Privacy Policy

Last Updated:  November 2025

At Nobu, we take your privacy very seriously and we are committed to protecting your personal data.

This privacy statement describes how we collect, use, protect and share personal data we collect from you, or that you provide to us when you visit or make a reservation at one of our hotels, restaurants, or residences, access or use our websites (https://www.nobuhotels.com/ or https://noburestaurants.com/) (the “Websites”) or the Nobu mobile app (the “App”), request information from us (e.g., sign up for promotions or marketing emails),  or otherwise interact with us.

If you wish to contact us regarding this privacy statement, we may be reached at [email protected].

Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it.

ABOUT NOBU AND THE NOBU FAMILY

This privacy statement applies to handling of personal data by the Nobu Family (“Nobu” / “we” / “our” / “us”) which includes each Nobu Hotel, Nobu Residence, and each Nobu Restaurant worldwide licensed or managed by the Nobu Hospitality Group and/or the Nobu Restaurant Group, respectively. For purposes of data protection laws in the European Economic Area, United Kingdom and Switzerland, the data controller of your personal data is the Nobu Hospitality Group or the Nobu Restaurant Group where your information was collected. The Nobu Family can be contacted at:

Privacy at Nobu
40 West 57th St, Suite 320
New York, NY 10019

This privacy statement does not apply to the processing of your data by the operator of our mobile app to the extent that such operator is using the data for its own purposes as a data controller.

INFORMATION WE COLLECT AND PROCESS

We may collect one or more of the following categories of personal data about you when you (i) visit or make a reservation at one of our hotels, restaurants or residences, (ii) use our Websites or our App, (iii) connect to the wireless/Wi-Fi that may be offered at our properties (“Wi-Fi Access”), (iv) request information from us, or (v) interact with us, including through the social media channels that we control (“Social Media Channels” collectively with the Websites, Wi-Fi Access and Apps, the “Services”) that link to this privacy statement.

RATIONALE FOR PROCESSING PERSONAL DATA

We process personal data as necessary for us:

• To provide our services to our customers;
• To fulfill our legitimate interests, including to allow us to understand our customers better, ensure our offerings are updated and relevant, and to develop our business and inform our marketing strategy;
• To inform you of our Services and other relevant information; and
• For other purposes with notice to you and with your consent, where necessary.

To the extent we rely on our legitimate interests as a legal basis for processing personal data, we have considered the balance between our own interests (among other things, the lawful and efficient operation of our Services) and your interests and we believe that (i) you would reasonably expect us to carry out the kind of processing referenced above and (ii) such processing will not cause you any harm and/or will not seriously impact your rights and freedoms with regards to data privacy. At times, we may also collect your personal data where we have your consent to do so or as otherwise necessary for the performance of a contract to which you are a party, and in order to take steps (at your request) to enter into such contract. You have the right to withdraw any consent given to us for the processing of your personal data at any time. We may also collect your personal data as necessary for us to comply with our legal obligations, including to protect your vital interests or those of another.

MARKETING AND YOUR CHOICES

We will, if you have given us your consent and in line with your choices, provide you with information by mail, telephone, email and SMS, which may be of interest to you in respect of the Nobu hotels, restaurants, and/or residences.

We will only provide you with marketing communications if you would like us to. You will have the opportunity to clearly set out whether you wish to receive marketing messages from us by ticking the relevant boxes.

PERSONAL DATA OF CHILDREN

We do not knowingly collect information from children under the age of 18 through our Websites or App. If you are under 18, please do not give us any personal data. We encourage parents and legal guardians to monitor their children’s internet usage to help enforce this privacy Statement by instructing their children never to provide us personal data. If you become aware that your child or any child under your care has provided us with information without your consent, please email us at [email protected] and we will endeavor to delete that personal data from our databases.

DISCLOSURE OF YOUR PERSONAL INFORMATION’

We do not sell your personal data.

We may share your personal data with selected third parties, in accordance with this privacy statement, within the following categories of recipients:

• Our business partners, including our partners within the Nobu Family, such as other hotels, residences, and restaurants, social media companies (if you use your account with them to sign up or sign in with us); professional advisers, including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
• In the event of an acquisition or merger, with third parties, who acquire us or substantially all of our assets, in which case your personal data (including any sensitive personal data) will be one of the transferred assets (however, we will let you know before this happens).
• Our service providers (for example, IT services or CRM services); suppliers and sub-contractors for the performance of any contract we enter into with you or for marketing communications; and other vendors who provide services to us, such as fulfilling orders, providing data processing and other information technology services, managing promotions, carrying out research and analysis, and personalizing individual Nobu customer experiences; and with analytics and search engine providers that assist us in the improvement and optimization of the Websites and the Online Services.
• Legal & Regulatory Authorities, including government or other law enforcement agencies, in connection with the investigation of unlawful activities or for other legal reasons (this may include your location information).

WHERE WE STORE YOUR PERSONAL DATA

We may transfer your personal data to a jurisdiction other than the one from which we collected your personal data, including to countries that may not have the same level of protections for your personal data. By using our Websites, App and/or Services, you agree to the transfer of your personal data to other jurisdictions.

INFORMATION SECURITY

We are committed to taking appropriate measures designed to keep your personal data secure. Our technical and organizational procedures are designed to protect your personal data from accidental, unlawful or unauthorized loss, access, disclosure, use, alteration, or destruction. While we make efforts to protect our information systems, no website, mobile application, computer system, or transmission of information over the Internet or any other public network can be guaranteed to be 100% secure. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorized access or inadvertent disclosure.

Where we have given you (or where you have chosen) a password which enables you to access the Online Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

RETAINING PERSONAL DATA

We will only keep your information for the length of time needed to carry out the purposes outlined in this privacy statement and for the purposes of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Even if you request that we erase your data, we may still need to keep it (please see below) or may keep it in a form that does not identify you.

If you have not agreed that we may use your personal data for marketing purposes, we will keep it for a period of 6 years after you have visited one of our hotels, restaurants or residences, or last used the Online Services, whichever is longer.

YOUR CHOICES & RIGHTS

Depending upon where you reside, certain choices and rights may be available to you under applicable data protection laws. If you have questions about what rights may apply to you, please contact us at [email protected].

Verifying Your Request

Only you, or a person that you authorize to act on your behalf, may make a request related to your personal data. In the case of access and deletion, your request must be verifiable before we can fulfill such request. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected personal data, or a person authorized to act on your behalf. We will only use the personal data you have provided in a verifiable request in order to verify your request. Please note that, in certain jurisdictions, we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive or manifestly unfounded.

Authorized Agents

If you are submitting a privacy rights request on behalf of another individual, we may require more information from you, or your authorized agent to verify that you are the person directing the agent. We may ask you to provide a signed authorization for your agent to make the request or to verify your identity or confirm your request directly with us.

Information for California Residents

This section of the privacy statement applies to those visitors or users of our online services and others who are residents of California, as required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). Depending on how you interact with us, we may collect or use information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“personal information”).This section expands upon the key information about how we collect and use personal information that we provided in our California Privacy Notice at Collection. Under the CCPA, you have certain rights with respect to your personal information, including the:

1. Right to Notice.You have the right to be notified which categories of personal information are being collected and the purposes for which the personal information is being used, as outlined in our California Notice at Collection and this privacy statement.
2. Right to Request Access to Specific Information and Data Portability Rights.You have the right to request that we disclose certain information about our collection and use of your personal information over the past 12 months. We may ask that you provide certain information to identify yourself so that we may compare it with our records in order to verify your request. You may request the following:
   • The categories of personal information we have collected about you.
   • The categories of sources for the personal information we have collected about you.
   • The specific pieces of personal information we have collected about you.
   • Our business or commercial purpose for collecting and/or selling your personal information.
   • The categories of third parties to whom we have sold or shared your personal information, if any, and the categories of personal information that we have shared with each third-party recipient.
3. Right to Opt-Out of the Sale or Sharing of Personal Information.You have the right to opt-out of the sale of your personal information and/or the sharing of your personal information with third parties for the purposes of cross-context behavioral advertising, including email marketing, or profiling by submitting a request to us. You can also exercise your right to opt-out of the sale or sharing of personal information clicking the “Your Privacy Choices” link on the footer of the page or through an opt-out preference signal. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored. If you submit a request to opt-out, including through an opt-out preference signal, after you have consented to our sale or sharing of personal information, we will opt you out of any further selling or sharing of personal information. Please note, we do not sell personal information, including the personal information of any individuals under the age of 16.
4. Right to Limit Use of Sensitive Personal Information. You have the right to request that we limit our use of any sensitive personal information, as defined under the CCPA, to those uses which are necessary to provide our services and/or products or for other business purposes as identified in the CCPA. Please note that we do not currently collect sensitive personal information.
5. Right to Delete.You have the right to request that we delete any personal information that we collect and retain from and/or about you, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete (and direct our service providers to delete) the relevant personal information from our records, unless an exception under the law applies.
6. Right to Correct. You have the right to request that we correct any inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes for which we are processing such personal information. We will use commercially reasonable efforts to correct such inaccurate personal information.
7. Right to No Discrimination.You will not receive any discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

Shine the Light Law (Cal. Civ. Code § 1798.83): We only share personal information (as defined) with third parties for direct marketing purposes if you either specifically opt-in, or are offered the opportunity to opt-out and elect not to opt-out of such sharing at the time you provide personal information. If you do not opt-in or if you opt-out at that time, we will not share your personal information with that identified third party for direct marketing purposes.

Information for Residents of the European Economic Area (“EEA”), Switzerland and United Kingdom (“UK”)

Residents of the EEA, Switzerland and the UK have the following rights with respect to their personal data:

1. Right to Access. You have the right to confirmation as to whether or not we are processing your personal data, and, where that is the case, access to the personal data and the following information: (i) purposes of the processing; (ii) categories of personal data concerned; (iii) recipients or categories of recipient to whom the personal data has or will be disclosed, in particular recipients in third countries or international organizations; (iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (v) your right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (vi) your right to lodge a complaint with a supervisory authority; (vii) source of the personal data; and (viii) any automated processing of your personal data.
2. Right to Erasure/Right to be Forgotten. You have the right to request we erase your personal data without undue delay.
3. Right to Rectification. You have the right to rectification of inaccurate personal data, taking into account the purposes of the processing.
4. Right to Restrict Processing. You have the right to restrict processing of your personal data where one of the following applies: (i) you are contesting the accuracy of your personal data; (ii) the processing is unlawful and you oppose the erasure of the personal data in favor of restriction of processing; (iii) we no longer need your personal data for the purposes of the processing, but are required to keep the personal data for the establishment, exercise or defense of legal claims; (iv) you have objected to processing personal data pending the verification of legitimate interests.
5. Right to Object to Further Processing. You have the right to object at any time to processing of personal data concerning yourself which is based on public interests or legitimate interests, including profiling based upon those legal bases.
6. Right to Data Portability. You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and have the right to transmit that personal data to another controller without hindrance from us, where: (i) the processing is based on consent or on a contract and (ii) the processing is carried out by automated means.
7. Right to Withdraw Consent. Where processing is based on consent, you have the right to withdraw your consent at any time. Note, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
8. Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement of your data privacy rights.

Information for Residents of Canada

Subject to certain exemptions and limitations, Canadian residents may have the following rights with respect to their personal data:

Right of Access.  You have the right to access the personal data we hold about you and to receive a general account of our uses of that personal data. If you are a resident of Québec, subject to certain restrictions, you may also ask us in writing to provide you with computerized personal data that we collected from you in a structured, commonly used technological format. In certain limited circumstances, we may not be able to make all relevant personal data available to you, such as when that personal data also relates to another individual. In such circumstances, we will, upon request, provide you with the reasons for such refusal.

Right to Correction/Rectification.  If the personal data we hold about you is inaccurate or incomplete, you are entitled to have it rectified. Where appropriate, such amended personal data will be provided to the parties to whom we are authorized to disclose your personal data.

Right to Withdraw Consent. In Canada, the only legal basis that we rely upon to process your personal data is your implied or express consent, except where permitted or required by law. You have the right to withdraw your consent to our processing of your personal data at any time. However, this will not affect the lawfulness of any processing of such information carried out before you withdrew your consent or if your consent is not required to collect, use, or disclose your personal data.

Information for Residents of Mexico

This section of our privacy statement applies to those visitors or users of our online services and others who are residents of Mexico, as required under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (“LFPD”).

Sensitive Personal Data Processing: Please note that for the purposes of this privacy statement, we do not process any sensitive personal data, and you must refrain from providing this type of personal data. Under Mexican LDFP, sensitive personal data includes racial or ethnic origin; health data; genetic information; religious, philosophical, and moral beliefs; political opinions, and sexual preferences.

Data Processing Purposes:  Under Mexican data protections laws and regulations, all Business or Commercial Purposes for Collection and Use listed in the sections INFORMATION WE COLLECT AND PROCESS and RATIONALE FOR PROCESSING OF PERSONAL DATA shall be deemed as primary purposes, except for the following secondary purposes:

• • Marketing and Advertisements.

The primary purposes established listed in this privacy statement do not require your consent to be carried out, as they are covered by the exceptions set forth in Article 9 of the LFPD.

Also, you may, at any time, “opt-out” from receiving advertisement and/or marketing e-mails and similar communications from us by using the “unsubscribe” feature included in the e-mails we send or by exercising your Right to Object as explained in the next section.

ARCO Rights: Under the LFPD, you have certain rights with respect to your personal information, including the Access, Rectification, Deletion and Objection rights (“ARCO rights”). These rights include:

1. Right to Access: The right to know what personal data we hold about you, as well as information about how we process or share it.
2. Right to Rectification: The right to request, at any time, the correction of your data if it is inaccurate or incomplete.
3. Right to Delete: The right to stop the processing of your personal data, through its blocking and subsequent deletion.
4. Right to Object: The right to object, on legitimate grounds, to the processing of your personal data.

To exercise any of your ARCO rights, you may e-mail us at [email protected], with a request that must include: (i) your full name and address, or another means by which we can communicate the response to your request; (ii) a copy of a document proving your identity, and if applicable, a signed authorization for your agent to make the request on your behalf; (iii) a description of the ARCO right you wish to exercise, and the personal data related to your request; and (iv) if applicable, any other information or documents that may help us locate your personal data or support your request, particularly in cases where you are requesting rectification or objecting to processing.

We will respond to your request within twenty (20) business days from the date it is sent and received. If your request is valid, we will carry it out within fifteen (15) business days from the date on which we communicate our response. If the information and/or documentation provided in your request is incomplete, incorrect, and/or insufficient, or if the documents required to prove your identity or legal representation are missing, we will ask you to correct and address the deficiencies to proceed. You will have ten (10) business days to respond to the request for clarification and correction; otherwise, your request will be considered as not submitted. The use of electronic means to exercise ARCO rights authorizes us to respond through the same means, unless you clearly and expressly indicate another preferred method of contact in your request.

The Right to Delete is not absolute. We may be required to retain certain information to comply with legal obligations and we may share your personal data with other entities or authorities for this purpose. In such cases, you may need to exercise this right directly with the entity that received your personal data.

Consent Withdrawal: In certain cases, you may withdraw your consent for the processing of your personal data; however, such withdrawal will not affect any situations, procedures, or data transfers carried out prior to the withdrawal of your consent. Please note that there may be public policy provisions that require us to retain your information for a minimum legal period; in such cases, your information will be retained solely to comply with those legal obligations. If you wish to withdraw your consent, you may submit a request by following the applicable instructions for exercising your ARCO Rights, via email at [email protected].

Limitations on the Use or Disclosure of your Personal Data: You may limit the use or disclosure of your personal data, you may submit the corresponding request by following the applicable instructions for exercising your ARCO Rights, via email at [email protected].

THIRD-PARTY LINKS

We may provide links to other websites or resources provided by third parties. These links are provided for your convenience only. We have no control over the contents of those websites or resources and accept no responsibility for them or for any loss or damage that may arise from your use of them. If you decide to access any third-party links on the Websites or App, you do so entirely at your own risk and subject to the terms and conditions of those websites.

CHANGES TO THIS PRIVACY STATEMENT

This privacy statement is effective as of the date stated at the top of this privacy statement. We may change this privacy statement from time to time. By accessing and using the Websites, App and Online Services after we notify you of such changes to this privacy statement, you are deemed to have accepted such changes. Please refer back to this privacy statement on a regular basis.