Privacy Policy
Last edited: 17/07/2026
Nonna's Deli ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect when you use our website, book an event, or get in touch, how we use it, and the rights you have over it.
For the purposes of UK data protection law, the data controller is Nonna's Supper Club. If you have any questions about this policy or your data, contact us at info@nonnassupperclub.com.
The information we collect
Booking and reservation details — your name, email address, phone number, number of guests, the date and time of your visit, and any dietary requirements, allergies or special requests you tell us.
Payment information — where an event requires a deposit or ticket payment, your card payment is processed securely by our payment provider, Square. We do not see or store your full card details; we receive only a confirmation and a limited reference (such as the last four digits and the amount paid).
Newsletter and waiting-list sign-ups — your email address (and name, where provided) when you subscribe to our newsletter or join the waiting list for a sold-out event.
Messages you send us — the contents of any enquiry you submit through a contact form or send us by email.
Website usage data — if you consent to analytics cookies, information about how you use the site (such as pages visited and general location), collected in aggregated, anonymised form by Google Analytics. See our Cookie Policy for details.
Security data — to protect our forms from spam and abuse we use Cloudflare Turnstile, which may process technical information such as your IP address and browser characteristics.
How and why we use your information
What we use it forLawful basis
Taking and managing your booking, and contacting you about it
Performance of a contract
Handling deposits, ticket payments and refunds
Performance of a contract
Catering for allergies and dietary needs
Legitimate interests
Sending you our newsletter or waiting-list updates
Your consent
Responding to enquiries you send us
Legitimate interests
Understanding and improving how our website is used
Your consent (analytics cookies)
Keeping our website and forms secure
Legitimate interests
Meeting our legal and accounting obligations
Legal obligation
Who we share it with
We do not sell your personal information. We share it only with trusted service providers who help us run our business, and only as far as they need it:
Square — to process payments.
Google Analytics — to measure website usage (only if you accept analytics cookies).
Cloudflare — to deliver and secure our website and protect our forms from abuse.
Postmark — to send booking confirmations and newsletters.
Some of these providers are based outside the UK, including in the United States. Where your information is transferred abroad, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU–US Data Privacy Framework.
We may also disclose information where we are required to by law.
How long we keep it
We keep booking and payment records for as long as needed to provide our service and to meet our legal and accounting obligations (typically up to [6/7] years). We keep newsletter and waiting-list details until you unsubscribe or ask us to remove them. Enquiry messages are kept only as long as needed to deal with your request.
Your rights
Under UK data protection law you have the right to:
access the personal information we hold about you;
ask us to correct information that is inaccurate or incomplete;
ask us to delete your information in certain circumstances;
object to, or ask us to restrict, certain processing;
withdraw consent at any time (for example, by unsubscribing from our newsletter or rejecting analytics cookies); and
request a copy of your information in a portable format.
To exercise any of these rights, contact us at info@nonnassupperclub.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.