Privacy
Privacy policy.
How Notorious B.R.G collects, uses and looks after your personal information when you visit this website, contact us, or send us an event or job enquiry. Written in plain English.
Who we are
Notorious B.R.G is an independent burger restaurant group in Kent, run by Notorious BRG Ltd, a company registered in England and Wales (company number 12188318). Our registered office is 72 Castle Street, Canterbury, Kent CT1 2QD, and our VAT number is GB 367 6293 57. In this policy, “we”, “us” and “our” mean Notorious BRG Ltd.
We are the controller of the personal information described here. That means we decide how and why it is used, and we are responsible for looking after it under UK data protection law: the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
We trade from:
- 72 Castle Street, Canterbury CT1 2QD
- The Rooftop, 8 St Margaret’s Street, Canterbury CT1 2TP
- Love Food @ Lockmeadow, Barker Road, Maidstone ME16 8SF
- Macknade Food Village, Selling Road, Faversham ME13 8XF
For anything to do with your personal information, email jonny@notorious-brg.com or write to Notorious BRG Ltd, 72 Castle Street, Canterbury CT1 2QD.
The short version
- We only collect what we need to reply to you, plan your event or consider you for a job.
- We don’t sell your information, and we don’t send marketing emails.
- This website doesn’t use analytics, advertising or tracking cookies. It only uses the essential storage described below.
- Online orders are handled by the delivery platform you choose, under its own privacy policy.
- You can ask to see, correct or delete your information at any time.
What we collect
Event and catering enquiries
When you use the enquiry form on our Bookings page or email bookings@notorious-brg.com, we collect your name, email address, phone number (if you give it), and your event details: the date, venue or format, number of guests, occasion and anything else you tell us, such as location, timings or dietary needs.
The enquiry form is run by Wix Forms. When you send it, your answers are stored securely in our Wix account and emailed to our bookings team. Wix also saves your name and email address as a contact in our Wix account, so we can find your enquiry and reply to it. We don’t use these details for marketing.
If you tell us about allergies or other dietary needs, this may count as health information. We use it only to cater for your event safely.
General enquiries, feedback and complaints
When you email, phone or message us on social media, we collect your name, your contact details, what you tell us, and details of your visit or order if they are relevant.
Job enquiries
If you contact us about working with us, for example through the “Get in touch” link on our About page, we collect your name, contact details, CV, work history and anything else you choose to send. Please don’t send sensitive information, such as details of your health, ethnicity or religion, unless we ask for it. If we offer you a job, we will ask for the information we need to check your right to work in the UK.
When you visit this website
Wix, our hosting provider, processes the technical information needed to send pages to your device and keep the site secure. This includes your IP address, browser and device type, the pages you request, the time of your visit and the page that referred you. We don’t use this to identify you.
We don’t take orders or payments on this website, and there are no customer accounts.
How we use it and why
The law says we must have a valid reason, called a “lawful basis”, for each way we use your information. Here are ours.
| What we do | Lawful basis |
|---|---|
| Reply to event and catering enquiries, send quotes, and plan and deliver your event | Taking steps you have asked for before a contract, and then carrying out that contract. If you are booking for an organisation, our legitimate interest in dealing with your enquiry. |
| Cater safely for allergies and other dietary needs | Your explicit consent, given when you choose to tell us. You can withdraw it at any time, but we may then be unable to cater for those needs. |
| Answer questions, feedback and complaints | Our legitimate interest in replying to you and improving our food and service. |
| Consider job enquiries and applications | Taking steps you have asked for before a possible contract of employment, and our legitimate interest in recruiting good people. Right-to-work checks are a legal obligation. |
| Keep job enquiries on file for future roles | Your consent. |
| Run the website and keep it secure | Our legitimate interest in providing a working, secure website. Essential cookies are allowed under PECR without consent because they are strictly necessary. |
| Remember the location you chose | Our legitimate interest in giving you the feature you asked for. This storage is strictly necessary for that feature under PECR. |
| Keep business records and deal with legal claims | Legal obligation, for example tax and accounting rules, and our legitimate interest in establishing or defending legal claims. |
Where we rely on legitimate interests, we have weighed them against your rights and interests. You can object at any time (see Your rights). Where we rely on consent, you can withdraw it at any time by emailing us. This won’t affect anything we did before you withdrew it.
We don’t make decisions about you by purely automated means, and we don’t profile you.
Cookies and local storage
Cookies are small files that a website stores on your device. Your browser’s “local storage” does a similar job. Under PECR we need your consent to use them unless they are strictly necessary to provide something you have asked for.
This website currently uses only strictly necessary cookies and storage, so we don’t ask for consent or show a cookie banner.
| Name | Set by | What it does | How long |
|---|---|---|---|
client-session-bind, server-session-bind | Wix (our host) | Security. Links your visit to the server to help protect the site against forged requests and abuse. | Until you close your browser |
ssr-caching | Wix (our host) | Performance. Helps Wix serve pages quickly from its cache. | A few seconds |
nbrg-usual (local storage) | This website | Remembers the Notorious B.R.G location you picked in the Order panel or location switcher, so we can show it first next time. It only holds the location’s short name, such as “castle”, and is never sent to us. | Until you clear your browser’s storage |
Wix may occasionally add or rename essential cookies when it updates its platform. We will keep this list up to date.
No analytics or advertising
We don’t currently use Google Analytics, social media pixels or any other analytics, tracking or advertising tools. We may add analytics (such as Google Analytics) in future to understand how the site is used. If we do, we will update this policy first and, where the law requires, ask for your consent before any non-essential cookies are set. You will be able to change your mind at any time.
Managing cookies
You can block or delete cookies and local storage in your browser settings. The site will still work, but it won’t remember your usual location.
Ordering and other websites
Our site links to other services. When you follow one of these links, you leave our website and that company decides how your information is used, under its own privacy policy. Please check their policies, as we are not responsible for them.
- Online ordering. Our Order buttons take you to Deliveroo, which handles your account, order, delivery address and payment. Deliveroo may pass us the details we need to prepare your order and deal with any problems with it. We plan to add ordering through Kayana. When we do, we will update this policy to explain how order information is handled.
- Maps and directions. Directions links open Google Maps. We don’t embed Google Maps on our pages, so nothing loads from Google until you click.
- Social media. We link to our Instagram, Facebook and LinkedIn pages but don’t embed their content or tracking. If you message us on social media, we will see your message and your public profile, and the platform’s own policy also applies.
- Reviews. Our review links go to Google, Tripadvisor, HappyCow and Facebook. Reviews you post there are public and handled by that platform.
- Allergen information. Our allergen matrix is hosted by NCASS (the Nationwide Caterers Association) on its own website.
Who we share it with
We don’t sell, rent or trade your personal information. We only share it when we need to, with:
- Wix.com Ltd, which hosts our website and our enquiry form, and stores the enquiries sent through it.
- Our email and IT providers, who host our email accounts and help us run our systems.
- People involved in your event, where needed to deliver it, such as a venue or organiser you have asked us to work with. We only share the details they need.
- Professional advisers, such as accountants, lawyers and insurers, where necessary.
- The police, regulators, courts or other authorities, where the law requires it or to protect people’s rights, property or safety.
- A buyer or successor, if all or part of our business is sold or reorganised. They would have to use your information in line with this policy.
Service providers who handle information for us can only use it on our instructions and must keep it secure.
International transfers
Some of our service providers, including Wix.com Ltd, may store or process your information outside the UK. Where that happens, we make sure it is protected by safeguards that UK law requires, such as:
- sending it to countries the UK recognises as providing adequate protection
- the UK Extension to the EU–US Data Privacy Framework
- the ICO’s International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
Email us if you would like more information about these safeguards.
How long we keep it
We keep personal information only for as long as we need it. Then we delete it securely or anonymise it.
| Information | How long we keep it |
|---|---|
| Event and catering enquiries | Up to 2 years after we were last in touch, so we can help if you come back to us. |
| Invoices and records for events that go ahead | 6 years from the end of the financial year they relate to, as tax and accounting rules require. |
| General enquiries, feedback and complaints | Up to 2 years after we were last in touch. |
| Job enquiries and applications | 6 months after we make a decision, unless you agree that we can keep them longer for future roles. If you join us, we will give you a separate privacy notice for staff. |
| Website technical logs | Kept by Wix for limited periods, in line with its own retention policies. |
Your saved location (nbrg-usual) | Stays on your device until you clear it. |
Keeping it secure
We use appropriate technical and organisational measures to protect your information. For example, our website is served securely over HTTPS, our accounts are password-protected, and only people who need your information can access it.
No system is completely secure. If a data breach is likely to put you at risk, we will tell you, and we will report it to the ICO where the law requires.
Your rights
Under UK data protection law you have the right to:
- Access
- Ask for a copy of the personal information we hold about you.
- Rectification
- Ask us to correct information that is wrong or incomplete.
- Erasure
- Ask us to delete your information in certain circumstances.
- Restriction
- Ask us to limit how we use your information in certain circumstances.
- Objection
- Object to us using your information based on our legitimate interests. You can always object to direct marketing.
- Portability
- Ask for information you gave us, in a common digital format, where we use it with your consent or to carry out a contract.
- Withdraw consent
- Withdraw your consent at any time where we rely on it.
To use any of these rights, email jonny@notorious-brg.com. It is usually free. We may need to check your identity first. We will reply within one month. If your request is complex, we can take up to two more months, and we will tell you if we need to.
Complaints
If you are unhappy with how we have handled your information, please contact us first at jonny@notorious-brg.com. We would like the chance to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
Information Commissioner’s Office
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Children
Our website is for a general audience and is not aimed at children. We don’t knowingly collect personal information from children under 13. Event bookings should be made by an adult. If you think a child has given us their information, contact us and we will delete it.
Changes to this policy
We will update this policy when the way we use personal information changes. For example, we will update it when we add ordering through Kayana, or if we add analytics. We will make significant changes clear on this page.
Last updated:
Contact us
For questions about this policy or your personal information:
- Email: jonny@notorious-brg.com
- Post: Notorious BRG Ltd, 72 Castle Street, Canterbury CT1 2QD
For event bookings and catering, email bookings@notorious-brg.com.