Privacy Policy
Nonna Bakery · Last updated 30 October 2026
Nonna Bakery is run by NONNA BAKERY CO LTD, a company registered in England and Wales (company no. 16262277), registered office 311 Regents Park Road, London N3 1DP.
This notice explains what Nonna Bakery receives about you, what it does with it, and the choices you have, whether you use the Nonna Bakery app, order at 360.nonnabakery.co.uk, or deal with Nonna Bakery through Places 360's own app or website.
Who does what
The Nonna Bakery app and Nonna Bakery's online ordering run on Places 360, a platform operated by Digit Places Limited (company no. 13863363). Two organisations are involved, and each is responsible for its own part.
- Places 360 runs your account. You sign in with a Places 360 account, and Digit Places Limited is the data controller for it. Places 360's privacy policy covers your account and what Places 360 collects to run the app, its websites and payments.
- Nonna Bakery is responsible for what it receives. Nonna Bakery is the data controller for the information about you that reaches it through Places 360, listed below, and for your choice about its marketing.
- Places 360 sends Nonna Bakery's marketing for it. When Places 360 sends you Nonna Bakery's marketing emails or notifications, it acts for Nonna Bakery as its processor: only on Nonna Bakery's instructions, under the data processing terms Nonna Bakery has agreed with Places 360 (UK GDPR Article 28).
What Nonna Bakery receives
- Your orders — what you ordered from Nonna Bakery, when and from which location, the name and phone number you give for the order, the address for a delivery, any note you add, and what you paid and whether it was paid. Card payments go through Stripe: neither Nonna Bakery nor Places 360 ever sees your full card number.
- Paying later by invoice — if you choose “Pay later — invoice”, Nonna Bakery also sees your company name and your account email (or, if your account has no email, its phone number) with those orders, so it can invoice you. If Nonna Bakery approves your company to pay later, it keeps your work email and company name on its list.
- Your activity with Nonna Bakery — your display name, a reference code used only at Nonna Bakery, and any stamps, rewards and offers you collect there, with dates. Nonna Bakery never sees what you do at any other business on Places 360.
- Pages and links you open — We count how often pages and links in the app are opened, to show the venue totals; we never show them who. Each open is counted against a one-way code made for Nonna Bakery alone (from your account, or a random number for this install if you're signed out), and after 13 months only each day's totals are kept. If you open a notification from Nonna Bakery, it sees that only in a total too.
- Your marketing choice — whether you said yes to Nonna Bakery's marketing, for which channel (email or notifications), and when and where you gave or withdrew it.
- Your email address, if you say yes to Nonna Bakery's marketing emails. Nonna Bakery's owners, and any staff it lets do marketing, can then see your account email so Nonna Bakery can send you news and offers. Otherwise Nonna Bakery doesn't see your account email, except on orders you pay later by invoice.
- Messages and ratings — if you write to Nonna Bakery through its page, it gets what you send, including the email address you give. If you rate a visit or an order, Nonna Bakery sees the rating, any note and the location, but never who you are.
A phone number you verify on your account stays with Places 360 and isn't given to Nonna Bakery, except on orders you pay later by invoice from an account with no email. The number you type on an order does go to Nonna Bakery, for that order, so it can reach you about it.
If you used Nonna Bakery's previous app
Nonna Bakery's app used to run on an older platform. When Nonna Bakery moved to Places 360, the accounts of people who had placed an order or had stamps or rewards with Nonna Bakery came across, with their order history, stamps and rewards, so you can carry on where you left off:
- Your account — your name, your email address and, if you had one, your password (stored only in scrambled form, as before) became a Places 360 account you sign in to. If you already had a Places 360 account with the same email, it's that one.
- Your past orders — what you ordered from Nonna Bakery, when, where and for how much. You see them in the app under Earlier orders, and Nonna Bakery can see them, as it could before.
- Your stamps and rewards — how many stamps your card had, the rewards you'd earned and not yet used, and when you first and last collected one. You see them in the app's Wallet, and Nonna Bakery can see them, as it could before.
- Signing you in — the first time the new app opens on a phone that had the previous one, it reads the previous app's sign-in from that phone, exchanges it once for a Places 360 sign-in, and deletes the previous app's sign-in from the phone.
Nothing else came across: not your phone number, saved addresses, payment details, or any marketing choice you made in the previous app. Nonna Bakery only sends you marketing if you say yes to it on Places 360.
What it's used for, and why that's allowed
| What for | Lawful basis |
|---|---|
| Taking, preparing, delivering and invoicing your orders, and contacting you about them | Contract: the order you placed with Nonna Bakery |
| Keeping order and payment records | Legal obligation: UK tax law requires them |
| Running any loyalty card, rewards and offers you join at Nonna Bakery | Contract: the programme you joined |
| Sending you marketing emails, and offers as notifications | Consent: only after you say yes, and only on that channel |
| Bringing your account, past orders, stamps and rewards over from the previous app | Legitimate interests: you keep your account, order history, stamps and rewards when the app changes |
Under Places 360's business terms, Nonna Bakery may use what it receives only for the order or service it came with and for anything else you've agreed to, and may never sell or share it.
Marketing, and how to stop it
Nonna Bakery's marketing is opt-in, per channel: nothing is ticked for you, and you can change your mind at any time. You can say yes when you create your account in the Nonna Bakery app or at 360.nonnabakery.co.uk, when you claim an offer that's for subscribers, or later in Profile.
An email yes is not a notifications yes, and a notifications yes counts only in the Nonna Bakery app: you give it there, in Profile → Marketing → Offers as notifications. A yes you gave in the Places 360 app doesn't count in it, and the Places 360 app never sends Nonna Bakery's marketing as notifications.
The Nonna Bakery app also sends you notifications about your own orders and rewards at Nonna Bakery. Those aren't marketing and need no yes; you can turn the app's notifications off in your phone's Settings at any time.
To stop:
- In the app — Profile → Marketing, and switch Emails (or Offers as notifications) off. In the Places 360 app it's Profile → Marketing from venues → Nonna Bakery → Emails.
- From any email — every marketing email from Nonna Bakery has an unsubscribe link, and one click ends it.
- By telling Nonna Bakery — email info@nonnabakery.co.uk.
Turning it off stops it straight away: your email leaves Nonna Bakery's customer list in Places 360 at once, and Nonna Bakery must stop sending you marketing. It takes nothing away: your loyalty card, your stamps and any reward you've already claimed stay yours. If your mailbox provider tells Places 360 you reported one of Nonna Bakery's emails as spam, that counts as unsubscribing.
How long it's kept
Your activity and orders with Nonna Bakery are kept while your account is active. Order and payment records are kept for the periods UK tax law requires, then deleted. Your marketing choices, and when you made them, are kept while your account exists, to show what you agreed to. Notes left with a rating are deleted after 12 months, and ratings after 24.
If you delete your account (Profile → Delete account), your profile, loyalty progress and marketing choices are deleted, and your identity is removed from Nonna Bakery's history. The order records Nonna Bakery must keep by law stay, without your name, phone number or address, and nothing in them points back to you.
One thing stays after you delete your account: if you activated an offer while your account had a confirmed phone number, a one-way code made from that number (never the number itself) is kept for as long as that offer exists, so the same number can't claim it again from another account. It can't be turned back into your number.
Where it's kept, and who helps
All of this is held by Places 360, with your account, in London. The companies that help Places 360 run it, such as Stripe for payments and Resend for email, are listed in Places 360's privacy policy. If Nonna Bakery connects its own tools, such as a till or a receipt printer, your order details go to them under Nonna Bakery's instruction.
If Nonna Bakery's owners or managers ask Dalve, Places 360's assistant, about their business, your display name and your activity with Nonna Bakery can be part of what it reads to answer them. Dalve runs on Anthropic's AI, processed outside the UK (including in the United States), under the terms described in Places 360's privacy policy; Anthropic may not use it to train its models. If they mark one of Dalve's answers as not right, Places 360 keeps that answer and the few messages before it for 90 days to put it right.
Your rights
You can ask Nonna Bakery for a copy of the information it holds about you, and ask it to correct it, delete it, limit how it's used, or give it to you in a form you can take elsewhere. You can object to how it's used, and withdraw your consent to marketing at any time; withdrawing doesn't affect what was done before.
Email Nonna Bakery at info@nonnabakery.co.uk and it will reply within a month. For your Places 360 account itself (signing in, or deleting it), use the app, or see Places 360's privacy policy.
Complaints
If you're unhappy with how Nonna Bakery has handled your information, tell Nonna Bakery at info@nonnabakery.co.uk. It will acknowledge your complaint within 30 days, look into it and tell you the outcome. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
The Nonna Bakery app isn't directed at children: a Places 360 account needs you to be at least 16.
Changes
Nonna Bakery will post any changes here and update the date at the top.
Contact
NONNA BAKERY CO LTD, 311 Regents Park Road, London N3 1DP · info@nonnabakery.co.uk