Clear information,
thoughtfully shared.

Your information,
treated with care.

This Privacy Policy explains how Namaste Village Norwich Limited collects and uses personal information whenever you interact with us, whether online, in person, through a representative, or through a relevant third party acting in connection with our services.

The examples below are indicative, not exhaustive. They include our websites and forms; bookings and enquiries; direct orders and relevant delivery enquiries; vouchers; classes, events and venue-hire requests; email, telephone and social-media messages; newsletters, competitions, feedback and Wi-Fi where offered.

1. About this policy

When we say “Namaste Village”, “we”, “us” or “our”, we mean Namaste Village Norwich Limited where it determines why and how personal information is processed. This policy applies whenever we collect or receive information in connection with our restaurants, websites, bookings, orders, enquiries, marketing, vouchers, cookery classes, events, venue or catering enquiries, competitions, feedback and related services.

An external restaurant partner, delivery marketplace, booking, payment, ticketing or voucher provider may separately decide how it uses information you give directly to it. Its own privacy policy will then also apply. Information that has been irreversibly anonymised so that it cannot identify anyone is not personal information.

2. Information we may collect

Depending on how you interact with us, we may collect your name, email address, telephone number, postal or delivery address, booking and party details, order and payment-related details, voucher or event information, dietary or accessibility requirements, messages and feedback, marketing preferences, and technical information about how you use our website.

We may receive this information directly from you, from someone making a booking or enquiry on your behalf, or from a booking, ticketing, voucher, delivery, payment or social-media platform you choose to use. Please share health, dietary or accessibility information only where it is relevant to the service requested.

Identity and contact information

Name, title, postal or delivery address, email address, telephone number and the details of someone arranging a booking, order or enquiry for another person.

Booking, visit and hospitality information

Restaurant, date and time, party size, booking history, seating or access requests, celebration details, relevant notes, attendance, cancellation or no-show information, and communications about a reservation.

Order, purchase and transaction information

Items ordered, delivery or collection details, voucher purchases and redemptions, class or event tickets, transaction value, payment status, refunds and records needed for accounting or fraud prevention. Payment providers may collect card or account details directly; we receive the transaction information needed to manage the purchase.

Events, venue, catering and van-hire enquiries

Preferred dates, guest numbers, location, budget, menu and service requirements, and the correspondence needed to prepare and respond to an enquiry.

Dietary, allergy and accessibility information

Where you choose to provide it and it is relevant, we may record information about allergies, dietary requirements, disability or accessibility needs. Some of this may be health information and therefore special-category personal data. Please provide only what is reasonably necessary for us to assist you.

Marketing, communications and feedback

Newsletter choices, consent records, interests, competition entries, survey responses, emails, contact forms, social-media messages, reviews, complaints, photographs and other content sent to us in connection with our services.

Website, device and usage information

IP address, device and browser type, operating system, approximate location derived from an IP address, referring page, pages and links used, visit times, cookie identifiers, consent choices and diagnostic or security information. The Cookie Policy explains the relevant technologies and controls.

3. How we receive information

We may receive information directly from you; from someone acting for you; when you communicate with or visit a restaurant; automatically through our website and consented technologies; from reservation, ticketing, voucher, payment, delivery or social-media platforms; from providers working for us; and from lawful public or business sources.

If you give us information about another person, you should ensure that you are entitled to do so and that they understand how it will be used. Where practicable, please direct them to this policy.

4. How and why we use your information

We use personal information to manage bookings, orders and enquiries; provide food, vouchers, classes, events and other requested services; communicate confirmations and important updates; respond to feedback and complaints; improve our website and hospitality; prevent misuse and protect our business; and meet legal, tax and accounting obligations.

We send marketing only where you have consented or where the law otherwise permits it. You can unsubscribe at any time using the link in a marketing message or by contacting us. Essential service messages about a booking, order or purchase are not marketing.

Providing a service or taking requested steps

We manage bookings, visits, direct orders, vouchers, classes, events, catering and venue enquiries; send confirmations; answer questions; and administer permitted changes, cancellations or refunds. The basis is normally performance of a contract or taking steps at your request before entering one.

Operating and improving Namaste Village

We may understand demand, improve menus and customer journeys, train and support our team, manage suppliers and maintain business records. We rely on legitimate interests in operating and improving the business, balanced against your rights and expectations.

Safety, security and legal obligations

We may protect people, premises, systems and business interests; prevent fraud or misuse; investigate incidents; handle claims; and comply with tax, accounting, licensing, food-safety, allergen, insurance, court or regulatory duties. We rely on legal obligations and legitimate interests as appropriate.

Special-category information

Where a dietary, allergy or accessibility request reveals health, disability, religious or philosophical information, we use only what is relevant and rely on an additional legal condition where required. This will normally be explicit consent, information you have deliberately made public, protection of vital interests in an emergency, or the establishment, exercise or defence of legal claims.

5. Our lawful bases

We process information where it is necessary to perform a contract with you or take steps at your request; to comply with a legal obligation; for our legitimate interests in operating, securing and improving Namaste Village; or with your consent where consent is required. We do not sell your personal information.

6. Marketing choices

Marketing is optional and is not a condition of receiving our core services. Every marketing email provides an unsubscribe method. You may also contact us directly. After an opt-out, we may retain the minimum information needed on a suppression list so that the choice is respected. We may still send necessary non-marketing messages about a booking, order, purchase, safety issue or legal matter.

7. Cookies and similar technologies

Cookies and similar technologies support website security, remember privacy choices and, where permitted, provide analytics and marketing. Strictly necessary technologies operate where the law allows; non-essential technologies are used in line with the choices presented to you. See the Cookie Policy and Cookie settings for details.

8. Who receives information

We use trusted providers for website hosting, forms, reservations, payments, communications, vouchers, classes and events, delivery, analytics and advertising. They receive only the information needed for the relevant service and must handle it under appropriate contractual safeguards. We may also share information where required by law, with professional advisers, or where reasonably necessary to protect people, property or our rights.

• Authorised restaurant team members who need the information.
• Website, hosting, security, communications, forms and IT providers.
• Reservation, payment, voucher, ticketing, event, delivery and customer-support providers.
• Analytics, advertising and social-media providers where enabled and permitted.
• Professional advisers, insurers, auditors and banks.
• Courts, regulators, law enforcement, emergency services or public authorities where disclosure is required or permitted.
• A genuine prospective purchaser or investor in a business sale or restructuring, subject to appropriate confidentiality.

9. Third-party services and platforms

Reservation, ticketing, voucher, delivery and other third-party platforms may be separate controllers for information you give them directly and will process it under their own privacy policies. Please read the relevant platform's policy. This policy covers the personal information for which Namaste Village Norwich Limited is responsible.

Examples may include OpenTable, Ticket Tailor, GiftPro, relevant delivery partners, payment providers and social networks where those services are enabled. This list is indicative and may change. We may receive the information needed to fulfil the relevant booking, order, voucher, ticket or enquiry, but we do not control a platform's independent account security, payment process or retention decisions.

10. International transfers

Some providers may process information outside the UK. Where this happens, we use safeguards recognised by UK data-protection law, such as adequacy regulations or approved contractual safeguards, including the UK International Data Transfer Agreement where appropriate.

Other recognised safeguards may include UK adequacy regulations, the UK Addendum to approved standard contractual clauses or another lawful transfer mechanism. You may contact us for more information about safeguards relevant to your information.

11. Keeping your information secure

We use reasonable technical and organisational measures intended to protect personal information against accidental loss, unauthorised access, alteration or disclosure. Access is limited to people and providers who need the information for a legitimate purpose. No internet service is completely secure, so please avoid sending sensitive information through an unsecured channel unless it is necessary.

Measures may include access controls, authentication, role-based permissions, secure service providers, backups, system updates, staff guidance and procedures for responding to suspected incidents. No website, email or transmission method can be guaranteed completely secure.

12. How long we keep information

We keep information only for as long as necessary for the purpose collected, including legal, accounting and dispute-resolution requirements. Booking and enquiry records are normally retained for up to two years. Marketing information is retained until you unsubscribe or ask us to remove it, although we may retain a limited suppression record so that we respect your choice.

• Transaction, invoice and tax records may be retained for the period required by law, commonly up to six years after the relevant financial period.
• Cookie and online identifiers follow the period stated by the relevant provider or until deletion or withdrawal of consent.
• Allergy, accessibility and special-request notes are kept only as long as reasonably needed for the service, incident or legal requirement.

These periods are general guides. We may keep information for less time, or longer where lawfully necessary to investigate an issue, resolve a dispute, prevent fraud or establish, exercise or defend a claim. Information is then deleted, securely destroyed or anonymised.

13. Your data-protection rights

Depending on the circumstances, you may ask us to access, correct, erase, restrict or transfer your personal information, or object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier processing. Email compliance@namastevillage.co.uk. We may need to verify your identity before responding.

• Access your information and obtain a copy.
• Correct inaccurate or incomplete information.
• Request erasure where no lawful reason requires retention.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests and object at any time to direct marketing.
• Receive eligible information in a structured, machine-readable format and ask for transfer where portability applies.
• Withdraw consent without affecting earlier processing.

Rights are not absolute. We may retain or continue using information where the law permits or requires it, and will explain the reason. A rights request is normally free, although the law allows a reasonable fee or refusal for a manifestly unfounded or excessive request.

14. Exercising your rights

Describe your request clearly by email. We may ask for information needed to confirm identity or authority. We aim to respond within the legal period, normally one month after receiving a valid request and any reasonably required verification. The law permits an extension for a complex request or multiple requests; if it applies, we will tell you.

15. Automated decisions

We do not currently make decisions producing legal or similarly significant effects about customers solely by automated means. If this changes, we will provide the information and safeguards required by law.

16. Complaints

You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.

17. Children

Our website is not directed at children and we do not knowingly collect their personal information online. Where information about a child is genuinely required for a booking, event or dietary requirement, it should be provided by a parent, guardian or responsible adult and limited to what is necessary.

18. External links

Our website may link to other websites and services. Their privacy and security practices are outside our control, so please read their policies before submitting information to them.

19. Changes to this policy

We may update this policy when our services, providers, technology or legal obligations change. The latest version will appear here. Where a change materially affects how we use information, we will take reasonable steps to bring it to your attention where required.

20. Contact us

Questions about this policy, our use of personal information or a data-protection request can be sent to compliance@namastevillage.co.uk.

Last updated: 17 September 2026