data	Legitimate Interests – necessary to respond to and honour your requests.
Send you emails about new offerings, services, and experiences.	- Contact Data - Profile Data - Marketing Data	Consent – only where you have given your consent for us to do so.
Manage your communications preferences.	- Contact Data - Marketing Data - Profile Data	Legitimate Interests – necessary to keep our records updated and ensure they reflect your preferences.
Maintain our records.	- Identity Data - Contact Data - Booking Data	Legitimate Interests – necessary to ensure accurate information within our organisation and comply with legal and regulatory obligations.
Evaluate, develop, and improve our relationship with you.	- Identity Data - Contact Data - Booking Data - Profile Data	Legitimate Interests – necessary to analyse your feedback and preferences to enhance our luxury offerings.
Assist with health and safety compliance and manage other serious incidents.	- Identity Data - CCTV Data	Legitimate Interests – necessary to ensure health and safety and create a safe environment at our café.
Detect, prevent, or reduce crime.	- Identity Data - CCTV Data	Legitimate Interests – necessary to ensure the security of our café, reduce the fear of crime and create a safer environment.
Respond to emergencies and incidents at our café.	- Identity Data - Contact Data	Vital Interests – necessary to protect the vital interests of individuals by contacting emergency services in the event of incidents.
Improve our digital services.	- Usage Data	Legitimate Interests – necessary to help us deliver a better and more personalised digital services.

Cart