Privacy Policy

Privacy Notice

Last updated: 18 September 2026

This notice explains how Obrigado Hospitality Ltd collects and uses your personal data when you visit our website or get in touch with us, and sets out your rights under UK data protection law.

Who we are

Obrigado Hospitality Ltd ("we", "us", "our") is the data controller responsible for your personal data.

Company number: 17105795

Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ

ICO registration reference: ZC149117

Contact for data protection queries: hello@obrigadofood.co.uk

What data we collect and why

We only collect what we need. Depending on how you use the site, this includes:

When you use our contact or catering enquiry form — your name, email address, and anything you choose to put in your message. We use this to reply to your enquiry. Lawful basis: legitimate interests (responding to people who contact us).

When you sign up to our mailing list — your email address. We use this to send you news, offers, and updates about Obrigado. You can unsubscribe at any time using the link in every email. Lawful basis: consent.

When you visit the site — limited technical and usage data (such as your device type, browser, and pages viewed) collected through cookies and analytics. We use this to keep the site working and understand how it's used. Lawful basis: consent (for non-essential cookies); legitimate interests (for essential site functionality).

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Cookies

Our website uses cookies. Essential cookies keep the site running and don't need your consent. Non-essential cookies (such as analytics) are only used where you've agreed via our cookie banner. You can change or withdraw your cookie choices at any time through your browser settings or the banner.

Who we share your data with

We don't share your data with third parties for their own marketing. We do use trusted service providers who process data on our behalf, under contract and only on our instructions:

Squarespace — hosts our website and processes contact form submissions, mailing list signups, and site analytics.

We may also disclose data where we're legally required to (for example, to HMRC or in response to a lawful request).

Sending data outside the UK

Some of our providers, including Squarespace, are based in the United States. Where your personal data is transferred outside the UK, we make sure appropriate safeguards are in place — such as the UK Extension to the EU–US Data Privacy Framework, the International Data Transfer Agreement, or Standard Contractual Clauses — so your data stays protected.

How long we keep it

Contact and catering enquiries: up to 24 months after our last contact with you, then deleted.

Mailing list: until you unsubscribe or ask us to remove you.

Website analytics: retained in line with our analytics provider's standard periods.

Your rights

Under UK data protection law you have the right to:

Access the personal data we hold about you

Ask us to correct data that's wrong or incomplete

Ask us to delete your data

Object to, or ask us to restrict, how we use it

Withdraw consent at any time (where we rely on consent)

Ask for a copy of your data in a portable format

To exercise any of these, email hello@obrigadofood.co.uk. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO):

Website: ico.org.uk

Helpline: 0303 123 1113

Changes to this notice

We may update this notice from time to time. Any changes will be posted on this page with a revised "last updated" date.