1. IMPORTANT INFORMATION AND WHO WE ARE

Purpose of this Privacy Policy

This privacy policy aims to give you information on how Pat’s Pizza Co collects and processes your personal data through your use of this website, including any data you may provide when you sign up for our marketing lists or place an order for collection or delivery.

Data Controller

Pat’s Pizza Co is the data controller and is responsible for your personal data (referred to as "we", "us" or "our" in this policy).

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us using the details set out below:

• Full name of legal entity: Pats in the Pub Limited trading as Pat’s Pizza Co

• Email address: marketing@patswoodfiredpizza.co.uk

• Postal address: 5 Bishops Drive, Lewes, East Sussex, England, BN7 1HA

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

2. THE DATA WE COLLECT ABOUT YOU

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: Includes your first name and last name.

• Contact Data: Includes your delivery address, billing address, email address, and telephone numbers.

• Transaction Data: Includes details about payments to and from you and other details of products (such as pizzas and sides) you have purchased from us.

• Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

• Usage Data: Includes information about how you use our website, products, and services.

• Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

3. HOW YOUR PERSONAL DATA IS COLLECTED

We use different methods to collect data from and about you, including through:

Direct Interactions

You may give us your Identity and Contact Data by filling in forms on our site or by corresponding with us by post, phone, or email. This includes personal data you provide when you:

• Subscribe to our newsletters;

• Enter a competition, promotion, or survey; or

• Give us feedback or contact us.

Our Third-Party Ordering Platform

When you order food from us online, you are redirected to our dedicated e-commerce checkout platform, Orderswift (hosted at https://patspizza.orderswift.com/ and operated by Swift Bistro Ltd). Orderswift collects your Identity, Contact, and Transaction Data on our behalf to process your payment and fulfill your food order. This data is securely synchronized back to us.

4. HOW WE USE YOUR PERSONAL DATA & OUR LAWFUL BASIS

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing your food order).

• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.

• Where we need to comply with a legal or regulatory obligation.

Marketing Communications and the "Soft Opt-In"

We want to keep you updated on our latest pizza deals and menu additions. We use two separate lawful bases for our email marketing depending on how you interacted with us:

• The "Soft Opt-In" (Existing Customers): Under the Privacy and Electronic Communications Regulations (PECR), if you buy a product from us via Orderswift, we may send you marketing emails about our own similar pizza products and offers, provided you were given a clear opportunity to opt out at the time of purchase (by checking the opt-out box on the checkout screen) and you chose not to do so. Our lawful basis here is our Legitimate Interests to grow our business.

• Direct Consent (Non-Customers): If you have not bought food from us before but choose to sign up to our newsletter list directly through our website, our lawful basis is your explicit Consent.

You can ask us to stop sending you marketing messages at any time by clicking the "Unsubscribe" link at the bottom of any marketing email sent to you, or by contacting us directly.

5. DISCLOSURES OF YOUR PERSONAL DATA

We only share your personal data with trusted third parties to run our business and deliver your orders. These parties act as Data Processors and are legally bound to handle your data securely:

1. Orderswift (Swift Bistro Ltd): Our online ordering infrastructure provider. They capture your order details and delivery information so we can cook and deliver your food. You can view the Orderswift Privacy Policy for more details.

2. Mailchimp (The Rocket Science Group LLC): Our email marketing platform. If you do not opt out of marketing during checkout, or if you sign up to our website newsletter, your contact details are synced to Mailchimp so we can send you promotional offers.

3. Payment Gateways: Third-party payment processors utilized by Orderswift to process your debit/credit card details securely. We do not store your full financial card details on our own servers.

6. INTERNATIONAL DATA TRANSFERS

Because we use Mailchimp for our email marketing, your personal data (name and email address) will be transferred to, and stored by, Mailchimp on servers located in the United States.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate legal safeguards are implemented. Mailchimp utilizes UK/EU Standard Contractual Clauses (SCCs) and is certified under the Data Privacy Framework to ensure your data remains protected to UK standards.

7. EMAIL TRACKING DISCLOSURES

Please note that marketing emails sent via Mailchimp contain invisible, automated tracking technologies (such as web beacons or pixels). These pixels record whether you open our emails, when you open them, your IP address, and which links you click within the email.

We use this data in our Legitimate Interests to analyze the success of our campaigns and tailor our promotions.If you do not want this tracking to occur, you can disable the loading of remote images in your email client settings, or unsubscribe from our marketing list.

8. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

For marketing data, we will keep your details on file until you choose to unsubscribe or opt out. Once you unsubscribe, your email is kept on a suppression list to ensure we honor your request and do not email you again by accident.

9. YOUR LEGAL RIGHTS

Under data protection laws, you have rights in relation to your personal data, including the right to:

• Request access to your personal data (a "data subject access request").

• Request correction of the personal data that we hold about you.

• Request erasure of your personal data ("the right to be forgotten").

• Object to processing of your personal data where we are relying on a legitimate interest.

• Request restriction of processing of your personal data.

• Withdraw consent at any time where we are relying on consent to process your data.

If you wish to exercise any of these rights, please contact us at marketing@patswoodfiredpizza.co.uk