Back to home

Privacy Policy

Last updated: 4 June 2026

La Pasteria Pizza Bar (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what personal data we collect when you use our website, mobile app or visit our restaurant, how we use it, and the rights you have under UK GDPR and the Data Protection Act 2018.

1. Who we are

La Pasteria Pizza Bar
36 High Street North, Dunstable, LU6 1LA
Phone: 01582 758636
Email: Lapasteriapizzabar@gmail.com

We are the “data controller” for the personal data we collect through our website, ordering app and in-restaurant systems.

2. The information we collect

We only collect what is needed to take your order, manage your booking and run the restaurant. This typically includes:

  • Name, phone number and email address — so we can confirm your booking or food order.
  • Delivery address & postcode — only if you place a delivery order.
  • Order details — items ordered, special instructions, total, payment method.
  • Booking details — date, time, party size, special requests, allergies.
  • Payment information — handled directly by our payment provider Stripe. We never see or store your full card number.
  • Technical data — IP address, browser type, device type and basic analytics so we can keep the website running smoothly.

3. How we use your information

We use your data only for the purposes you’d reasonably expect:

  • To process your food orders and table bookings.
  • To send confirmation, status updates and receipts by email.
  • To take payment securely via Stripe.
  • To contact you if there’s a problem with your order or booking.
  • To meet our legal and tax obligations (e.g. keeping financial records).
  • To improve our menu, hours and service based on aggregate (non-identifying) trends.

We will never sell your data, and we don’t use it for marketing without your explicit consent.

4. Legal basis for processing

Under UK GDPR we rely on the following legal bases:

  • Contract — to fulfil your order or booking.
  • Legal obligation — for tax and accounting records.
  • Legitimate interest — to run the restaurant safely, prevent fraud and improve our service.
  • Consent — for any optional marketing communications (always opt-in).

5. Who we share your data with

We only share data with trusted processors who help us deliver the service:

  • Stripe — secure online payments (Stripe Privacy Policy).
  • Resend — transactional emails (confirmations and updates).
  • Our hosting and database providers — to securely store and process your order/booking.
  • UK authorities — only if legally required (e.g. HMRC, fraud investigations).

We do not transfer your personal data outside the UK/EEA unless that country has an adequate level of protection or we use approved safeguards.

6. How long we keep your data

  • Order and booking records: up to 7 years for accounting/tax purposes.
  • Email communications: up to 2 years after your last interaction with us.
  • Payment records: retained by Stripe according to their policy.

Once these periods expire, the data is securely deleted or anonymised.

7. Cookies

We use a small number of essential cookies so the website works correctly (e.g. to keep your cart, remember your order type, and protect against abuse). We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but parts of the website (such as checkout) may stop working.

8. Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct any inaccurate or incomplete data.
  • Ask us to delete your data (where we are not legally required to keep it).
  • Object to processing or ask us to restrict it.
  • Withdraw consent for any marketing at any time.
  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, email Lapasteriapizzabar@gmail.com or call 01582 758636. We aim to respond within 30 days.

9. Children

Our website and app are intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

All data is sent over encrypted HTTPS connections. Payment data is handled directly by Stripe (a PCI-DSS Level 1 certified provider). Access to our admin systems is password-protected and restricted to authorised staff only.

11. Updates to this policy

We may update this policy from time to time. Significant changes will be reflected at the top of this page (the “last updated” date). Please check back occasionally.

12. Contact us

If you have any questions about this policy or your personal data, please reach out:

La Pasteria Pizza Bar
36 High Street North, Dunstable, LU6 1LA
Lapasteriapizzabar@gmail.com
01582 758636