Privacy Policy

This Privacy Policy explains how Italian Pizza Shop ("we", "us") handles personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

• Trade name: Italian Pizza Shop
• Legal name: [LEGAL NAME / RAZÓN SOCIAL — TO BE COMPLETED]
• Tax ID (NIF/CIF): [NIF / CIF — TO BE COMPLETED]
• Address: Av. de Nabeul, 25, 29601 Marbella, Málaga, España
• Contact email: [CONTACT EMAIL / EMAIL DE CONTACTO]

2. What data we collect

When you use the order form on this website, we ask for the following data so we can fulfil your order: your name, phone number, and — for delivery orders — your delivery address, plus any optional notes you add (e.g. allergies or delivery instructions).

We do not collect payment card details, bank details or any other financial data through this website: payments are arranged directly with the restaurant by phone, WhatsApp, Bizum or in person.

3. How your data is used and where it goes

This website does not have a backend server or database. The shopping cart lives only in your browser's local storage on your own device. When you tap "Send order via WhatsApp" or "Send order via SMS", your order details and the personal data you entered are placed directly into a WhatsApp or SMS message addressed to the restaurant's phone number and sent from your own device through your own WhatsApp or SMS application — we do not intercept, store or have separate access to that message. From that point, your data is processed within your WhatsApp/SMS conversation with the restaurant, subject to WhatsApp's (Meta's) or your mobile carrier's own privacy terms.

The legal basis for this processing is the performance of a pre-contractual step at your request (preparing your food order) under Article 6(1)(b) GDPR.

4. International transfers

If you choose to send your order via WhatsApp, your message is processed by WhatsApp Ireland Limited / Meta Platforms, which may transfer data outside the European Economic Area under its own safeguards (such as the EU Standard Contractual Clauses). Please refer toWhatsApp's Privacy Policyfor details.

5. Data retention

We do not retain a copy of your order data on any server. Your order message remains in the WhatsApp/SMS conversation history on your device and on the restaurant owner's device, in line with each app's own retention settings. The only data stored by the website itself is your shopping cart contents, kept in your browser's local storage until you clear it or place/abandon the order.

6. Your rights

Under GDPR and the LOPDGDD you have the right to access, rectify, delete, restrict, object to, and port your personal data, as well as the right to withdraw consent at any time. To exercise these rights, contact us at[CONTACT EMAIL / EMAIL DE CONTACTO]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you believe your data has been mishandled.

7. Cookies and similar technologies

See our Cookie Policy for details on the cookies and third-party resources (such as Google Fonts) used on this site.

8. Minors

This website is not directed at children. We do not knowingly collect personal data from minors without appropriate parental consent.

9. Security

We apply reasonable technical and organisational measures appropriate to the limited processing described above. Because personal data you submit is sent directly from your device via WhatsApp/SMS rather than stored on a server, the main security safeguards that apply are those of your own device and of the WhatsApp/SMS service you use.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.