Privacy Policy

Last updated: 31 May 2026

1. Data Controller

The data controller is MARILUCIA Italian Restaurant, Pizzeria & Bar, located at 55 Wood St, London E17 3JX.

For any privacy-related enquiries, you can contact us at info.marilucia@gmail.com or by phone at 07553 732911.

2. Types of Data Collected

Our website may collect:

Personal data, such as your name, email address, telephone number, and any information you voluntarily provide when contacting us, making a booking, subscribing to our newsletter, or completing a website form.
Browsing data, including IP addresses, browser type, operating system, referring pages, and website usage information collected automatically for technical, statistical, and security purposes.
Cookies and similar technologies used to improve website functionality, enhance user experience, and analyse website traffic. For further information, please refer to our Cookie Policy.

3. Purpose of Data Processing

Your personal data may be processed for the following purposes:

Managing bookings, enquiries, and customer communications.
Providing information about our services and responding to requests.
Sending newsletters, offers, promotions, or marketing communications where you have provided consent.
Improving website performance, functionality, and user experience.
Protecting website security and preventing misuse.
Complying with legal obligations and responding to requests from competent authorities.

4. Legal Basis for Processing

Data processing is carried out in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The legal bases for processing include:

The performance of a contract or pre-contractual measures requested by you.
Your consent, where required, including for marketing communications.
Compliance with legal obligations.
Our legitimate interests in operating, improving, and securing our website and services.

5. Processing Methods

Personal data is processed lawfully, fairly, and transparently, primarily through electronic means.

Appropriate technical and organisational security measures are implemented to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements.

When personal data is no longer required, it will be securely deleted or anonymised.

7. Data Sharing

Personal data may be shared with trusted third-party service providers that assist us in operating our business and website, including:

Website hosting and management providers.
Booking and reservation platforms.
Email and communication service providers.
Analytics and website performance providers.

These third parties act as Data Processors and are contractually required to protect personal data and process it only according to our instructions.

We do not sell, rent, or disclose personal data to third parties for their independent marketing purposes.

8. Your Rights

Under the UK GDPR, you have the right to:

Access your personal data.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data where applicable.
Restrict or object to the processing of your personal data.
Withdraw consent at any time where processing is based on consent.
Request data portability where applicable.
Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us at info.marilucia@gmail.com.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes.

Any updates will be published on this page together with the revised date shown at the top of this policy.