1. Who We Are
Forno ("we", "us", "our") operates a wood fired kitchen at 118 Kiln Street, Ashbourne Quarter, and this website. For the purposes of UK data protection law, Forno is the data controller for personal data collected through this site.
Contact: hello@forno.co.uk · 020 7123 4567
2. Scope of This Policy
This policy covers personal data processed through forno.co.uk, including browsing the site, joining our mailing list, and placing an order through the menu, basket, and checkout pages. It does not cover data we might collect in person at the restaurant, such as a booking taken over the phone, which is handled separately.
3. Information We Collect
Information you give us
- Newsletter signup: your email address, via the form in the site footer.
- Ordering (in a live version of this site): your name, email address, delivery address if applicable, and order contents. Payment card details would be entered directly into a Stripe hosted payment field and would never be transmitted to or stored on Forno's own systems.
Information collected automatically
- Basket and delivery details: on this demo site, anything you add to your basket, and any delivery address you type in, is stored only in your browser's local storage. It is never sent to us or to any server. See Section 7 for more detail.
- Analytics: if you accept cookies, Google Analytics collects aggregate, anonymised information about how the site is used.
4. How We Use It
- To send the updates you've asked for if you join our mailing list.
- In a live version: to take, prepare, and fulfil an order, including contacting you about it.
- To understand how the site is used, in aggregate, so we can improve it.
- To meet our legal and accounting obligations.
We do not sell personal data, and we do not use it to build advertising profiles.
5. Legal Basis for Processing
| Activity | Legal basis under UK GDPR |
|---|---|
| Newsletter signup | Consent: you opt in, and can withdraw it at any time |
| Processing an order | Performance of a contract with you |
| Analytics cookies | Consent, given via the cookie banner |
| Essential site functionality | Legitimate interest in operating the site |
| Accounting and tax records | Legal obligation |
6. Third Parties Who Process Data on Our Behalf
- Web3Forms: delivers newsletter signups to our inbox. Processes submitted data only to route it to us.
- Google Fonts: serves the typefaces used on this site. Your browser contacts Google's servers directly to fetch them, which shares your IP address with Google. No cookie is set by this request.
- Google Analytics: used only if you accept the cookie banner, to understand aggregate site usage. IP addresses are anonymised.
- Stripe: in a live version of this site, Stripe would process payment card details directly and securely; Forno would never see or store full card numbers. This demo does not connect to Stripe or any real payment processor.
7. Cookies & Local Storage
Cookies and browser local storage are both small pieces of data saved by your browser, but they behave differently. Cookies are typically sent to a server with every request; local storage stays on your device unless a script explicitly reads and sends it. This site uses both, for different purposes:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| forno_cookie_consent | Cookie | Remembers your cookie choice | Until cleared |
| _ga, _ga_* | Cookie | Google Analytics, only if accepted; aggregate reporting | Up to 2 years |
| forno_cart_v1 | Local storage | Remembers what's in your basket between pages, on this device only. Not transmitted to us. | Until cleared or basket emptied |
| forno_fulfillment_v1 | Local storage | Remembers your pickup/delivery choice and any address you entered, on this device only. | Until cleared |
| forno_last_order_v1 | Local storage | Remembers your most recent demo order so the confirmation page can display it. | Until cleared or overwritten |
You can change your cookie choice at any time using the "Cookie Settings" link in the footer, and you can clear local storage at any time by clearing your browser's site data for forno.co.uk.
8. Data Retention
Newsletter email addresses are kept until you unsubscribe or ask us to remove you. In a live version of this site, order and customer records would typically be kept for around 6 years to meet UK accounting and tax obligations, after which they'd be securely deleted. On this demo, no order data leaves your browser, so there is nothing for us to retain.
9. Data Security
We use industry standard measures to protect the data we do hold, including encrypted connections (HTTPS) and access limited to those who need it. No online service can guarantee complete security, but we aim to keep the amount of personal data we hold to the minimum necessary.
10. Children's Privacy
This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.
11. International Data Transfers
Some of our third party processors (such as Google) may process data outside the UK. Where this happens, we rely on their compliance with recognised safeguards, such as the UK's International Data Transfer Addendum or equivalent adequacy arrangements.
12. Automated Decision Making
We do not use automated decision making or profiling that produces legal or similarly significant effects on you.
13. Marketing Communications
We only send marketing emails to people who've opted in via the newsletter form. Every marketing email includes a way to unsubscribe, and you can also ask us directly at any time by emailing hello@forno.co.uk. Unsubscribing from marketing doesn't affect service messages related to an actual order.
14. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data in certain circumstances.
- Restrict or object to certain processing.
- Port your data to another provider in a structured format.
- Withdraw consent at any time, where consent is our legal basis.
To exercise any of these, email hello@forno.co.uk. We'll respond within one month.
15. Complaints
If you're unhappy with how we've handled your data, we'd like the chance to put it right. email us first. You also have the right to complain directly to the UK's data protection regulator, the Information Commissioner's Office (ICO), at any time.
16. Changes to This Policy
We may update this policy as the site or our practices change. The version published here always reflects our current approach; the "last updated" date at the top of this page reflects the most recent revision.
17. Contact
Forno, 118 Kiln Street, Ashbourne Quarter.
Email hello@forno.co.uk · Phone 020 7123 4567.