Privacy Policy

1. Introduction

Gaucho is committed to protecting you and your family’s personal information when you are using Gaucho services. We want our services to be safe and enjoyable for our customers.

This policy explains how we collect, use, share and protect your personal information when you use our services, in compliance with the UK GDPR (as amended by DUAA), Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

Our services include:

• Interactions with Gaucho by phone, SMS, email, post, or in person when visiting our premises.
• Social media or official Gaucho content on other sites.
• Any Gaucho website that links to this Privacy and Cookies Policy.

We sometimes need your information to deliver services safely and enjoyably. Gaucho websites contain hyperlinks to websites owned and operated by third parties. These third-party websites have their own privacy policies, and are also likely to use cookies. We encourage you to review the privacy and cookie policies of any third-party websites or services you use, as we do accept any responsibility or liability for their privacy practices.

We do not knowingly collect or process personal data from children under 13, as our online services are not directed at children.

2. Who We Are

Rare Restaurants (trading as ‘Gaucho’) is the data controller.

Address: Gaucho, 13 Hanover Square, London, W1S 1HN

Data Protection Officer: [email protected]

We may share your data with our parent company, subsidiaries, joint ventures or other companies under common control, in which case we will require them to honour this Privacy Policy. In a sale/acquisition of Rare Restaurants or all our assets, the new owner will possess the same information and will assume the rights and obligations with respect to that information as described in this Privacy Policy.

3. What Information We Collect

We collect personal data when you:

• Access, register, sign up, buy tickets, enter competitions, use live chats/message boards, or contact Gaucho.

Examples of information we may collect:

• Name
• Email address
• Postal address
• Phone number
• Date of birth
• Gender
• Allergy information (if relevant)
• Payment details (processed securely by third parties)
• Usage data (pages visited, last visit, items viewed/purchased when signed in)
• Technical / device information: (IP address, browser type/version, operating system, device type, screen resolution, and other technical characteristics which may be combined for device fingerprinting or online identifiers).

For personalised services, we may access third-party data (e.g. social feeds) or use sign-in via Facebook/Google – with your permission. We only keep what is needed for the service.

(See sections 12-13 for information on cookies).

4. How We Use Your Information and Our Lawful Bases

We use your data for:

Where we rely on Legitimate Interests

We process some of your information on the basis of our legitimate interests, for example to operate and improve our website, prevent fraud, carry out analytics, and provide better customer service. We carefully balance these interests against your rights and freedoms to ensure they are not overridden.

For more details about our legitimate interests assessment or to object to this processing, please contact our Data Protection Officer at:  [email protected]

5. Your Gaucho Account

If you have registered for a Gaucho account this will also allow you to login to the Gaucho website for your location and some other Gaucho websites.

To provide you with a seamless experience, it may be necessary to share your personal information within our organisation. We will only share what we need to in order to provide the service you are using – we will never routinely share all of the data we each hold about you.

You may be asked to use your Gaucho Account on other Gaucho services to enable you to sign in and seamlessly enjoy Gaucho services. Your Gaucho account will always be covered by the policies of this website, but please be aware that additional policies may apply if your Gaucho account is linked to another account.

6. When We Contact You

Gaucho may contact you for:

• Service delivery/admin (e.g. verification, password resets, updates and requests).
• Your enquiries, complaints or feedback.
• Personalised services (if enabled).
• Voluntary surveys.
• Material policy changes.
• Marketing (only with consent or soft opt-in; see section 7).

7. Marketing

Gaucho will only send you direct marketing emails, SMS, or other electronic messages (as defined under PECR) where you have given us prior, specific opt-in consent, or (for existing customers) where we are relying on the “soft opt-in” exception for similar products/services you have previously purchased/used from us, and you were given an easy opt-out at the time.

We may show you relevant advertisement on third-party sites, e.g. Facebook, Google, Instagram, Snapchat and X (formally Twitter). This could involve showing you an advertising message where we know you have a Gaucho account and have used Gaucho products and services. This relies on legitimate interests. To stop this, you can disable personalisation in the Preference Centre:  http://gaucho.my-pref.com/

8. Sharing Your Information

We keep your data within Gaucho unless:

• You have requested it or given your consent.
• We are required/permitted to do so by law (e.g. authorities, law enforcement agencies).
• Using third-party processors (e.g. payment providers, analytics). Gaucho requires these third parties to comply strictly with its instructions and requires that they do not use your personal information for their own business purposes.
• Showing targeted advertisements (see section 6).

Some processors may be located outside the UK/EEA. Where this occurs, we use safeguards such as a UK International Data Transfer Agreement (IDTA), adequacy regulations, or confirmation that protections are not materially lower.

For details of safeguards you can contact our DPO: [email protected]

9. How Long We Keep Data

We only keep your information for as long as is necessary for the purposes for which it was collected. You have the right to request the deletion of your data at any time (see ‘Your Rights’ below). Unless a shorter period is requested, our standard retention periods are:

• Active Accounts:We retain your data for as long as your account remains active to provide our services.
• Dormant Accounts:If your account is inactive for 12 months, we will send a reminder. If it remains dormant, we will securely delete your personal data (unless we are required to keep it for legal reasons).
• Marketing:We process your data for marketing until you withdraw consent or opt-out. We also conduct regular “cleansing” to remove email addresses that have been bounces or inactive for 2 years.
• Legal & Financial Obligations:We retain transaction and payment data for 6 years to comply with UK tax and accounting laws (HMRC).
• Anonymised Data:We may keep anonymised information (which cannot identify you) indefinitely for statistical analysis and to improve our menu and service.

10. How We Protect and Store Your Data

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks of processing your data. This includes protecting your information against unauthorised or unlawful processing, accidental loss, destruction, or damage. We use secure servers, encryption for payment details, and limit data access only to staff who need it to provide our services.

11. Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have several important rights:

• Your right to be informed – You have the right to be informed about what personal data we collect and how we use it.
• Your right of access – You have the right to ask us for copies of your personal information.
• Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
• Your right to object to automated decision-making and profiling – We may use your personal information to profile our guests (for example, to identify our ‘VIP’ guests or frequent visitors). This helps us provide a better, more personalised service. You have the right to object to this profiling at any time. You also have the right to challenge any automated decisions (e.g., made by our booking systems) that have a significant effect on you. In these cases, you can request a human review, express your point of view, and contest the outcome by contacting us.

To exercise your rights, you can contact our DPO: [email protected]

By post: The Data Protection Officer, Gaucho, 13 Hanover Square, London, W1S 1HN

We will respond within 1 month (or up to 3 months for complex requests, as allowed under the UK GDPR). We will conduct reasonable and proportionate searches to fulfil your request. We may need to ask for more details if your request is very broad or unclear.

We will require you to prove your identity with 2 forms of identification (e.g. Passport, Bank statement (from the last 3 months, utility bill, driving licence).

You are not required to pay any charge for exercising your rights (except in very limited circumstances, such as manifestly unfounded or excessive requests).

Your right to complain – You have the right to make a complaint at any time. If you wish to do so, please contact our DPO:  [email protected]

By post: The Data Protection Officer, Gaucho, 13 Hanover Square, London, W1S 1HN

We will acknowledge your complaint within 30 days and respond without undue delay, making appropriate enquiries and keeping you informed of progress. We are committed to addressing your data protection concerns. You should raise your complaint directly with us first. You may escalate unresolved complaints to the Information Commissioner’s Office (ICO – the UK supervisory authority for data protection issues) here: https://ico.org.uk/make-a-complaint/

By phone: 0303 123 1113.

By post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. Cookies and Similar Technologies

We use cookies, pixels, and device identifiers to provide a seamless experience, analyse site performance, and personalise our marketing.

• When We Don’t Need Your Consent

Under the Privacy and Electronic Communications Regulations (PECR), as updated by the Data Use and Access Act (DUAA), we may place certain cookies without your prior consent if they are:

• Strictly Necessary:Essential for the website to function (e.g., remembering your dinner booking as you move through checkout).
• Low-Risk (Improvements):Used for “recognised legitimate interests” such as anonymous statistics to improve our website, or to remember your language/appearance preferences.
• Security & Safety:Necessary for fraud prevention or providing emergency assistance.
  • When We Do Need Your Consent

For all other technologies – including Marketing Pixels (to show you relevant ads) and Detailed Analytics (to track individual user journeys) – we will always ask for your permission via our Cookie Preference Centre: http://gaucho.my-pref.com/

• Your Control

• Withdrawal:You can change your mind and withdraw consent at any time via our Preference Centre: http://gaucho.my-pref.com/

13. Technical Information From Your Device

When you access our website via a mobile phone, tablet or other device, your web browser or the device automatically provides us with certain technical information. This includes your IP address, browser type and version, operating system, screen resolution, device type (e.g. mobile or desktop), and other technical characteristics of your device and browser.

We (and our service providers) may also use this information to help recognise or distinguish your device from others over time. This is sometimes referred to as device fingerprinting or the use of online identifiers. We do this for purposes such as website security, fraud prevention, analytics, and to improve the functionality of our site.

You can manage your preferences for cookies and similar technologies (including those used for fingerprinting) through our cookie banner or preference centre. Many of these settings can also be controlled via your browser settings. For further questions, please contact our Data Protection Officer at: [email protected].

14. Changes To This Policy

We update this policy to reflect legal changes (like the DUAA 2025) or updates to our services. The “Last Updated” date is always at the top of this page.

Reviewing Changes: By continuing to use our services, you agree to the latest version. If you disagree with any updates, please stop using our site. You can also delete your account via the Preference Centre: http://gaucho.my-pref.com/

Major Updates: If we make significant changes to how we use your data, we will notify you prominently via our website or email.

15. Contact Us

If you have any questions or comments about this Privacy and Cookies Policy please contact:

Data Protection Officer, Gaucho , 13 Hanover Square, London, W1S 1HN

Email: [email protected]

Last updated: March 2026 (to reflect changes from the Data (Use and Access) Act 2025 – (DUAA)