Privacy Policy

Last updated: August 8, 2026

This Privacy Policy (the “Policy”) describes how CONTRAST VENDÔME SAS, operating under the Sant Roch brand (“Sant Roch”, “we”, “us” or “our”), collects, uses, stores and shares your personal data when you visit our website, create an account, make a booking, purchase a product or service, visit a Sant Roch location, subscribe to our communications, interact with us through social media or other communication channels, or otherwise use any services provided by Sant Roch (collectively, the “Services”).

Sant Roch is committed to protecting your privacy and processing your personal data in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (the “GDPR”) and applicable French data protection legislation.

For the purposes of the GDPR, the data controller is:

CONTRAST VENDÔME SAS
987984200
4 Rue Saint Roch
Paris, France
Email: vendome@sant-roch.com

1. Personal data we collect

“Personal Data” means any information relating to an identified or identifiable natural person. Depending on how you interact with Sant Roch, we may collect the following categories of Personal Data.

Identity and contact information

This may include:

• first and last name;
• email address;
• telephone number;
• date of birth;
• postal address;
• gender, where voluntarily provided;
• profile or account information.

Account and booking information

When you create an account, purchase a session, membership, package or other service, or make a reservation, we may collect information including:

• account credentials;
• booking history;
• attendance and check-in history;
• cancellations and no-shows;
• memberships and packages purchased;
• credits available or used;
• preferences relating to your Sant Roch experience;
• interactions with our customer service team.

Our booking and account services may be operated through third-party technology providers acting on our behalf.

Payment and transaction information

When you purchase Services, we collect information relating to the transaction, such as:

• products or Services purchased;
• transaction amount;
• date and time of purchase;
• payment status;
• billing information.

Payment card information may be processed directly by our payment service providers. Sant Roch does not necessarily receive or store your complete payment card details.

Communications

If you contact us by email, telephone, social media, messaging services, contact forms or otherwise, we may collect the information contained in those communications. This may include messages exchanged with our customer service or operational teams.

Marketing information

If you subscribe to our newsletter, join a waitlist, participate in a campaign, enter a competition, request information or otherwise consent to receiving communications from us, we may collect:

• your email address;
• telephone number;
• marketing preferences;
• information about your interactions with our communications.

We may also collect information regarding whether you opened, clicked on or otherwise interacted with our emails and other communications.

Information collected at Sant Roch locations

When you visit one of our locations, we may collect information necessary to provide and operate our Services, including your check-in and attendance information.

Where required for security purposes, certain Sant Roch premises may also be protected by CCTV. Where CCTV is used, appropriate notices will be displayed at the relevant location.

Technical and usage information

When you access our website or digital Services, certain information may be collected automatically, including:

• IP address;
• browser type;
• operating system;
• device type;
• device identifiers;
• pages viewed;
• referring website;
• date and time of access;
• actions taken on our website;
• interactions with our digital content.

This information may be collected using cookies, pixels, SDKs, server logs and similar technologies.

2. How we collect personal data

We collect Personal Data:

• directly from you;
• when you create an account or make a booking;
• when you visit a Sant Roch location;
• when you purchase a product or Service;
• when you communicate with us;
• when you subscribe to our communications;
• automatically through our website and digital Services;
• through service providers operating on our behalf;
• through advertising and analytics platforms, where permitted;
• through partners or third-party platforms where you have authorised the sharing of your information.

3. How we use your personal data

Provide our Services

We process your Personal Data to:

• create and manage your account;
• process bookings;
• manage memberships, packages and credits;
• process payments;
• verify your eligibility to access Services;
• manage check-ins, cancellations and no-shows;
• provide customer support;
• communicate important information regarding your bookings or account.

The legal basis for this processing is generally the performance of our contract with you.

Operate and improve Sant Roch

We may use Personal Data to:

• understand how customers use our Services;
• analyse attendance and booking patterns;
• improve our locations and customer experience;
• develop new Services;
• measure operational performance;
• troubleshoot technical issues;
• conduct internal reporting and analysis.

This processing is generally based on our legitimate interests in operating, understanding and improving our business and Services.

Communicate with you

We may contact you regarding:

• booking confirmations;
• cancellations;
• schedule changes;
• account information;
• payment information;
• changes to our Services;
• important operational or administrative information.

These communications are necessary to provide the Services you have requested.

Marketing

Where permitted by applicable law, we may send you information regarding:

• Sant Roch news;
• new locations;
• new Services;
• events;
• offers;
• memberships;
• products;
• collaborations;
• other information that we believe may be of interest to you.

Where your consent is required, we will obtain it before sending such communications. You may unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us.

Security and fraud prevention

We may process Personal Data to:

• protect our customers, employees and premises;
• detect or prevent fraud;
• prevent misuse of our Services;
• investigate suspected violations of our terms;
• secure our information systems;
• establish, exercise or defend legal claims.

This processing is based on our legitimate interests and, where applicable, compliance with legal obligations.

Legal and regulatory obligations

We may process Personal Data where necessary to comply with applicable laws, regulations, accounting requirements, tax obligations, court orders or requests from competent authorities.

4. Analytics, cookies and advertising

Sant Roch may use analytics and advertising technologies to understand how people interact with our website and communications and to measure the effectiveness of our marketing. These technologies may include cookies, pixels, tags and similar technologies provided by third parties.

Depending on the technologies we use, these providers may include platforms such as Google, Meta (Facebook and Instagram), TikTok or other analytics and advertising partners.

Where required by law, advertising and non-essential analytics cookies will only be activated after you have provided your consent through our cookie management system. You may withdraw or modify your consent at any time through our cookie settings.

Advertising measurement and audiences

Where permitted by law and subject to any required consent, we may use advertising platforms to:

• measure whether advertisements lead to visits, registrations or purchases;
• create advertising audiences;
• exclude existing customers from certain campaigns;
• show advertisements to people who may be interested in Sant Roch;
• measure the effectiveness of our campaigns.

Where applicable, certain identifiers, such as email addresses or telephone numbers, may be converted into a hashed format before being transmitted to advertising platforms for matching purposes.

We will only carry out such processing where we have an appropriate legal basis and, where required, your consent.

5. Disclosure of personal data

We do not sell your Personal Data. We may share Personal Data with third parties where necessary for the operation of Sant Roch and our Services.

Service providers

We may disclose Personal Data to trusted service providers that perform services on our behalf, including providers of:

• booking and membership management systems;
• payment processing;
• website hosting;
• cloud infrastructure and data storage;
• email and communications;
• customer relationship management;
• analytics;
• advertising;
• accounting;
• IT and cybersecurity;
• professional advisory services.

These providers may only process Personal Data in accordance with our instructions and applicable law, where they act as processors on our behalf.

Business partners

From time to time, Sant Roch may collaborate with third parties for events, promotions or other partnerships. If Personal Data is to be shared with a partner for its own purposes, we will inform you where required and obtain your consent when legally necessary.

Corporate transactions

Personal Data may be disclosed as part of a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction involving Sant Roch or any company within our group.

Legal requirements

We may disclose Personal Data where we reasonably believe disclosure is required:

• by applicable law;
• pursuant to legal proceedings;
• in response to a request from a competent authority;
• to protect our legal rights;
• to protect the safety of our customers, employees or other persons;
• to investigate fraud, security incidents or unlawful activity.

6. International data transfers

Some of our service providers may process Personal Data outside the European Economic Area (“EEA”).

Where Personal Data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of data protection, we implement appropriate safeguards as required by applicable law. These safeguards may include the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

You may contact us for further information regarding the safeguards applicable to international transfers of your Personal Data.

7. Data retention

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected and to comply with our legal obligations. Retention periods depend on the nature of the information and the purpose of processing.

In particular:

• customer account and contractual information may be retained for the duration of our commercial relationship and for the applicable limitation period thereafter;
• transaction and accounting records may be retained for the periods required under French accounting and tax law;
• marketing information may be retained until you withdraw your consent or object to receiving marketing, subject to applicable legal retention periods;
• cookies and similar identifiers are retained in accordance with applicable law and our cookie settings;
• correspondence may be retained for the period reasonably necessary to process your request and protect our legitimate interests.

When Personal Data is no longer required, we delete or anonymise it.

8. Your rights

Subject to the conditions provided by applicable law, you have the right to:

• access the Personal Data we hold about you;
• correct inaccurate or incomplete Personal Data;
• request the deletion of your Personal Data;
• request the restriction of processing;
• object to certain processing based on our legitimate interests;
• object at any time to the use of your Personal Data for direct marketing;
• request the portability of certain Personal Data;
• withdraw your consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You may exercise your rights by contacting vendome@sant-roch.com. We may request reasonable information to verify your identity before responding to your request.

You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority.

9. Marketing and unsubscribing

You may unsubscribe from Sant Roch marketing emails at any time by clicking the unsubscribe link contained in the relevant email. You may also contact us at vendome@sant-roch.com to update your communication preferences.

Please note that even if you unsubscribe from marketing communications, we may continue to send you transactional or administrative communications relating to your bookings, purchases, account or use of our Services.

10. Data deletion

You may request deletion of your Personal Data by contacting vendome@sant-roch.com. We will process deletion requests in accordance with applicable data protection law.

Certain information may need to be retained after a deletion request where required by law or where we have another lawful basis for retaining it, including for accounting, fraud prevention or the establishment, exercise or defence of legal claims.

11. Third-party services and links

Our website and Services may contain links to websites, platforms, applications or services operated by third parties. Sant Roch is not responsible for the privacy practices of those third parties.

When you leave our Services or interact directly with a third-party service, the collection and use of your Personal Data will be governed by that third party’s privacy policy. We encourage you to review the relevant privacy policies before providing Personal Data to third-party services.

12. Security

We implement appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures are adapted to the nature of the Personal Data processed and the risks associated with the processing.

However, no electronic transmission or information storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and password. If you believe that your account or password has been compromised, please contact us promptly.

13. Children

Our Services are not intended to collect Personal Data directly from children except where expressly permitted as part of a Service and subject to appropriate parental or legal guardian authorisation where required.

If we become aware that Personal Data relating to a minor has been collected in circumstances where the required authorisation was not obtained, we will take appropriate steps to delete or otherwise lawfully process that information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, practices, technologies or legal obligations. When we make changes, we will update the “Last updated” date at the top of this Policy.

Where required by applicable law, we will provide additional notice or obtain your consent before materially changing the way in which we process Personal Data. We encourage you to review this Privacy Policy periodically.

15. Contact us

If you have any questions regarding this Privacy Policy, our processing of your Personal Data or the exercise of your rights, please contact:

Sant Roch / CONTRAST VENDÔME SAS
4 Rue Saint Roch, 75001
Paris, France
Email: vendome@sant-roch.com

For matters relating specifically to a Sant Roch location, you may also contact our team through the contact details provided on our website.

‍