Privacy notice

When you book a table

We ask for your name, phone number and, if you have one, your email address, along with the date, time and size of your party and anything you tell us in the notes. We use it to hold your table, to contact you about that booking, and to keep a record of what happened — whether the booking was confirmed, changed or cancelled.

We keep booking records for up to three years. That lets us recognise regulars, settle any question about a past booking, and understand how busy our services are.

If your booking needs a deposit we will send you a payment link. We never see or store your card details — see Payments below.

When you buy a gift card or an event ticket

We ask for your name and email address, and optionally your phone number, so we can send you your order and your gift card or ticket. If the gift card is for someone else, we also ask for their name, email address and your message, purely so we can send it to them. We do not add gift recipients to any mailing list.

We keep order records for six years, because we are required to keep records of sales for tax purposes.

When you enquire about a private event

We keep your name, contact details and what you tell us about your event so we can quote for it and organise it. If the event does not go ahead we keep the enquiry for up to two years, in case you come back to it.

When you join the Zucchinis Club

We ask for your name, email address and phone number, and optionally the day and month of your birthday — never the year, because we do not need your age. We use your phone number to link your bookings to your membership and your email address to link your orders, so that member benefits reach you without you having to remember anything.

We only send you club emails because you ticked the box asking us to, and you can stop them at any time by replying to any message or telling us in the restaurant. When you leave the club we keep a record that you asked to leave — if we deleted it entirely, you would end up back on the list the next time we imported anything, receiving exactly what you asked not to receive.

We never sell your details, and we never pass them to another business for their own marketing.

Payments

Card payments are handled by Stripe. Your card number never reaches us and we never store it. We receive only confirmation that a payment succeeded, the amount, and the last four digits of the card. Stripe processes that data under its own privacy policy.

Who else touches your data

We use a small number of suppliers to run this website and nothing more. Our website and database are hosted by Vercel and Neon, our emails are sent through Resend, our images are stored with Cloudinary, and payments go through Stripe. They process your data on our instructions and are not allowed to use it for anything of their own.

Cookies

This site does not use advertising or tracking cookies, and we do not run analytics that profile you. The only things stored in your browser are what the site needs to work — for example, remembering whether you chose the light or dark theme.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us using it. Just ask — by email, by phone, or in person — and we will deal with it within a month. There is no charge.

If you are not happy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can put it right.