This Privacy Policy explains how Nella Catering ("we", "us", "our") collects, uses, and protects your personal data when you use our website at wearenella.com or submit an enquiry. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
01 Who We Are
Nella Catering is a catering and private dining business based in Yorkshire, United Kingdom. We are the data controller for the personal information collected through this website.
Contact: enquiries@wearenella.com
02 What Information We Collect
We collect personal information that you voluntarily provide to us when you:
- Submit an enquiry through our contact form (name, email address, phone number, event details)
- Leave a review on our website (name and review content)
- Contact us directly by email or phone
We may also collect non-personal data automatically, including:
- Browser type and version
- Pages visited and time spent on the site
- Referring website (how you found us)
- General location (country/city level only, via IP address)
03 How We Use Your Information
We use the personal information you provide solely to:
- Respond to your event enquiry and provide a quote
- Communicate with you about your booking or event
- Send you a full allergy and dietary requirements questionnaire prior to your event
- Improve our website and services based on general usage patterns
We will never sell, rent, or share your personal data with third parties for marketing purposes.
04 Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases to process your personal data:
- Contractual necessity — to respond to your enquiry and fulfil your event booking
- Legitimate interests — to operate and improve our website and services
- Consent — where you have explicitly agreed (e.g. accepting cookies)
05 Cookies
Our website uses cookies — small text files stored on your device — to improve your experience. We use:
- Essential cookies — necessary for the site to function (e.g. remembering your cookie preference)
- Analytics cookies — help us understand how visitors use our site (only if you consent)
You can accept or decline non-essential cookies using the banner shown when you first visit the site. You can also manage cookies through your browser settings at any time. Declining cookies will not affect your ability to use the site.
06 Allergy & Dietary Information
Where you provide information about food allergies or dietary requirements — either in your initial enquiry or via our detailed allergy questionnaire — this constitutes special category data under UK GDPR (health information).
We process this data only with your explicit consent, solely for the purpose of safely planning and preparing food for your event. This information is kept strictly confidential and is never shared with any third party except where directly required to fulfil your event (e.g. with our kitchen team).
Allergy data related to your event is securely deleted within 90 days of your event date.
07 Data Retention
We retain your personal data only for as long as necessary:
- Enquiry data — up to 12 months if no booking is made, or for the duration of the client relationship
- Booking and event data — up to 7 years for accounting and legal compliance purposes
- Allergy information — deleted within 90 days of the event
- Cookie preference — stored locally in your browser until you clear it
08 Third-Party Services
Our website uses the following third-party services, each with their own privacy policies:
- Supabase — cloud database used to store site content settings. Privacy Policy ↗
- EmailJS — used to send enquiry form submissions to our email. Privacy Policy ↗
- Google Fonts — fonts loaded from Google's servers. Privacy Policy ↗
- Unsplash — photography hosted externally (no personal data shared)
- Instagram — our post cards link to our public Instagram profile (@nella.catering)
Enquiry form data passes through EmailJS servers solely to deliver it to our inbox. EmailJS does not store your data beyond the transmission.
09 Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your personal data ("right to be forgotten")
- Restriction — ask us to limit how we use your data
- Portability — request your data in a machine-readable format
- Object — object to our processing of your data in certain circumstances
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at enquiries@wearenella.com. We will respond within 30 days.
10 Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website admin area is password-protected, and data stored in our cloud database (Supabase) is encrypted in transit and at rest.
However, no method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us.
11 Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO — please reach out to us first at enquiries@wearenella.com.
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always reflect when it was last updated. We encourage you to review this page periodically.