Last Update: August 2026
We value your privacy. This Privacy Policy explains how we collect, use, store and disclose your personal information (or personal data), and how you can access and correct it where necessary. Please read this policy carefully.
If you have any questions regarding the processing of your personal information, please do not hesitate to contact us. We will be happy to help! To do so, you can email us at ethique@grandio.com. The Privacy Officer is identified below and can be contacted by post at the following address:
Att:
Privacy Officer
4605, Boulevard Lapinière, bureau 105
Brossard (Québec) J4Z 3T5
CANADA
This policy contains information on how we collect, use, retain and disclose your personal information when:
• you use our mobile app (the ‘app’);
• you browse our public websites (the “websites” and, together with the app, the “platforms”);
• you place an order online;
• you register for and take part in our loyalty program on one of our platforms (the “program”);
• you communicate or interact with us via email, social media or in any other way.
In this policy, the term ‘services’ encompasses all of the above where no distinction needs to be made between the different aspects of the services. This policy also covers our use of tracking technologies, such as cookies (as defined below), in connection with our services.
To find out more about what we mean by ‘cookies’ and how we use them, click here to view the relevant section.
More specifically, this policy applies to personal information held by the following companies: the Grandio Group, La Cage restaurants (sports pub and event catering), Chez Lionel, IRU Izakaya, Cochon Dingue, Le Ciel!, Lapin Sauté, Paris Grill, Madame Chose, Café du Monde, Moishes, Gibbys, Niji Sushi, Il Teatro – Italian Brasserie, Brasseurs du MONDE. However, this list is not exhaustive and may be expanded in the event of an acquisition.
The term ‘personal information’ (or ‘personal data’) refers to any information that enables us to identify you directly or indirectly, including information collected via cookies and other electronic data. Some information may not be personal in itself, but may become so if combined with other information or if the information as a whole enables us to identify individuals. For more information on the cookies we use, please see the following section.
We collect personal information to provide you with our services, to analyse your use of our services, or to carry out marketing activities.
Below you will find the categories and types of personal information we may collect when you use our services, as well as the reasons why we do so.
If you provide us with personal information about other people, you must first obtain their consent.
| When | What information? | Why ? | Applicable legal basis if you are located in the European Union or the United Kingdom |
|---|---|---|---|
| When making a booking | |||
| At the time of booking | • First name • Surname • Home address • Email address • Telephone number • IP address • Browser type | To enable customers to make a booking easily | Consent |
| When you browse our platforms | |||
| We collect information automatically | Electronic data
Usage data
|
| Consent |
| If you contact us by email, on social media, or via the ‘Contact Us’ forms on our websites, or visit our Help Centre (FAQ) | Contact details
| To answer your questions or enquiries, and to help you if you encounter any problems. | Performance of a contract |
| When you complete our surveys or take part in a competition | |||
| You are completing one of our satisfaction surveys. | Data relating to satisfaction surveys
|
| Consent and legitimate interest |
| When you complete one of the competition entry forms on our platforms. | Contact details
Answers to quizzes and other competition-related questions, etc. |
| Consent |
| Marketing and other communications | |||
| In addition to the quizzes linked to our competitions, we may also offer optional quizzes as part of our services. | Data collected as part of a quiz Answers to the questions. |
| Consent |
| If you follow us or interact with our social media accounts. | Social media data • Publicly available information appearing on or linked to your social media accounts. | For marketing or advertising purposes, in accordance with applicable laws, including those relating to consent. | Consent |
Your personal information is stored on the servers of trusted third-party service providers, which may be located outside your country of residence. Consequently, by using our services, you understand that your personal information may be transferred to locations other than your province or country of residence, which may have different data protection rules. When this information is located outside your place of residence, it may be subject to the laws of the region where it is held and may be disclosed to governments, courts or law enforcement or regulatory bodies in that other location in accordance with the laws of that country.
However, our practices regarding your personal information remain governed at all times by this Privacy Policy, and we will comply with the requirements of applicable laws by providing adequate protection for the transfer of personal information from the EU, the EEA and the United Kingdom to third countries, in particular by putting in place appropriate safeguards such as standard contractual clauses.
We will retain your personal information for as long as necessary to provide you with our services, or for a longer period if required by applicable law. Even if you no longer have any connection with us, we may need to retain your personal information for a certain period to comply with our legal obligations. Whilst we retain it, we will continue to protect your personal information and ensure its confidentiality.
We use various methods to protect your personal information against unauthorised access, use or disclosure. These methods depend on the type, amount, distribution and format of the information you provide to us. Here are some examples of protective measures by type:
| Type of measure | Description |
| Physical measures | These are measures designed to prevent physical access to personal information, such as locking files, secure destruction or monitoring of premises. |
| Administrative measures | These are measures designed to regulate the use of personal information, such as access control or staff training. |
| Technical measures | These are measures designed to protect personal information against cyber-attacks, such as encryption, passwords or two-factor authentication. |
However, it is important to note that information transmitted over the internet or stored electronically is never completely secure and may be subject to attacks. We cannot therefore guarantee that your personal information will always be protected.
Within our organisation, we ensure that only those employees who need your personal information to carry out their duties have access to it. These employees are made aware of this Privacy Policy and must comply with its provisions.
Absolutely! However, these rights vary depending on where you are located.
In Canada, you generally have the right to access your personal information and to correct it if it is inaccurate, in certain circumstances. Upon written request and subject to proof of identity, you may access the personal information we hold and request that any necessary corrections be made, where applicable, subject to applicable laws.
However, to ensure that the personal information we hold about you is accurate and up to date, please inform us immediately of any changes to your personal information.
You also have the right to withdraw your consent to the use or disclosure of your personal information. Depending on the circumstances:
Under the GDPR and the UK Data Protection Act, you have additional rights, such as the right to object to the processing of your personal information, the right to data portability and the right to restrict the processing of your personal information in certain circumstances. In France, you also have the right to set out instructions regarding your personal information after your death.
If you wish to exercise these rights, please contact our Privacy Officer at ethique@grandio.com.
Privacy Officer
4605, Boulevard Lapinière, bureau 105
Brossard (Québec) J4Z 3T5
CANADA
We will normally respond to your request within 30 days. If we are unable to comply with your request, we will explain why.
If you are in Québec, please note that the Commission d’accès à l’information provides forms on its website to help you make such requests. If you are not satisfied with the way we handle your requests regarding your rights in relation to your personal data, you may also contact the Commission d’accès à l’information using the contact details provided on its website.
If you are located in the EU/EEA and would like to find out more about your rights, each EU/EEA country has established national bodies responsible for protecting personal information in accordance with the GDPR. You can follow this link here to access your country’s data protection authority. You can find information on your European data protection rights published by the UK’s Information Commissioner’s Office (ICO) here, and by France’s Commission nationale de l’informatique et des libertés (CNIL) here.
We will update this policy as necessary, in line with changes to our practices, technology, legal requirements and other factors. If we make any significant changes, we will notify you in a manner appropriate to the way we contact you. You can always check the ‘Last updated’ date at the top of this page to see when the policy was last updated.
Changes to this policy will take effect immediately upon publication of an updated policy on this page, unless otherwise stated.