Website and Hosting Provider
The website Nonna is accessible at: https://www.nonnasbyverrillis.co.uk
Hosting, content delivery, and certain security services (including DNS and DDoS protection) are provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States. Cloudflare operates a distributed infrastructure with servers located in multiple countries.
Intellectual Property
All content published on this website, including but not limited to text, photographs, illustrations, logos, trademarks, graphics, videos, audio, and layout, is protected by intellectual property laws. Unless otherwise stated, these elements are the property of their respective rights holders and are used with authorization.
Any reproduction, representation, adaptation, modification, distribution, or exploitation, in whole or in part, of the content of this website for purposes other than strictly personal and non-commercial use is prohibited without prior and express authorization. Short quotations are permitted provided their source and author are clearly identified and the integrity of the work is preserved.
Any unauthorized use may constitute an infringement and may engage the user’s civil and/or criminal liability.
Website Use and Liability
The information provided on this website is for general information purposes only. Reasonable efforts are made to keep content accurate and up to date; however, no guarantee is given regarding completeness, accuracy, or suitability for any particular purpose. Content may be modified or removed at any time without notice.
Access to the website may be interrupted, suspended, or affected by maintenance, updates, or factors beyond the operator’s control. The website operator is not liable for unavailability, interruption, or any indirect, consequential, or incidental damages, including loss of data or profit, arising from the use of or inability to use the website.
Users are responsible for ensuring that any equipment, software, and connection used to access the website are adequately protected against viruses, malware, and other security risks. While technical measures are implemented to protect the website, no method of transmission or storage is entirely secure.
The website may refer to third-party resources or services. Such references do not constitute approval or endorsement. The website operator does not control and is not responsible for the content, security, or practices of third parties.
Nothing in these legal notices excludes or limits any liability that cannot be excluded or limited under applicable law, including liability for death or personal injury resulting from negligence or for fraud or fraudulent misrepresentation.
Personal Data
This section explains how personal data may be collected and processed in connection with this website, in accordance with UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.
Data collected and purposes
- Identification and contact details (for example, name, email address, telephone number) to manage enquiries, reservations, orders, quotations, and customer support.
- Transaction-related information (for example, order details, delivery or collection preferences, and billing references) to manage orders, after-sales service, and accounting. Payment processing is handled by third-party payment providers; full card details are not stored on this website.
- Communications content (for example, messages sent via forms) to respond to requests and provide customer service.
- Marketing preferences (for example, newsletter opt-ins) to send news and offers when consent is given or where permitted by law.
- Technical and browsing data (for example, IP address, device and browser information, pages viewed, and time stamps) for security, fraud prevention, audience measurement, performance monitoring, and to improve the website. Some of this processing is carried out via cookies or similar technologies (see the “Cookies” section below).
Legal bases
- Contract: processing necessary to enter into or perform a contract (for example, to manage an order or reservation).
- Consent: for specific purposes such as sending marketing communications or placing non-essential cookies. Consent can be withdrawn at any time.
- Legitimate interests: to secure the website, prevent fraud, measure and improve performance, and communicate with users about non-marketing matters, provided such interests are not overridden by users’ rights and interests.
- Legal obligations: to comply with applicable laws (for example, accounting or tax record-keeping).
Recipients and international transfers
Personal data may be shared with service providers strictly for the purposes described above (for example, hosting, security, analytics, email delivery, customer relationship management, reservations, and payment processing). Cloudflare, Inc. provides hosting/CDN and security services and may process technical and security-related data (such as IP addresses and request metadata) to ensure the integrity and availability of the website.
Some recipients may be located outside the United Kingdom. In such cases, appropriate safeguards are implemented, such as standard contractual clauses and, where required, the UK Addendum or other lawful transfer mechanisms to ensure an adequate level of protection.
Retention periods
- Enquiries and customer support records: typically retained for up to 12 months after the final interaction, unless a longer period is required to defend legal claims.
- Order and transaction records: retained for up to 6 years to meet accounting, tax, and legal obligations.
- Marketing preferences and contact details: retained until consent is withdrawn or an objection is made, with periodic reviews to maintain accuracy.
- Technical and security logs: typically retained for up to 13 months, unless a longer period is required for security or legal reasons.
- Cookies: retained as indicated in the “Cookies” section below.
Your rights
Subject to legal conditions and exceptions, you have the following rights: access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests and to direct marketing). Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
You may exercise your rights by contacting the website operator using the contact details published on this website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). ICO postal address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Security
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no system is completely secure, and users should take appropriate precautions when communicating online.
Cookies
What cookies are
Cookies are small files stored on your device when you browse the website. Similar technologies (such as local storage and pixels) may also be used. Cookies can be essential for the operation of the site or used for analytics, personalization, and advertising. Under the Privacy and Electronic Communications Regulations (PECR), consent is required for non-essential cookies.
Types of cookies used on this website
- Strictly necessary cookies: required for core functionality, security, and network management. Examples include Cloudflare security and load-balancing cookies that help distinguish legitimate traffic and maintain service availability. These cookies do not require consent.
- Analytics and performance cookies: used to understand how the site is used, measure audience, and improve content and navigation. These cookies are set only with your consent.
- Functionality cookies: used to remember choices (for example, language or preferences). These may require consent depending on their purpose.
- Advertising or social cookies: if present, used to deliver or measure advertising and enable social features. These are set only with your consent.
Managing cookies
- Consent management: where applicable, you can accept or refuse non-essential cookies via the consent prompts presented on the website. You can change your choices at any time by revisiting the consent options when they are displayed again (for example, after clearing your cookies).
- Browser settings: you can configure your browser to block or delete cookies. Blocking all cookies may affect website functionality. Refer to your browser’s help section for instructions.
- Retention: cookie lifetimes vary. Strictly necessary security cookies may persist for the duration of a session or for a limited period (for example, a few hours to several months) to maintain service integrity. Non-essential cookies are retained only for the period necessary for their purpose and in accordance with your choices.
Applicable Law and Jurisdiction
These legal notices, and any dispute or claim arising out of or in connection with them or their subject matter or formation, are governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction, without prejudice to any mandatory legal provisions that may apply to consumers.
Changes to These Legal Notices
The content of these legal notices may be updated to reflect changes in law or website practices. Last updated: 8 February 2026.
Contact
For any question relating to these legal notices, personal data, or cookies, please contact the website operator using the contact details published on this website.