Privacy Policy

Last updated: March 2026

Welcome to Pala Pizza ("we", "us", or "our"). We are committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, purchase gift cards, or interact with us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Pala Pizza
7 Jane Street, Leith, Edinburgh
Email: ciao@palapizza.co.uk
Website: palapizza.co.uk

What Data We Collect

We may collect and process the following personal data:

• Identity Data: Name or similar identifier.
• Contact Data: Email address.
• Financial Data: Payment card details (processed securely via Stripe — we never see or store your full card details).
• Transaction Data: Details of gift card purchases and redemptions.
• Technical Data: IP address, browser type and version, time zone setting, operating system, and platform.

How We Collect Your Data

We use different methods to collect data from and about you, including:

• Direct interactions (e.g. when you purchase a gift card)
• Automated technologies (e.g. cookies and server logs when you use our website)
• Third-party services (e.g. Stripe for payment processing, Resend for transactional emails)

How We Use Your Data

We use your data to:

• Process and deliver gift card purchases
• Send transactional emails (gift card delivery, purchase receipts)
• Communicate with you, including responding to queries
• Improve our website and customer experience
• Comply with legal obligations

We will only use your data when the law allows us to. Most commonly, we rely on the following lawful bases: performance of a contract, consent, legal obligation, and legitimate interests.

Marketing and Your Choices

We do not send marketing emails. We only send transactional emails directly related to your gift card purchase. We never sell or rent your data to third parties.

Cookies

We use essential cookies to manage admin sessions. We do not use tracking or advertising cookies. You can control cookie preferences through your browser settings.

Sharing Your Data

We may share your personal data with:

• Stripe (payment processing)
• Resend (transactional email delivery)
• Railway (website hosting)
• Legal or regulatory authorities if required

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

Data Security

We take data security seriously and have appropriate security measures to prevent your data from being lost, misused, or accessed without authorisation. Payment details are handled entirely by Stripe and never touch our servers.

Data Retention

We retain your data only as long as necessary to fulfil the purposes we collected it for, including for legal, accounting, or reporting requirements. Gift card transaction data is retained for the lifetime of the gift card plus any period required by law.

Your Rights

Under data protection laws, you have the right to:

• Access your personal data
• Request correction or erasure of your data
• Object to or restrict processing
• Request transfer of your data
• Withdraw consent (where applicable)

To exercise any of your rights, please contact us at ciao@palapizza.co.uk.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

• Email: ciao@palapizza.co.uk
• Post: Pala Pizza, 7 Jane Street, Leith, Edinburgh

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.