Privacy notice

Last updated 19/10/2026

This explains what we do with the information you give us when you join the membership, use a voucher at a restaurant, or send us a message.

1. Who we are

The Nutmeg Group is five restaurants in Bristol, each run by its own company. The membership is one scheme shared by all five, with one record of you, so the five companies are joint controllers of the information described here:

• NUTMEG (CLIFTON) LTD, which runs Nutmeg — registered in England and Wales, company number 10323759, registered office 10 The Mall, Bristol, BS8 4DR
• KATTUMARAM LTD, which runs Nadu — registered in England and Wales, company number 12482169, registered office 77–79 Stokes Croft, Bristol, BS1 3RD
• KAL DOSA (PVT) LTD, which runs Kal Dosa — registered in England and Wales, company number 14534564, registered office 77–79 Stokes Croft, St Pauls, Bristol, BS1 3RD
• NSK (PVT) LTD, which runs Nutmeg Street Kitchen — registered in England and Wales, company number 15966599, registered office 25 St Augustine's Parade, Bristol, BS1 4UL
• BOMBIL (PVT) LTD, which runs Bombil — registered in England and Wales, company number 15969243, registered office 31 East Street, Bedminster, Bristol, BS3 4HH

In this notice, "we" means those five companies together.

How the five share responsibility

The five companies have agreed between them how they look after your information. They decide together what the membership collects and why; they use one shared set of systems, described in section 4; and they have agreed that one address handles everything to do with your information on behalf of all five: info@nutmeggroup.co.uk.

That includes asking for a copy of your information or asking us to delete it. You do not need to know which company to ask, and a request made there covers all five. You can also exercise your rights with any one of the companies directly, at its registered office above.

2. What we collect

When you join the membership:

• Your first name, and your last name if you give one
• Your email address, which is also how you sign in
• Your phone number, if you give one — optional
• Which of the five you joined at, or that you joined online
• Whether you agreed to marketing emails, and when
• Your birthday, if you give it — the day and month only, never the year, and optional

As you use the membership:

• The vouchers we have given you, and what each one is worth
• A record of each voucher you use: which restaurant, and when

If one of our restaurants gives you a voucher before you have joined, we hold the email address you gave them, so we can send it to you and put it in your membership if you join. We email you about it once. If you have not joined by the time the promotion ends, we delete your address.

If you sign up for our newsletter without joining the membership, we hold your email address, the date you signed up, and which page of this website you signed up on. We send you a welcome email straight away; if you did not sign up, the unsubscribe link in it takes you off the list.

If you use the contact form, ask to book an event, or email us, we hold what you send us so we can reply. A booking enquiry goes to the restaurant holding the event.

If you apply for a job, we hold what you send in the application form: your name, contact details, the experience and availability you describe, whether you have the right to work in the UK, and your CV if you attach one. It reaches us as an email; we do not store it anywhere else.

3. Why we use it, and our lawful basis

• Running your membership — giving you vouchers, applying them to your bill, showing you what you hold, keeping your account working, and emailing you when one of our restaurants gives you a voucher personally. This is necessary to provide the membership you asked for.
• Marketing emails — our newsletter, news, and vouchers from our promotions, only if you ticked the box when you joined, turned emails on later, or signed up for the newsletter on this website. That is consent, it is separate from joining, and you can withdraw it at any time without affecting your membership or any voucher you hold. Every one of these emails has an unsubscribe link. If you signed up for the newsletter and later join, your choice comes with you: the joining form shows it, and you can change it there.
• Your birthday gift — if you tell us your birthday, we use it once a year to put a gift in your membership two weeks before it, to email you that it is there, and, if you have not used it by then, to wish you a happy birthday on the day. The gift is one of our marketing emails' benefits, so it goes only to members with emails turned on, on the same consent. We ask for the day and month only, because that is all the gift needs; we never work out your age. To correct or remove it, email info@nutmeggroup.co.uk.
• Running the restaurants well — understanding how busy each restaurant is, how the scheme is being used, and preventing misuse of voucher codes. These are our legitimate interests, and we use figures rather than individual histories to do it.
• Sending a voucher you were given before joining — one email with the voucher and how to join. You gave the restaurant your address for this, and it is in our legitimate interests to deliver what we promised you.
• Answering you — replying to a message you sent us.
• Considering a job application — deciding whether to take it further and getting in touch with you about it. This is a step you asked us to take before a possible contract of employment.

4. Who can see it

Restaurant managers see the members who used a voucher at their own restaurant, shown only as a first name and a last initial. They cannot see your contact details, and they cannot see your visits to the other four restaurants.

Owners of the group can see membership and visit information across all five.

We use these providers to run the service, and they hold data on our behalf:

• Supabase — the database and sign-in system that the membership runs on, hosted in London
• Cloudflare — hosting for this website, the members' app and our photography
• Resend — delivery of our emails: your sign-in links, emails about your vouchers, our newsletter, and the messages you send us through this website

Resend is based in the United States, so your email address and the emails we send you are handled there. That transfer is protected by the UK Extension to the EU–US Data Privacy Framework, which Resend is certified under, and by the UK Addendum to the standard contractual clauses in its data processing agreement with us.

We do not sell your information, and we do not share it for anyone else's advertising.

5. Cookies and measurement

The members' app stores what it needs to keep you signed in. We do not use tracking or advertising cookies on this website. Where we measure how many people visit the site we use Cloudflare Web Analytics, which is cookieless and does not identify individual visitors.

Our marketing emails — the newsletter and emails about vouchers from our promotions — tell us when they are delivered, opened, and when a link in them is tapped. Resend does this for us with a small image in the email and by passing each link through its own address. We use it only to count how many people read each newsletter and which links are useful, never to decide anything about you, and we keep it with our record of which newsletters were sent to you. You can stop opens being counted by turning off images in your email app; tapping a link is never needed to use your membership.

6. How long we keep it

We keep your membership information for as long as your membership is open, and we delete it when you ask us to. If you are on the newsletter without being a member, we keep your address while you are subscribed; once you unsubscribe we keep your address and the date you did, so we can show we stopped and never email you by mistake. Ask us to delete either by emailing info@nutmeggroup.co.uk.

If you apply for a job and do not join the team, we delete your application six months after the role is filled. If you join us, it becomes part of your staff record.

7. Your rights

Under UK data protection law you can ask us to:

• Give you a copy of the information we hold about you
• Correct anything that is wrong
• Delete it
• Restrict or object to how we use it
• Send it to you, or to someone else, in a portable form

You can withdraw consent to marketing emails at any time, and turn it back on just as easily, under Account in the members' app. The unsubscribe link in any email does the same, or you can write to us.

Email info@nutmeggroup.co.uk to exercise any of these. We will respond within one month.

8. Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk.

9. Changes

If we change this notice, the updated version appears on this page with a new date at the top.

Questions about any of this? Email info@nutmeggroup.co.uk.