Legal

Privacy Policy

Last updated: 21 May 2025

Who We Are

Bobby's Italian (“we”, “us”, “our”) is a restaurant and takeaway service operated from 18 Stoke Road, Gosport, Hampshire, PO12 1JB. VAT registration number: 150051367. Registered in England and Wales.

We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, please contact us at bobbyspizza@hotmail.co.uk or call 02392 523003.

What Data We Collect

We collect personal data in the following circumstances:

  • Table bookings — your name, phone number, email address, party size, preferred date and time, and any special requests you provide.
  • Online orders — your name, delivery address (if applicable), phone number, email address, and order details. Payment information is processed securely by our payment provider and is not stored by us.
  • Account registration — if you create an account, we store your name, email address, and a securely hashed password.
  • Contact and enquiries — any information you send us directly by email or telephone.
  • Website usage — we may collect anonymised data about how visitors use our website (pages visited, device type, approximate location) to help us improve the site. This data does not identify you personally.

How We Use Your Data

We use the personal data we collect to:

  • Process and confirm your table booking or takeaway order
  • Contact you regarding your booking or order (including confirmation and any changes)
  • Manage your account if you have registered with us
  • Respond to enquiries or requests you send us
  • Send you updates or special offers if you have opted in to receive them
  • Improve our website and services using anonymised analytics
  • Comply with our legal and regulatory obligations

We will only use your data for the purpose for which it was collected. We do not sell your personal data to third parties.

Our Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

  • Contract performance — to fulfil your booking or order.
  • Legitimate interests — to operate and improve our business, provided this does not override your rights.
  • Consent — where you have opted in to receive marketing communications. You may withdraw consent at any time.
  • Legal obligation — where we are required to retain data by law (e.g. for accounting and tax purposes).

How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law. In general:

  • Booking and order records are kept for up to 3 years for operational and accounting purposes.
  • Account data is retained until you delete your account or request erasure.
  • Marketing preferences are retained until you withdraw consent.

Who We Share Your Data With

We do not sell or rent your personal data. We may share it with the following categories of third party only where necessary:

  • Payment processors — to handle secure payment for orders.
  • IT and hosting providers — the platforms and infrastructure used to operate our website and database.
  • Delivery services — your name and delivery address may be shared with a driver where local delivery is selected.
  • Legal and regulatory bodies — where we are required to do so by law.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

Cookies

Our website uses cookies — small text files stored on your device — to help the site function correctly and to understand how it is used. These include:

  • Essential cookies — required for the site to work (e.g. keeping you logged in, maintaining your basket).
  • Analytics cookies — anonymised data to help us understand site traffic and improve user experience.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the site.

Your Rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — request that we delete your personal data (“right to be forgotten”), subject to legal obligations.
  • Restriction — ask us to limit how we use your data in certain circumstances.
  • Portability — receive your data in a structured, commonly used format.
  • Objection — object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at bobbyspizza@hotmail.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Our website uses HTTPS encryption for all data in transit. Passwords are stored using secure one-way hashing and are never stored in plain text.

While we take every care, no method of transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please get in touch:

Bobby's Italian

18 Stoke Road, Gosport, Hampshire, PO12 1JB

02392 523003

bobbyspizza@hotmail.co.uk