Moving from the not-paella to the privacy thing again... Someone said she has no privacy notice on her website? Now at the very least, she collects people's email addresses on there, so is it not mandatory by law that she has one? In addition, she should by law be registered with the ICO and have paid a data protection fee as she handles and stores an awful lot of personal data. Even if we ignore the stories people send her, she has an employee with hands and data, all the names and addresses of her patrons, and we can only speculate as to how this data is stored... It looks to me like she's breaching data protection law in a number of ways
.
Happy for more knowledgeable fraus to provide further education on the subject, but it doesn't look right to me at all?