Privacy Policy

Last updated: 5 October 2026

This notice explains how Soffritto uses personal information when you visit this website, contact us or discuss a catering booking.

Who is responsible for your information?

Soffritto is operated by Homemade Passion Ltd, the controller of your personal information. Our registered office is 46 Nova Road, Croydon, England, CR0 2TL.

For privacy questions or to exercise your rights, use our contact form or write to Homemade Passion Ltd at the address above, marked “Privacy”.

What we collect

When you enquire, we receive the details you choose to give us: your name, email address, optional phone number, event type and message. This may include your proposed date, venue, guest numbers and food preferences. We also keep correspondence needed to respond and arrange a booking.

Our hosting and security systems process technical information such as your IP address, requested pages, access times and browser information to deliver the website, investigate errors and prevent abuse. The enquiry form uses a short-lived, hashed IP identifier to limit repeated submissions; that counter expires after one hour.

Please do not include payment card details, medical information or identifiable guests’ dietary or health information in the website form. We can discuss appropriate arrangements separately.

Why we use it and our legal bases

Enquiries and bookings: we use your contact and event details to answer questions, prepare a quote and arrange catering. Where you are considering or entering a contract with us, this is necessary to take steps at your request before a contract or to perform that contract. If you contact us on behalf of an organisation or with a general question, we rely on our legitimate interest in responding and managing business relationships.

Website security: we rely on our legitimate interest in keeping the website available, protecting it against spam and misuse, and resolving technical problems.

Business records: if an enquiry becomes a booking, information needed for accounting and tax records is kept to meet our legal obligations. Relevant correspondence may also be needed for our legitimate interest in handling complaints or establishing, exercising or defending legal claims.

We use enquiry details only for enquiries and bookings, not marketing. We do not sell your information or use the website form for automated decisions or profiling.

Fields marked with an asterisk are needed to respond to your enquiry. Other fields are optional. If you do not provide contact details and a message, we cannot handle the enquiry through the form.

Who receives your information

Our website is hosted by Aruba. Enquiry emails pass through Aruba and Gmail (Google), so these providers process message contents and associated technical information as part of providing hosting and email services. The website form sends an email; it does not create a separate database of enquiry submissions.

Information may also be accessed by people who need it to handle your enquiry or booking, and by professional advisers or public authorities where necessary for accounting, legal obligations or a legal claim. We limit sharing to what is needed for the purpose.

Processing outside the UK

Aruba states that its hosting and email services operate from data centres in Italy. Italy is covered by the UK’s adequacy arrangements for the European Economic Area. See Aruba’s data protection information.

Google operates internationally, so information handled through Gmail may be processed outside the UK, including in the United States. Google describes its transfer arrangements, including the UK Extension to the EU–US Data Privacy Framework and contractual safeguards where applicable, in its data transfer information. You can contact us for more information about the arrangements relevant to your enquiry.

How long information is kept

We keep enquiry correspondence for as long as it is needed to answer you, complete any follow-up and deal with related questions or complaints. If an enquiry becomes a booking, the booking and relevant correspondence are kept for the service and any applicable accounting, tax or legal requirements.

The period depends on whether a booking follows, whether there is an unresolved issue, and whether a law or legal claim requires the records. Technical and security records are kept for the period needed to operate the service and investigate misuse. You can ask us about the retention of a particular enquiry or request deletion; some records may need to be retained for a legal obligation or claim.

Your rights

Depending on the circumstances, you can ask to access your personal information, correct inaccuracies, erase information, restrict its use or receive information you provided in a portable format. You can object to processing based on legitimate interests, including our handling of general enquiries or security information, on grounds relating to your situation.

These rights are subject to legal conditions and exceptions. We may need to confirm your identity before responding. We normally respond within one month; if a permitted extension is needed, we will explain why.

You can raise a concern with us through the contact form or by post. You also have the right to complain to the UK Information Commissioner’s Office: make a complaint to the ICO.

Cookies, other websites and updates

Our cookie policy explains browser storage and the website’s current use of cookies. Links to social networks, maps and other websites take you to services with their own privacy policies.

We update this notice when our services or data practices change. The date at the top shows when it was last revised.