Privacy Policy

Last updated: 24 August 2026

Pizza & Co is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains who we are, what personal data we collect about you, how we use it, and your rights in relation to it.

We are the data controller for the personal data we collect through our website and order process. This policy applies to all customers and website visitors.

1. Who we are

Business name: Pizza & Co
Address: 2 Blind Lane, Silksworth, Sunderland SR3 1AU
Website: www.pizza-co.uk
Email: hello@pizza-co.uk
Telephone: 0191 523 7878

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. What personal data we collect

2.1 Data you provide to us

When you place an order or contact us, we collect:

  • Full name
  • Delivery address
  • Email address
  • Phone number
  • Payment information (processed securely via our payment provider — we do not store card details)
  • Any messages or communications you send to us

2.2 Data collected automatically

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Pages visited and time spent on the site
  • Referring website or search terms
  • Device type and operating system

This data is collected via cookies and similar technologies. Please see section 9 for more information.

3. How we use your personal data

3.1 To fulfill your order

We process your name, address, email, and phone number to process and deliver your order, send order confirmations and dispatch notifications, and contact you about your delivery if needed. Our lawful basis is the performance of a contract with you.

3.2 Customer service

We use your contact details to respond to enquiries, complaints, or requests relating to your order. Our lawful basis is legitimate interests (providing customer support) and, where applicable, compliance with our legal obligations.

3.3 Legal compliance

We may process your data where necessary to comply with a legal obligation, such as retaining financial records for HMRC purposes. Our lawful basis is compliance with a legal obligation.

3.4 Marketing

We will only send you marketing emails or newsletters if you have given us your explicit consent to do so. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Our lawful basis is consent.

3.5 Improving our website & services

We use anonymised and aggregated data collected through cookies and analytics tools to understand how our website is used and to improve our products and services. Our lawful basis is legitimate interests.

4. Who we share your data with

We do not sell your personal data. We may share your data with trusted third parties only where necessary:

  • Delivery and courier partners — to fulfill your order
  • Payment processors — to securely handle payment transactions
  • IT and website hosting providers — to operate our website and systems
  • Email service providers — to send order confirmations and communications
  • Legal and regulatory authorities — where required by law

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law. We do not transfer your data outside the UK or European Economic Area without appropriate safeguards in place.

5. How long we keep your data

We retain your personal data only for as long as necessary for the purposes described in this policy:

  • Order and transaction records: 7 years (to comply with HMRC financial record-keeping requirements)
  • Customer service communications: 2 years from the date of your last contact
  • Marketing preferences: until you withdraw consent
  • Website analytics data: 26 months (in line with standard analytics retention)

After the applicable retention period, your data is securely deleted or anonymised.

6. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to ask us to correct inaccurate or incomplete data
  • Right to erasure — to ask us to delete your data in certain circumstances
  • Right to restriction — to ask us to restrict how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to our processing of your data based on legitimate interests or for direct marketing
  • Rights related to automated decision-making — we do not carry out solely automated decision-making that has a significant effect on you

To exercise any of these rights, please contact us at hello@pizza-co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe we have not handled your data appropriately.

7. How we protect your data

We take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it against unauthorised access, loss, or disclosure. These include:

  • Secure (HTTPS) encrypted connections on our website
  • Secure payment processing via a PCI-DSS compliant payment provider — we never store card details
  • Access controls limiting who within our organisation can access personal data
  • Regular review of our security practices

In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the ICO as required by law.

8. Children’s privacy

Our website and products are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will delete it.

9. Cookies

Our website uses cookies to improve your browsing experience and to help us understand how the site is used. Cookies are small text files stored on your device.

9.1 Types of cookies we use

  • Essential cookies — necessary for the website to function (e.g. shopping basket, checkout)
  • Analytics cookies — help us understand how visitors use our site (e.g. Google Analytics)
  • Marketing cookies — used to show relevant advertising, only placed with your consent

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of our website. Full detail is in our Cookies Policy.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website, and the date at the top of this document will be updated accordingly. Where changes are significant, we will notify you by email if we hold your contact details.

11. Contact & complaints

If you have any questions, concerns, or complaints about how we handle your personal data, please contact us:

Pizza & Co
Email: hello@pizza-co.uk
Website: www.pizza-co.uk

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Website: www.ico.org.uk
Helpline: 0303 123 1113