Your details,
treated with care.

1. Introduction

NIPO respects your privacy and is committed to protecting your personal information. This policy explains how we collect and use that information, the circumstances in which we may share it, and the rights available to you.

NIPO is the controller responsible for the personal information covered by this policy. It applies when you visit our website or restaurant, contact us, join our mailing list, make a booking, place an order or use a service we make available to guests.

2. Information we collect

We may collect information including:

• your name and contact details;
• booking, order, payment and visit information;
• your marketing and communication preferences, including the NIPO location whose updates you sign up for;
• information you give us in enquiries, feedback or survey responses;
• dietary, allergy or accessibility information you choose to share so we can meet your needs;
• technical information about your device and use of our website, such as an IP address, browser type and access time; and
• images captured by security systems at our premises, where these are in use.

We do not usually require information about your health or other sensitive matters. Where you choose to provide this information, we use it only where necessary to accommodate you or protect your wellbeing.

3. How we collect information

We collect personal information when you:

• complete a form, join our mailing list or contact us;
• make a booking, order or payment;
• visit the restaurant or use guest services such as Wi-Fi;
• enter a promotion, respond to a survey or give us feedback; or
• use our website, which may generate basic technical and security data.

We may also receive information from organisations that provide booking, payment, communications or other services connected with your interaction with NIPO.

4. Our lawful reasons for using information

We use personal information where it is necessary:

• to provide a service or take steps you have requested;
• to meet a legal or regulatory obligation;
• for our legitimate business interests, where these do not override your rights and freedoms; or
• where you have given us consent.

If information is needed to fulfil a booking, order or legal requirement and you do not provide it, we may be unable to provide the relevant service.

5. How we use information

We may use your information to:

• manage bookings, orders, payments and visits;
• answer questions and provide requested information;
• manage our relationship with you and respond to feedback;
• send service messages or important updates;
• send marketing where this is permitted;
• operate, secure and improve our website, premises and services;
• prevent fraud, misuse and other unlawful activity; and
• meet legal, accounting, health and safety obligations.

We do not make solely automated decisions about you that have legal or similarly significant effects.

6. Marketing

We may send news, seasonal updates and offers by email where you have asked us to do so or where the law otherwise allows it. You can stop marketing at any time by using the unsubscribe link in an email or contacting us.

We may retain a limited record of an opt-out so that we can continue to respect your preference.

7. Cookies and similar technology

We use essential technology to operate the website, remember your cookie choices and protect forms with Cloudflare Turnstile. The security check processes technical information about your browser and connection to help distinguish genuine visitors from automated submissions.

Optional analytics helps us understand visits and improve the website. Optional marketing measures advertising and may personalise ads. These purposes are off until you choose to allow them. You can accept all, reject optional cookies, or choose each purpose separately.

We store your choice in your browser under nipo-cookie-consentfor up to 180 days. This preference is essential so that we can respect your choice. Google Tag Manager loads only after you accept an optional purpose, and Google tags receive your choices for analytics and advertising. Without JavaScript, optional tags do not load.

Use Cookie settings in the footer to change or withdraw your consent at any time. Withdrawing a previously accepted purpose reloads the page to stop loaded tags and removes recognised first-party analytics or marketing cookies for that purpose. Cookies on other providers’ domains can also be removed using your browser’s privacy controls.

With analytics consent, we use Google Analytics 4 to measure page visits and website usage. It can set first-party cookies such as _gaand _ga_*. With marketing consent, we use the Meta Pixel to measure visits from our advertising and support advertising audiences. It can set _fbp and, after an advertising click,_fbc. These services receive information such as the page visited, browser and device details, and IP address. Google Analytics cookies commonly last up to two years and Meta cookies up to 90 days; browser restrictions may shorten these periods.

Read more in the Google privacy policyand Meta privacy policy. Accepting analytics alone does not enable the Meta Pixel. Booking completion takes place on SevenRooms and is not measured by these website page-view tags.

With analytics consent, we also use Microsoft Clarity to understand how visitors use our website through heatmaps and session recordings. Clarity records interactions such as clicks, scrolling and navigation, together with page, browser and device information, to help us improve the website. Our newsletter signup form is masked in recordings. Clarity can set first-party cookies _clck and _clsk to recognise visits and connect page views into a session. Microsoft may also use third-party cookies and process usage data under the consent choices you provide, including advertising storage only when marketing is accepted. See theMicrosoft Privacy Statementfor details of Microsoft's data use. Clarity does not load unless you accept analytics, and withdrawing analytics consent stops it and removes its recognised first-party cookies.

Bookings open on SevenRooms, which provides its own privacy and cookie information. Your choices here apply to the NIPO website.

8. Sharing your information

We may share information where necessary with:

• providers supporting bookings, payments, communications, marketing, website hosting, security and other business systems;
• professional advisers, insurers and auditors;
• tax, regulatory, law enforcement or other public authorities;
• a potential buyer or successor if our business or assets are reorganised, sold or transferred; and
• other parties where you ask us to share information or the law permits it.

We require service providers acting for us to protect personal information and use it only for the agreed purpose. We do not sell your personal information.

9. International transfers

Some organisations supporting our services may process information outside the United Kingdom. Where data protection law treats this as a restricted transfer, we use an approved legal safeguard designed to protect your information. You may contact us for further information about these safeguards.

10. Security

We use appropriate organisational and technical measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people who need the information for legitimate purposes.

11. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, tax, accounting, regulatory and reporting duties. We may retain information for longer where a complaint, dispute or legal claim exists or is reasonably anticipated.

When deciding how long to keep information, we consider its nature and sensitivity, the risks of misuse, why it is needed and whether the purpose can be achieved another way.

12. Your rights

Depending on the circumstances, you may have the right to:

• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to delete or restrict the use of information;
• object to certain uses, including direct marketing;
• receive information you provided in a portable format; and
• withdraw consent where our use is based on consent.

These rights are not absolute. We may ask you to confirm your identity and clarify your request before responding. We normally respond within one month and do not charge a fee, although the law allows exceptions for certain unfounded or excessive requests.

13. Third-party links and maps

The interactive map on our contact page loads only when you select “Load Google map”. Loading it connects your browser to Google, which may receive technical information such as your IP address and use cookies under its privacy policy. This choice applies to the current page visit and does not change your analytics or marketing preferences. You can also use the Get directions link to open Google Maps directly.

Our website may link to websites or services operated by other organisations. We do not control their privacy practices. Please read the privacy information provided by those organisations when leaving our website.

14. Contact and complaints

To ask a privacy question or exercise your rights, email info@nipobraza.co.uk.

Please contact us first so we have an opportunity to resolve your concern. You may also complain to the Information Commissioner’s Office through ico.org.uk or by calling 0303 123 1113.

15. Changes to this policy

We review this policy regularly and may update it when our services, business practices or legal duties change. The latest version and update date will be published on this page.