Privacy policy

Last updated 13 October 2026

This policy explains what personal information we collect when you order from us, enquire about catering, or use this website, what we do with it, who we share it with and your rights over it. We collect only what we need to make and deliver your food or plan your event, and we never sell your information.

Who we are

The Pompiere Pizza Co Ltd (“Pompiere Pizza Co”, “we”, “us”) is the data controller for the information described here. We are registered in England and Wales, company number 10305009, and our registered office is 15 Northfield Close, South Cave, East Riding of Yorkshire, HU15 2EW. We are registered with the Information Commissioner's Office, registration number ZB135056.

For anything about your personal information, email enquiries@pompierepizzaco.com.

Takeaway orders

When you order collection or delivery, online or by phone, we collect:

• your name and mobile number;
• your email address (optional for phone orders);
• for delivery, your address and any access instructions you give us;
• what you ordered, when you want it, and any note you add, such as a dietary or allergy need.

We use these to prepare your order, deliver it or have it ready for collection, and to contact you about it: a confirmation email and text, and for deliveries a text when it is on its way. The lawful basis is that we need them to fulfil our contract with you.

If you tell us about an allergy or medical dietary need, that is health information. We use it only to prepare your food safely, and only because you have chosen to give it to us.

Payments

Card payments are taken by our payment provider, Square. Your card details go straight into Square's secure form; we never see or store your card number. If you choose to save your card for next time, Square stores it, not us, and this browser keeps a cookie so it can offer it back to you. Square also processes payment information as a controller in its own right, under its own privacy notice.

Event and catering enquiries

When you ask us about catering a wedding, party or other event, we collect your name and email, the event date, rough guest numbers, the type of event, the venue or area, and anything else you tell us, such as dietary requirements. We use them to work out a quote, reply to you, follow up on your enquiry and, if you book, plan and deliver your event. The lawful basis is taking steps at your request before entering into a contract, and then the contract itself. Follow-up emails about your enquiry rely on our legitimate interest in answering it, and you can ask us to stop at any time.

Marketing emails

We only send news and offers if you have signed up for them or ticked the box at checkout. You can unsubscribe from any email with one click, or by emailing us. The lawful basis is your consent.

Cookies and similar storage

This website stores a small amount of information in your browser:

• Essential: your basket, the site you are ordering from, your chosen time and postcode, your cookie choice, and, if you chose to save a card, a reference to it. Staff logins use a cookie too. The site cannot work properly without these, so they do not need your consent.
• Advertising measurement: only if you accept it, we use Meta's pixel and Conversions API to see which of our Facebook and Instagram adverts lead to orders. If you decline, neither runs.

You can change your choice at any time with Cookie settings at the bottom of every page.

Keeping the site safe and planning deliveries

To stop automated abuse we briefly record the internet address that a form or order comes from. When someone outside our delivery area tries to order, we record only the first half of their postcode (for example “HU15”) and a random code this browser makes up for itself, so we can see where demand is and plan where to deliver next. Neither identifies you. The lawful basis for both is our legitimate interest in running the business safely and well.

Who we share it with

We use the following companies to run the business. They act on our instructions and may only use your information to provide their service to us.

Event enquiries are passed between these services by an automation system we run ourselves, so that step stays in house and involves no further company.

We may also share information where the law requires it, for example with HMRC. Some of these providers may process information outside the UK. Where they do, it is protected by the safeguards UK law requires, such as an adequacy decision or the approved international data transfer agreements.

How long we keep it

• Orders and payments: six years, as tax law requires.
• Event enquiries that do not become a booking: two years, then deleted.
• Event bookings: six years after the event.
• Marketing sign-ups: until you unsubscribe.
• Internet addresses recorded to stop abuse: only while they are needed for that, then cleared out automatically.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you;
• have it corrected if it is wrong;
• have it deleted, where we have no legal reason to keep it;
• restrict or object to how we use it, including for marketing;
• receive it in a portable form;
• withdraw your consent at any time, where we rely on it.

To use any of these, email enquiries@pompierepizzaco.com. We will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put it right first.

Changes to this policy

We will update this page when how we use information changes, and change the date at the top. See also our terms and conditions.