Last updated: 29 July 2026

La Cucina Italiana respects your privacy. This policy explains what personal information we collect, why we collect it, how long we keep it, and what rights you have over it.

Who we are

La Cucina Italiana is a private chef and catering business run by Sally Bycroft, working across Cambridge and the surrounding area. We are the data controller for the information described in this policy.

What we collect and why

When you send an enquiry

Our contact form collects your name, email address, telephone number and the content of your message. Enquiries are emailed to us and also stored in the website database so that we do not lose them. We use this to reply to you and to plan your event. Our lawful basis is legitimate interests, namely responding to someone who has asked us to get in touch.

When you book an event or place an order

We collect your name, billing and delivery address, email address, telephone number, order details, and any dietary or allergen requirements you give us. We use this to take payment, to plan and deliver your catering, and to keep the accounting records we are legally required to keep. Our lawful basis is performance of a contract, and legal obligation for the financial records.

Information about allergies, intolerances and dietary requirements can amount to health data, which has extra protection under UK GDPR. We only collect it where you choose to tell us, we use it solely to cook food that is safe for you and your guests, and we share it only with the kitchen and serving team working on your event.

When you create an account

We store your name, email address, an encrypted password that we never see, and your order history, so that you can review past bookings without re-entering your details.

When you subscribe to our newsletter

We collect your name and email address to send occasional news about workshops, supper clubs and events. Our lawful basis is consent. Every email carries an unsubscribe link, and unsubscribing takes effect immediately.

When you browse the website

Our hosting provider keeps standard server logs, including IP address, browser type and pages requested, for security and troubleshooting.

Payments

Payments are processed by PayPal. Your payment details are handled by PayPal directly and are never seen or stored by us. PayPal processes that information under its own privacy policy.

Cookies

We use only cookies that are strictly necessary for the website to work. These keep your basket contents, keep you signed in, and secure the checkout. We do not use advertising cookies, and we do not run Google Analytics or any similar tracking on this site.

You can block or delete cookies in your browser settings, but the basket, checkout and account areas will not work properly without them.

Who we share your information with

We do not sell your data, and we do not share it for anyone else’s marketing. We share it only with the suppliers who help us run the business, and only so far as they need it:

  • Our website host, for hosting and server logs
  • PayPal, for payment processing
  • MailPoet, for sending our newsletter
  • Our accountant and bookkeeping software, for tax and accounting records
  • The kitchen and serving team working on your specific event, who see only what they need in order to deliver it safely

We will also disclose information where we are legally required to, for example to HMRC or in response to a court order.

Where your information is held

Your information is held on servers in the United Kingdom or the European Economic Area wherever possible. Where a supplier processes data outside the UK, that transfer is covered by UK adequacy regulations or standard contractual clauses.

How long we keep it

  • Enquiries that do not lead to a booking: 12 months
  • Order and booking records: 7 years, as required for tax and accounting
  • Account details: until you ask us to close your account
  • Newsletter subscriptions: until you unsubscribe
  • Server logs: as set by our hosting provider, typically 30 to 90 days

Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal information we hold about you
  • Ask us to correct anything that is inaccurate
  • Ask us to delete your information, where we have no legal obligation to keep it
  • Ask us to restrict how we use it
  • Object to processing we carry out on the basis of legitimate interests
  • Ask us to transfer your information to another provider
  • Withdraw your consent at any time, where consent is our lawful basis
  • Complain to the Information Commissioner’s Office

To exercise any of these, email sally@lacucinaitaliana.info. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please contact us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Children

Our services are not aimed at children, and we do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed.