Privacy policy

This privacy policy ('Privacy Policy') sets out how we collect and process your personal data when you visit our website, ottolenghi.co.uk ('Website') and/or purchase a product or service from us via the Website.

1.    Understanding this Privacy Policy

1.1   When we refer to 'we', 'us' or 'our', we mean Ottolenghi Limited. Where we refer to 'you' or 'your' we mean you, the person using the Website.

1.2   We have used headings to help you understand this Privacy Policy and to easily locate information. This Privacy Policy is only available in the English language.

1.3   We may amend the Privacy Policy from time to time at our sole discretion, so please check the Website regularly to ensure you understand the legal terms that apply at that time.

2.    About us and contact information

2.1   We are Ottolenghi Limited ('Ottolenghi'). We are a company registered in England and Wales and our registered office is at 2 Leman Street, London, E1W 9US. Our company number is 04393165 and our VAT number is 308911505.

2.2   If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please get in touch via our Contact page.

3.    Data we collect about you

3.1   We may collect the following information (as applicable):

• name;
• contact information including your postal address, email address and phone number;
• your payment details;
• demographic information such as postcode, preferences and interests; and
• other information relevant to customer surveys and/or offers.

3.2   For the exhaustive list of cookies we collect see the 'list of cookies we collect' section.

4.    What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

• In order to take steps to enter into a contract with you and allow you to purchase our products and services.
• When you contact us either by phone, email, via our 'contact us' page, via social media, or make an order in a deli, we will usually collect your name, social media handle and contact details, because it’s in our legitimate interest to make sure we can properly respond to your query.
• We may use the information to optimise the Website to improve our products and services.
• We may periodically send promotional emails about new products, special offers, newsletters including recipes and content (including via a paid subscription option) or other information which we think you may find interesting using the email address which you have provided. We rely on your consent to contact you and you can unsubscribe from our promotional emails at any time by clicking 'unsubscribe' at the bottom of such email, responding to any email you receive from us to tell us you wish to unsubscribe or by emailing contact@ottolenghi.co.uk.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, or mail. We may use the information to customise the Website according to your interests.

5.    Who we share your data with

We may share your personal data with the following parties:

• Business partners, suppliers and subcontractors: (i) for the performance of the contract we enter into with you (e.g. to help deliver our products and services to you, such as payment service providers and delivery companies); and (ii) where we use third party suppliers to help us run our business (e.g. website hosts and data processors including marketing partners and newsletter platforms like Klaviyo and Substack, along others).
• Regulators / Authorities / Enforcement Agencies: (i) if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or (ii) to protect the rights, property, or safety of our clients or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
• Buyers of our business (prospective and actual): under our legitimate interest to ensure our business can be continued by the buyer, or other businesses we may merge with. We process your personal information for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal information in this way, the buyer of our business may not be able to provide services to you.

6.   Security and storage of your data

6.1   We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

6.2   We store your data on third party servers which are hosted in the USA.

6.3   When working with third parties we may need to transfer your personal data outside of the UK and/or EU. Whenever we transfer your personal information outside of the UK and the EU, we ensure it receives additional protection as required by law. To keep this policy as short and easy to understand as possible, we haven’t set out the specific circumstances when each of these protection measures are used. You can contact us via our Contact page for more information on this.

6.4   We will only retain your personal information for as long as we need it unless we are required to keep it for longer to comply with our legal, accounting or regulatory requirements.

6.5   We delete your order information 6 years after your last order with us. Other information related to your account will be deleted 2 years after your account has become inactive.

6.6   In some circumstances we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve the way we work and our services.

7.    How we use cookies

7.1   A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

7.2   We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our Website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

7.3   Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the Website.

8.    Links to other websites

Our Website and/or newsletters may contain links to other websites of interest. However, once you have used these links to leave our Website, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the website in question.

9.    Controlling your personal data and your legal rights

9.1   You may choose to restrict the collection or use of your personal data in the following ways:

• Whenever you are asked to fill in a form on the Website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes.
• If you have previously agreed to us using your personal information for any purpose, you may change your mind and withdraw your consent.

9.2   You have various rights under applicable data protection laws, including the right to:

• access your personal data (also known as a “subject access request”);
• correct incomplete or inaccurate data we hold about you;
• ask us to erase the personal data we hold about you;
• ask us to restrict our handling of your personal data;
• ask us to transfer your personal data to a third party;
• object to how we are using your personal data; and
• withdraw your consent to us handling your personal data.

In each instance, please write to us or email us using the details on our Contact page.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

9.3   You also have the right to lodge a complaint with us or the Information Commissioner's Office, the supervisory authority for data protection issues in England and Wales.

9.4   Please keep in mind that privacy law is complicated, and these rights will not always be available to you all of the time.

10. List of cookies we collect

We use cookies to optimise website functionality, analyse the performance, and provide a personalised experience to you. Some cookies are essential to make the website operate and function correctly. Those cookies cannot be disabled.

Strictly necessary cookies (10)
These are essential to enable you to navigate our website and use its features, such as accessing secure areas of the website, using a shopping basket or e-billing. These cookies allow us to provide services you have requested; if they are switched off the website will not function properly. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. We use necessary cookies to remember bookings, gifts and other purchases you make when you get to the checkout page, enter information on forms and then navigate to different pages during your session, and to ensure you are able to access the correct service on our website when we make any changes to the way our website works.

Platform/Domain	Cookie Name	Purpose	Expiration	Type
Shopify ottolenghi-group.myshopify.com	secure_customer_sig	Used to identify you after you sign into a shop as a customer so you do not need to log in again.	1 year	First-party
Shopify ottolenghi-group.myshopify.com	keep_alive	Used in connection with buyer localisation, to process buying requests. A keepalive (KA) is a message sent by one device to another to check that the link between the two is operating, or to prevent the link from being broken.	30 minute(s)	First-party
Shopify ottolenghi-group.myshopify.com	localization	Helps to detect your approximate locale. It is used in connection with checkout features to process buying requests and improve your experience.	1 year	First-party
Shopify ottolenghi-group.myshopify.com	cart_currency	This cookie is set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.	Session	First-party
Shopify ottolenghi-group.myshopify.com	_cmp_a	Used for managing customer privacy settings.	1 day	First-party
Shopify ottolenghi-group.myshopify.com	_tracking_consent	Shopify cookie used to store your preferences under the privacy rules set in your region.	1 year	First-party
Shopify ottolenghi-group.myshopify.com	shopify_pay_redirect	The cookie is necessary for the secure checkout and payment function on the website.	1 hour	First-party
Shopify ottolenghi-group.myshopify.com	wpm-test-cookie	This cookie is used for testing purposes, to check whether cookies can be set on your browser or to ensure proper functioning of the website's content management system or plugins.	1 second	First-party
Shopify ottolenghi-group.myshopify.com	wpm-test-cookie (x2)	This cookie is used for testing purposes, to check whether cookies can be set on your browser or to ensure proper functioning of the website's content management system or plugins.	1 second	Third-party
Pandectes ottolenghi-group.myshopify.com	_pandectes_gdpr	Used for the functionality of the cookies consent banner.	1 year	First party

 

Performance cookies (10)
These cookies collect information about how visitors use a website, for instance they allow us to count visits, identify traffic sources and see which parts of the site are most popular. They enable us to monitor and improve the performance of our website and they are also used for purposes like troubleshooting and analytics. We may use third-party service providers such as Google Analytics. The information is used to improve our sites or products. You can find out more information about Google Analytics cookies here: https://developers.google.com/analytics. To opt out of Google Analytics relating to your use of our sites, you can download and install the Google Analytics Opt-out Browser Add-on available via this link: https://tools.google.com/dlpage/gaoptout?hl=en. Performance cookies will not be used to gather information that could be used to advertise products or services or target you on other websites.

Platform/Domain	Cookie Name	Purpose	Expiration	Type
Shopify ottolenghi-group.myshopify.com	_shopify_y	Used to measure and report analytics related to marketing, referrals and tracking landing pages.	1 year	First-party
Shopify ottolenghi-group.myshopify.com	_shopify_s	Used to measure and report analytics related to marketing, referrals and tracking landing pages.	30 minutes	First-party
Shopify ottolenghi-group.myshopify.com	_landing_page	Used to track pages you land on.	2 weeks	First-party
Shopify ottolenghi-group.myshopify.com	_orig_referrer	Used to track pages you land on.	2 weeks	First-party
Shopify ottolenghi-group.myshopify.com	_shopify_sa_p	Shopify analytics relating to marketing and referrals.	30 minutes	First-party
Shopify ottolenghi-group.myshopify.com	_shopify_sa_t	Shopify analytics relating to marketing and referrals.	30 minutes	First-party
Shopify ottolenghi-group.myshopify.com	_boomr_clss	Used to monitor and optimise the performance of Shopify stores.	1 year	First-party
Google Analytics	_ga	Used to identify unique users.	2 years	Third-party
Google Analytics	_gid	Used to identify the user.	24 hours	Third-party
Google Analytics	_gcl_au	Google Ads linker cookie.	24 hours	Third-party

 

Functional cookies (10)
These cookies allow our website to remember choices you make on our web pages during your visit, such as your user name, language or the region you are in. They allow us to provide features and services personal to individual users. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly. We use functional cookies to identify you as having consented to the use of cookies by this website, remember selections you have made (such as restaurant bookings or gifts and other purchases) and to share information with partners to provide a service on our website including SevenRooms. The information shared is only to be used to provide the service, product or function and not for any other purpose.

Platform/Domain	Cookie Name	Purpose	Expiration	Type
PHP	PHPSESSID	Stores your session ID on the server to provide functions across pages.	Session	Third-party

 

Targeting cookies (2)
These cookies may be set through our site by our advertising partners and provide advertising based on your behaviour and may use analytical data to re-market to you. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Platform/Domain	Cookie Name	Purpose	Expiration	Type
Google Adsense	_gcl_au	This marketing cookie is placed by Google Tag Manager designed to store and track conversions (from external ad clicks to buyers).	3 month(s)	First-party
Klaviyo[HC5]	__kla_id	Used to track and identify site visitors through an auto-generated ID. This cookie can temporarily hold personal identifiable information. Once a visitor is identified, the cookie can pass their data to Klaviyo, a marketing cookie. This can happen when visitors fill out a Klaviyo signup form or click a link from a Klaviyo email.	24 hours	Third-party