Last updated: 19 October 2026

This privacy policy explains how Enoki (“we”, “us”, “our”) collects and uses personal information when you visit enoki.uk or contact us about our catering and hospitality services. We are committed to protecting your privacy and handling your information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Who we are

Enoki is the data controller for the personal information described in this policy.

• Email: events@enoki.uk

If you have any questions about this policy or how we use your information, please contact us using the details above.

What information we collect

Information you give us

When you send an enquiry through our website, we collect the information you enter, which may include:

• your name and email address
• the service or type of event you are interested in
• your preferred date, whether you are flexible, and the number of guests
• how you heard about us
• anything you tell us in your message about your plans

We also record the page you sent the enquiry from and your IP address, to help us protect the form from spam and misuse.

If you contact us by email, phone or social media, or go on to book with us, we will also hold the information you share in those conversations, such as your phone number, event address, menu choices and billing details.

Dietary and allergy information

To cater safely for your event, we may ask about dietary requirements and allergies for you or your guests. Allergy and medical dietary information is classed as health data, which is a special category of personal data. We only collect it where you choose to give it to us, use it solely to prepare and serve food safely, share it only with the members of our team who need it, and delete it once it is no longer needed for your event.

Information collected automatically

When you visit our website, we collect some information automatically through cookies and similar technologies. This is explained in the Cookies and analytics section below.

How and why we use your information

Under UK data protection law, we must have a lawful basis for using your personal information. We use it:

• To respond to your enquiry and provide quotes: because you have asked us to take steps before entering into a contract with us.
• To plan and deliver your event: to perform our contract with you.
• To handle dietary and allergy information: with your explicit consent, which you can withdraw at any time.
• To keep financial and booking records: to comply with our legal obligations, such as tax and accounting rules.
• To protect our website from spam and abuse: in our legitimate interests in keeping our website secure.
• To understand how visitors use our website: with your consent, through Google Analytics (see below).

We will never sell your personal information. We will not add you to a marketing mailing list unless you have asked us to.

Cookies and analytics

Cookies are small text files placed on your device when you visit a website. We use a small number of cookies, as follows.

Strictly necessary cookies

These are needed for the website to work properly, for example to remember your cookie choices. They do not require your consent.

Analytics cookies (Google Analytics)

We use Google Analytics 4, a service provided by Google Ireland Limited, to understand how visitors find and use our website: for example, which pages are visited, how long people stay and what type of device they use. This helps us improve the website.

Google Analytics only runs if you accept analytics cookies when you first visit the site. It sets the following cookies:

The information collected is aggregated and does not tell us who you are. Google Analytics 4 does not log or store IP addresses. Google may process this data on servers outside the UK; where it does, it relies on appropriate safeguards such as the UK adequacy regulations for the US Data Privacy Framework or the International Data Transfer Addendum. You can read more in Google’s Privacy Policy and about how Google uses information from sites that use its services.

You can change your mind at any time through the cookie settings on our website, or by clearing cookies in your browser. You can also opt out of Google Analytics on all websites by installing the Google Analytics opt-out browser add-on.

Fonts and Instagram

Our website uses fonts from Adobe Fonts. To display them, your browser connects to Adobe’s servers, which receive your IP address and basic browser information. Adobe does not set cookies for this. See Adobe Fonts’ privacy notice.

The Instagram images shown on our website are stored on our own server, so viewing them does not send any information to Instagram. If you click through to Instagram, its own privacy policy applies.

Who we share your information with

We only share your information where it is necessary, with:

• Our website hosting provider, which stores our website and the enquiries sent through it.
• Our email provider, which delivers enquiry notifications and our correspondence with you.
• Google, for website analytics, if you have consented.
• Venues and trusted suppliers involved in your event, where needed to deliver it (for example, sharing guest numbers and dietary requirements with a venue).
• Our accountant and professional advisers, where needed for financial and legal purposes.
• Authorities, where we are required to by law.

Anyone who handles personal information on our behalf may only use it to provide services to us and must keep it secure.

How long we keep your information

• Enquiries that don’t lead to a booking: up to 12 months from our last contact, then deleted.
• Booking and financial records: 6 years from the end of the financial year they relate to, as required by HMRC.
• Dietary and allergy information: deleted once your event has taken place and any follow-up is complete.
• Analytics data: retained by Google for 2 months before automatic deletion.

How we keep your information secure

We take appropriate technical and organisational measures to protect your information, including an encrypted (HTTPS) connection to our website, restricted access to enquiries, and keeping our website software up to date. No method of transmission over the internet is completely secure, but we work hard to protect the information you give us.

Your rights

Under UK data protection law, you have the right to:

• access the personal information we hold about you
• ask us to correct information that is inaccurate or incomplete
• ask us to delete your information
• ask us to restrict how we use your information
• object to us using your information where we rely on legitimate interests
• ask us to transfer your information to another organisation (data portability)
• withdraw your consent at any time, where we rely on consent; this does not affect anything we did before you withdrew it

To exercise any of these rights, please email events@enoki.uk. We will respond within one month. There is normally no charge.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

Links to other websites

Our website may link to other websites, such as our suppliers, venues and social media pages. We are not responsible for their privacy practices, so please read their privacy policies when you visit them.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.