Privacy Policy

Last updated: 1 September 2026

Norfolk Food Hall is operated by the Royal Norfolk Agricultural Association (“RNAA”, “we”, “us” or “our”). We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what information we collect, why we collect it, how we use it and the rights you have in relation to your personal information.

It applies when you visit norfolkfoodhall.co.uk, contact us, sign up to our newsletter, join our Loyalty Club, make a restaurant booking, attend or enquire about an event, or otherwise interact with Norfolk Food Hall.

1. Who we are

Norfolk Food Hall is operated by:

Royal Norfolk Agricultural Association
Trading as Norfolk Food Hall
Company number: 01817702
Registered charity number: 289581
Registered office: Norfolk Showground, Dereham Road, New Costessey, Norwich, Norfolk, NR5 0TT

For general Norfolk Food Hall enquiries:

Email: info@norfolkfoodhall.co.uk
Telephone: 01603 570957

For questions about your personal information or data protection:

Email: info@rnaa.org.uk
Post: Royal Norfolk Agricultural Association, Norfolk Showground, Dereham Road, New Costessey, Norwich, Norfolk, NR5 0TT

For data protection purposes, the Royal Norfolk Agricultural Association is the data controller for personal information processed by Norfolk Food Hall, except where another organisation acts as an independent data controller.

2. What personal information we collect

The information we collect depends on how you interact with us and may include:

your name;
email address;
telephone number;
postal address, where required;
information you provide when contacting us;
restaurant booking details, including your booking date, time, party size and any information you choose to provide with your booking;
Loyalty Club information, including your contact details, card or account details, points balance and transaction history;
newsletter and marketing preferences;
information relating to events, competitions, promotions or enquiries;
information about your interactions with our website and communications;
technical information such as your IP address, browser type, device type and operating system; and
cookie and website usage information where you have permitted us to collect it.

Please avoid providing sensitive personal information unless it is genuinely necessary.

Where you provide information relating to dietary requirements, allergies, accessibility needs or another individual, we will only use that information where reasonably necessary to provide the service you have requested.

3. How we collect your information

We may collect personal information directly from you when you:

contact us by email, telephone, website form or social media;
subscribe to our newsletter;
join or use the Norfolk Food Hall Loyalty Club;
make or amend a restaurant booking;
enquire about private hire, events or other services;
enter a competition, giveaway or promotion;
attend an event or activity where registration is required; or
otherwise provide information to us.

We also collect certain technical information automatically when you use our website through cookies and similar technologies.

Some services on our website are provided by third parties. For example, restaurant bookings are currently facilitated through a third-party booking platform. Information you enter into those services may also be processed by the relevant provider in accordance with its own privacy information.

4. How we use your information

We may use your personal information to:

Respond to enquiries

We use the details you provide to respond to questions, requests, complaints or other communications.

Our lawful basis will normally be our legitimate interests in communicating with customers and visitors, or taking steps at your request before providing a service.

Manage restaurant bookings and other services

We use booking information to manage reservations, contact you about your booking and provide the service you have requested.

Our lawful basis will normally be the performance of a contract or taking steps at your request before entering into a contract.

Operate the Loyalty Club

We may process your information to create and manage your Loyalty Club account, record points, apply rewards, administer offers and communicate information relevant to your membership.

Our lawful basis will normally be performance of our agreement with you and our legitimate interests in operating and improving the Loyalty Club.

Where we send marketing communications to Loyalty Club members, we will only do so where permitted by applicable data protection and electronic marketing laws.

Send newsletters and marketing

If you sign up to hear from us, we may use your name and email address to send you news about Norfolk Food Hall, local producers, events, offers, workshops, tastings and other relevant updates.

Where consent is required, we will ask for it clearly.

You can unsubscribe at any time using the unsubscribe link included in our marketing emails or by contacting us.

Unsubscribing from marketing does not prevent us from sending you essential communications relating to a booking, enquiry, transaction or service you have requested.

Improve our website and services

Where permitted, we may use website and analytics information to understand how visitors use our website, identify technical issues and improve our content, services and customer experience.

Non-essential analytics technologies will only be used in accordance with your cookie choices.

Maintain security

We may process technical and usage information where necessary to protect our website, systems, customers and organisation against security threats, fraud or misuse.

Meet our legal obligations

We may process and retain information where necessary to comply with legal, regulatory, accounting, tax or other statutory requirements.

5. Our lawful bases for using your information

Under applicable UK data protection law, we must have a lawful reason for using personal information.

Depending on the circumstances, we may rely on:

Consent — where you have actively agreed to a particular use of your information, such as certain marketing or non-essential cookies.

Contract — where processing is necessary to provide something you have requested or to fulfil an agreement with you.

Legal obligation — where we need to use or retain information to comply with the law.

Legitimate interests — where using your information is necessary for our legitimate business or charitable interests, provided those interests do not override your rights and freedoms.

Where we rely on consent, you can withdraw it at any time.

6. Who we share information with

We do not sell your personal information.

We may share personal information with trusted organisations that help us operate Norfolk Food Hall and provide our services, including:

website hosting and IT providers;
website developers and technical support providers;
email and newsletter platforms;
restaurant booking providers;
loyalty and customer management systems;
analytics and website performance providers;
professional advisers such as accountants, auditors, insurers and legal advisers;
payment or transaction service providers where applicable; and
regulators, law enforcement bodies or other authorities where required by law.

These organisations are only provided with the information reasonably necessary for their role.

Where a supplier processes personal information on our behalf, we require appropriate data protection arrangements to be in place.

Some third-party services may act as independent data controllers and will have their own privacy policies.

7. International transfers

Some of the organisations and technology providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure it receives a level of protection consistent with UK data protection law. This may include relying on recognised adequacy arrangements or approved contractual safeguards.

8. How long we keep information

We only keep personal information for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, accounting, regulatory or operational requirements.

The appropriate retention period will depend on the type of information and why we hold it.

For example:

enquiry information will generally be retained for as long as necessary to deal with the enquiry and any reasonable follow-up;
booking information will be retained in accordance with our operational and legal requirements and those of the relevant booking system;
Loyalty Club information will generally be held while your membership remains active and for an appropriate period afterwards;
marketing information will normally be retained until you unsubscribe or otherwise ask us to stop using it, although we may retain limited information to ensure your opt-out is respected; and
records required for accounting, tax or legal purposes may need to be retained for longer.

We periodically review the personal information we hold and securely delete or anonymise information that is no longer required.

9. Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to operate. Other cookies, such as analytics, functionality or marketing cookies, will only be used where permitted and, where required, with your consent.

For more information, please read our Cookie Policy.

10. Third-party websites and services

Our website may contain links to websites, services or content operated by other organisations.

This includes services such as restaurant booking platforms and links to social media websites.

We are not responsible for how independent third parties collect or use personal information. We recommend reviewing their privacy information before providing personal information to them.

11. Keeping your information secure

We take appropriate technical and organisational measures to help protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

However, no internet-based system can be guaranteed to be completely secure.

12. Your rights

Depending on the circumstances, UK data protection law gives you rights including the right to:

be informed about how your information is used;
request access to personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete personal information in certain circumstances;
ask us to restrict how your information is used;
object to certain uses of your information, including direct marketing;
withdraw your consent where we rely on consent;
request transfer of certain information in a portable format; and
raise concerns about certain automated decisions.

Not every right applies in every circumstance.

If you would like to exercise any of these rights, please contact us at info@rnaa.org.uk.

We may need to confirm your identity before fulfilling a request.

We will normally respond to a valid request within one month, although the law allows additional time in certain circumstances, such as where a request is particularly complex.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

We would appreciate the opportunity to address your concerns directly first.

13. Children

Our website is intended for a general audience and we do not knowingly use the website to collect personal information directly from children for marketing purposes.

Where children participate in events or activities organised by Norfolk Food Hall or the Royal Norfolk Agricultural Association, additional privacy information may be provided where appropriate.