Privacy Policy

1. Who we are and the scope of this policy

Naturally Savoury is a UK cooking education and editorial project based at 42 Orchard Mews, York YO1 8QW, United Kingdom. For the purposes of applicable UK data protection law, Naturally Savoury is the controller of personal information collected through this website. You can contact us at [email protected] or on +44 1632 960 451. This policy applies when you browse naturallysavoury.info, submit an enquiry, register interest in an online cooking course, communicate with our team, or exercise a data protection right.

This policy does not govern a website operated by another organisation. If we provide a link to an external service, that service will have its own privacy information and security practices. We encourage you to read it before providing personal information. We keep this policy under review and show the latest revision date above. Material changes will be presented clearly on the website or communicated directly where appropriate.

2. Information we collect

When you use a contact or course registration form, we collect the information you choose to provide. This may include your full name, email address, optional telephone number, enquiry subject, cooking experience, preferred course session and the content of your message. If you continue a conversation by email or telephone, we may retain the correspondence, dates of contact and practical notes needed to answer your request. If a course place is later arranged outside this website, further information will be explained at that stage and covered by the relevant confirmation.

We also receive limited technical information when the website is requested from our hosting environment. This may include an internet protocol address, browser type, device category, requested page, date and time, referring page and basic security events. We do not ask you to submit special category data through our website forms. Please do not include confidential health, financial, identity document or other sensitive information in a free-text message.

3. How we obtain personal information

Most personal information comes directly from you when you complete a form, email us, call us or respond to a message. Technical information is generated through the ordinary operation and security of the website. We may also receive information from a person acting with your authority, for example if someone sends a joint course enquiry. In that case, the sender should have permission to provide the other person’s details and should make this policy available to them.

We do not purchase marketing lists, collect information from data brokers or use this website to build profiles from unrelated sources. Information published openly on social media is not automatically added to our contact records. If a public post is relevant to a direct enquiry, we will use only what is necessary to understand and respond to that communication.

4. Purposes and lawful bases

We use enquiry information to read, route and answer your message. The lawful basis is normally our legitimate interest in managing genuine communications about Naturally Savoury, or taking steps at your request before a possible course arrangement. We use course registration information to understand demand, identify a potentially suitable session and send the current format, timing and next steps. Where the communication is necessary to discuss or perform an arrangement with you, the lawful basis is contractual necessity or steps requested before a contract.

We use limited technical data to deliver pages, maintain availability, diagnose faults, protect forms against misuse and keep proportionate security logs. This is based on our legitimate interest in operating a reliable and secure website. Where optional browser technologies require consent, we request that consent through the cookie controls and do not treat silence or continued browsing as agreement. We may also process information where needed to comply with a legal obligation or to establish, exercise or defend legal claims.

5. Communications and marketing choices

A reply to a question or course registration is a service communication, not a subscription to general marketing. We do not add form users to a promotional mailing list merely because they contacted us. If we introduce a newsletter or promotional email in future, we will provide a distinct choice where required, identify Naturally Savoury as the sender and include a clear method to stop further messages.

You may ask us at any time to stop direct marketing. The right to object to processing for direct marketing is absolute. We may retain a minimal suppression record, such as an email address and opt-out date, so that your preference is respected rather than accidentally reversed by a later upload. Stopping promotional messages does not prevent us from sending an essential reply about a request you initiated or a course arrangement you are currently discussing.

6. Sharing information and service providers

We do not sell personal information. Access is limited to people who need it for the purposes described in this policy. We may use carefully selected providers for website hosting, email delivery, form processing, file storage, security monitoring and online session administration. Those providers may process information for us under appropriate contractual and confidentiality requirements. They are not authorised to use it for their own unrelated advertising.

We may disclose information to professional advisers, insurers, regulators, law enforcement bodies or courts where disclosure is lawful and necessary. If the organisation or relevant assets are reorganised, transferred or combined with another operator, information may be shared under confidentiality while the change is assessed and transferred only where lawful. We will not share course enquiries with unrelated food, retail or lifestyle businesses for their independent marketing.

7. International transfers

We aim to select services that store information in the United Kingdom or European Economic Area where practical. Some technology providers may operate from, or permit support access from, other countries. When a restricted transfer of personal information is made, we will use an applicable safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful mechanism. We also assess practical security and limit the information made available.

Internet services can route technical requests through several locations. A transfer safeguard does not remove every operational risk, but it creates enforceable obligations for the recipient. You may contact us for further information about the category of safeguard relevant to your information. We may withhold confidential commercial or security details while still providing a meaningful explanation.

8. Retention and deletion

We keep information only as long as it is reasonably needed. General enquiries are normally retained for up to 18 months after the last meaningful contact. Unconfirmed course interest records are normally retained for up to 24 months so we can answer follow-up questions and understand previous correspondence. If an arrangement is confirmed, relevant records may be kept for up to six years after the relationship ends where needed for contractual, accounting, complaint or legal purposes. Routine security logs are normally deleted or anonymised within 90 days unless an incident requires longer investigation.

These periods are starting points, not a promise that every record will be kept for the maximum time. We may delete information earlier when it is no longer useful. We may keep a record longer where law requires it, a dispute is active, a person asks us to preserve correspondence, or deletion would interfere with the protection of legal rights. At the end of the relevant period, information is deleted, anonymised or securely isolated pending deletion.

9. Security and data minimisation

We use proportionate organisational and technical measures designed to protect personal information against unauthorised access, alteration, loss and disclosure. Measures may include access controls, strong authentication, software maintenance, encrypted transport, backups, provider review and limits on staff access. No website or transmission method can be guaranteed completely secure, so we also maintain procedures for identifying, assessing and responding to suspected incidents.

Please use the forms only for the information requested and keep a copy of important correspondence. If you believe information sent to us has been exposed, misdirected or accessed unexpectedly, contact us promptly using the details above. We will investigate, take reasonable containment steps and make any notification required by applicable law.

10. Your data protection rights

Depending on the circumstances, UK data protection law may give you rights to be informed, request access to personal information, correct inaccurate or incomplete information, request erasure, restrict certain processing, object to processing, and receive information you provided in a portable format. Where processing depends on consent, you may withdraw that consent at any time without affecting processing already carried out lawfully. Rights are not identical in every situation and lawful exemptions may apply.

To make a request, email [email protected] and describe the information or right involved. We may ask for information reasonably necessary to confirm identity and locate the records. We normally respond within one month, although complex or multiple requests may lawfully take longer. We will explain any extension or refusal. You also have the right to complain to the Information Commissioner’s Office. We would welcome the opportunity to consider your concern first, but contacting us does not limit that right.

11. Children’s information and automated decisions

The website and online course enquiries are intended for adults. We do not knowingly invite children to submit personal information independently. A parent or guardian who believes a child has provided information should contact us so we can assess and, where appropriate, remove it. We do not use information from website forms for solely automated decisions that produce legal or similarly significant effects, and we do not use it for behavioural profiling.

12. Questions about this policy

Questions, requests and concerns about this policy can be sent to Naturally Savoury at [email protected], by telephone on +44 1632 960 451, or by post to 42 Orchard Mews, York YO1 8QW, United Kingdom. Please mark postal correspondence “Privacy”. We will use the information in your message to review and respond to the matter.