Privacy Policy for La Pizzeria Napoli
Effective Date: 20.09.2024
1. Introduction
La Pizzeria Napoli (“we,” “our,” “us”) operates the website https://lapizzerianapoli.co.uk/ (the “Website”). This Privacy Policy outlines how we collect, use, share, and protect your personal data when you interact with our Website and Services, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.
For questions, concerns, or requests regarding this Privacy Policy, please contact our Data Manager, M Adil, at info@lapizzerianapoli.co.uk.
2. What Data We Collect
We may collect different types of personal data based on your interactions with our Website and Services. The types of data collected include:
a. Personal Identification Information
- Name
- Email Address
- Phone Number
- Address
- Payment Information (for orders/bookings)
b. Technical Information
- IP Address
- Browser type and version
- Time zone setting
- Operating system and platform
c. Usage Data
- Details of your visits to our Website, including the pages viewed, time spent, links clicked, and any other activity on the Website.
- Cookies and tracking technologies, such as browser cookies, pixels, and similar technologies (see our Cookies Policy for more details).
d. Marketing and Communications Data
- Preferences in receiving marketing material from us.
- Communication history (including emails, messages, and support inquiries).
e. Special Categories of Personal Data
We do not intentionally collect sensitive personal data (e.g., racial/ethnic origin, political opinions, health information). If you voluntarily share such information with us, it will be processed only with your explicit consent.
3. How We Collect Data
We collect data about you through:
a. Direct Interactions
- When you make a booking or place an order.
- When you subscribe to our newsletters or sign up for updates.
- When you contact us for inquiries or customer support.
b. Automated Technologies
- Through cookies and other tracking technologies that collect technical and usage data when you browse our Website.
c. Third-Party Sources
We may receive personal data about you from various third parties, such as:
- Analytics providers like Google Analytics.
- Social media platforms if you engage with our content or share information from our Website.
4. How We Use Your Data
We use your personal data for the following purposes:
a. To Provide and Improve Our Services
- Process orders and bookings.
- Deliver products and services.
- Manage payments and invoices.
- Enhance the Website’s functionality and user experience.
b. For Marketing and Communications
- Send promotional offers, newsletters, and marketing materials that may be of interest to you (you may opt out at any time).
- Provide you with information about new products, services, and special events.
c. To Fulfill Legal Obligations
- Comply with legal and regulatory obligations.
- Respond to government or law enforcement requests.
d. For Analytical and Statistical Purposes
- Analyze trends and monitor usage data to improve our Services.
- Understand how users interact with our Website to optimize user experience.
e. For Security and Fraud Prevention
- Ensure the security of our Website and Services.
- Detect, prevent, and address fraud or other harmful activities.
5. Legal Basis for Processing (GDPR Compliance)
Under the GDPR, we rely on specific legal grounds to process your personal data:
- Contractual necessity: To perform a contract with you (e.g., to fulfill an order or booking).
- Legitimate interests: For our business purposes, provided they do not override your privacy rights.
- Consent: Where you have provided your explicit consent for specific activities (e.g., marketing communications).
- Legal obligation: To comply with a legal or regulatory obligation.
You have the right to withdraw consent at any time where we are relying on consent to process your personal data.
6. How We Share Your Data
We do not sell or rent your personal data. However, we may share your data in the following circumstances:
a. Service Providers
We may share your data with trusted third-party service providers to perform services on our behalf, such as:
- Payment processors.
- Email and marketing platforms.
- IT and hosting providers.
These service providers are contractually obligated to use your personal data only to provide the requested services and to protect it in accordance with this Privacy Policy.
b. Legal Requirements
We may disclose your data if required by law, legal process, or government request, or if necessary to enforce our Terms & Conditions or protect the rights, property, or safety of La Pizzeria Napoli, our users, or others.
c. Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our business, your data may be transferred as part of the transaction. In such cases, you will be notified of any changes to the control or use of your personal data.
7. International Transfers
We are based in [Country], but some of our service providers may process your data outside of the European Economic Area (EEA). When your personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Binding corporate rules.
- Privacy Shield framework, where applicable.
8. Your Rights Under GDPR
Under the GDPR, you have certain rights regarding your personal data, including:
- Right to Access: Request a copy of the data we hold about you.
- Right to Rectification: Request corrections to any incorrect or incomplete data.
- Right to Erasure (Right to be Forgotten): Request the deletion of your data under certain conditions.
- Right to Restriction: Request the restriction of processing your data under certain circumstances.
- Right to Data Portability: Request a structured, machine-readable copy of your data to transfer to another provider.
- Right to Object: Object to processing based on legitimate interests, direct marketing, or profiling.
- Right to Withdraw Consent: Withdraw your consent to processing at any time, where applicable.
To exercise any of these rights, please contact our Data Manager, M Adil, at info@lapizzerianapoli.co.uk.
9. Data Retention
We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. Data retention periods vary based on the nature of the data and the purpose for which it was collected.
10. Security of Your Data
We take reasonable measures to protect your data from unauthorized access, use, alteration, or destruction. These measures include:
- Encryption of sensitive data.
- Secure storage solutions.
- Access controls to restrict data access to authorized personnel only.
However, no method of data transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11. Third-Party Websites
Our Website may contain links to third-party websites. We are not responsible for the content, privacy policies, or practices of these websites. We encourage you to review their privacy policies before providing any personal data.
12. Your Rights Under CCPA (California Residents)
If you are a resident of California, you have rights under the California Consumer Privacy Act (CCPA), including:
- Right to Know: Request information about the personal data we collect, use, disclose, and sell (if applicable).
- Right to Delete: Request deletion of your personal data.
- Right to Opt-Out of Sale: Opt out of the sale of your personal data to third parties.
- Right to Non-Discrimination: You will not be discriminated against for exercising any of your rights under the CCPA.
To exercise any of these rights, please contact our Data Manager, M Adil, at info@lapizzerianapoli.co.uk.
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we handle your data.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
La Pizzeria Napoli
Data Manager: M Adil
Email: info@lapizzerianapoli.co.uk
Thank you for visiting La Pizzeria Napoli and trusting us with your personal data.
Who we are
Suggested text: Our website address is: http://lapizzerianapoli.co.uk.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.