Privacy Policy — Italian Street Pasta

This Privacy Policy explains how Alina Mihaela Stoian, trading as Italian Street Pasta ("we", "us", "our") collects, uses, and protects information about you when you visit this website or interact with our business. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Data Controller: Alina Mihaela Stoian (sole trader), trading as Italian Street Pasta. Address: Luckyn Ln, Basildon SS14 3AX, United Kingdom. Email: italianstreetpasta50@gmail.com — Phone: +44 7404 977969.

1. What information we collect

We collect only the minimum information necessary to operate our business and serve you. Specifically:

Contact information — when you call, text, or email us to place an order, ask a question, or provide feedback, we collect your name, phone number, and/or email address.
Order details — what you ordered, when, and any dietary requirements or allergen requests you share with us.
Technical information — when you visit our website, we may automatically receive limited technical data (IP address, browser type, pages viewed, time spent on the site) through standard web server logs and analytics tools.

We do not collect payment card details on this website. All payments are processed in person at our food truck or through third-party platforms.

2. How we use your information

We use the information we collect for the following purposes, each with a lawful basis under UK GDPR:

To fulfil your order — lawful basis: performance of a contract.
To respond to your enquiries — lawful basis: legitimate interest in providing customer service.
To improve our menu, service, and website — lawful basis: legitimate interest in running our business effectively.
To comply with legal obligations — for example, food safety records or tax records — lawful basis: legal obligation.

We do not use your information for marketing purposes unless you have explicitly consented.

3. Who we share your information with

We do not sell or rent your personal information to anyone. We only share it with third parties in the following limited circumstances:

Service providers who help us operate our business (for example, our website hosting provider, email provider). These parties are bound by confidentiality obligations.
Authorities, regulators, or law enforcement when required by law (for example, Basildon Council environmental health, HMRC, or the Food Standards Agency).

4. How long we keep your information

We keep your information only for as long as necessary for the purposes described above, or as required by law:

Order and contact records — typically up to 12 months unless a complaint or legal matter requires longer retention.
Financial and tax records — at least 6 years, as required by HMRC.
Website analytics data — typically 14–26 months.

5. Your rights under UK GDPR

You have the following rights regarding your personal information:

Right to be informed — about how your data is used (this policy).
Right of access — request a copy of the personal data we hold about you.
Right to rectification — ask us to correct inaccurate information.
Right to erasure — ask us to delete your data, subject to legal limits.
Right to restrict processing — ask us to limit how we use your data.
Right to data portability — receive your data in a portable format.
Right to object — to certain types of processing (e.g. direct marketing).
Right to withdraw consent — at any time, where consent is the lawful basis.

To exercise any of these rights, contact us at italianstreetpasta50@gmail.com. We will respond within one calendar month.

6. Cookies and tracking

Our website uses cookies and similar technologies. For full details about which cookies we use, why, and how you can control them, please see our Cookie Policy.

7. Security of your information

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will promptly delete it.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when it was most recently revised. We encourage you to review this policy periodically.

10. How to make a complaint

If you have any concerns about how we handle your personal information, please contact us first at italianstreetpasta50@gmail.com. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 — Website: ico.org.uk

11. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please get in touch:

Email: italianstreetpasta50@gmail.com
Phone: +44 7404 977969
Address: Luckyn Ln, Basildon SS14 3AX, United Kingdom