1. Introduction
This Privacy Policy explains how Ustaadz Pizza Ltd collects, uses, stores and shares personal information when you visit ustaadzpizza.buzz, send an enquiry, book a wood fired pizza night, reserve a place on a dough or topping class, hire the mobile oven or meet the team at a market stall. It also explains the choices you have and the rights available to you under data protection law in the United Kingdom.
This website is operated by Ustaadz Pizza Ltd. The digital presence described here was produced with the support of the developer Ustaadz Pizza, whose role is limited to the design and technical maintenance of the site that Ustaadz Pizza Ltd owns and controls. The introduction below names the developer briefly so that visitors understand the relationship, but every decision about booking data, catering logistics and customer care sits with the company.
We believe a small business earns trust by being plain about its handling of personal information. This policy is written in ordinary language on purpose. It avoids jargon, it avoids hidden clauses and it avoids vague promises. Where the law requires a specific term, we explain that term in the sentence that follows it so that you are never left guessing.
The developer Ustaadz Pizza built this public site and keeps its layout, styling and scripts in working order. The company, through its yard team in Bicester, decides which enquiries are answered, which bookings are accepted and how long a record is kept after an event. If you have a question about a booking, a payment or a past event, the company is the right party to contact. If you have a question about how a page loads or how a form behaves, the developer may be involved in fixing it, but the company remains accountable for the data.
By using this website, you confirm that you have read this policy and that you understand the practices it describes. If anything here is unclear, please contact us before you send personal information through the site or by email. We would rather answer a question early than resolve a misunderstanding later.
2. Who We Are
The data controller for this website and for the bookings handled through it is Ustaadz Pizza Ltd, a pizza and catering business registered in the United Kingdom. The registered address is Flat 1, 27 Causeway, Bicester - OX26 6AN, United Kingdom (GB). You can reach the team by email at pizza@ustaadzpizza.buzz or by telephone on +15513327250.
A data controller is the organisation that decides why personal information is collected and how it is used. For the purposes of this site, that organisation is Ustaadz Pizza Ltd. Where a supplier such as a payment provider or an email host processes information on our behalf, that supplier acts as a processor and is bound by a written agreement to follow our instructions.
We have not appointed a statutory data protection officer because our processing is limited to ordinary customer and booking activity. Instead, the owner of the company acts as the internal point of contact for privacy matters and reviews this policy at least once a year. If you need to raise a concern, use the contact channel described in the final section of this page.
3. Scope of This Policy
This policy covers personal information that we collect through the website, through email and telephone contact, through booking conversations and through attendance at events that we host or attend. It does not cover websites operated by other organisations, including market organisers, venues and payment platforms, even where you reach those services from a link on our pages.
When you follow a link to another website, that organisation applies its own privacy policy. We encourage you to read it before sharing personal information. We are not responsible for the data practices of third parties, although we choose our partners carefully and expect them to handle information responsibly.
This policy applies to all visitors to the site, whether they are browsing the service descriptions, reading the legal pages or sending a booking enquiry. It applies equally to customers who book an event and to guests whose details are provided to us by a host for catering purposes.
4. Information We Collect
We collect information that you choose to provide and a limited amount of information that is generated automatically as you browse. The categories below describe what we hold and why.
- Contact details such as your name, email address and telephone number.
- Booking details such as the date, time, venue address, guest count and menu choices.
- Correspondence, including emails and notes taken during a telephone call about an event.
- Dietary and access notes that you volunteer so that we can serve your group safely.
- Payment references such as a bank transfer reference or a receipt number.
- Technical data such as the type of device and browser used to reach the site.
We do not ask for information that we do not need. We do not collect national identity numbers, financial account passwords or any special category data unless you choose to share it for a clearly stated reason, such as a medical dietary requirement. Even then, we ask only for what is necessary to keep a guest safe.
5. Booking and Event Details
A booking requires us to know where to arrive, when to arrive and who we are serving. That means we hold the name and contact details of the person making the booking, the address of the venue and a description of the site, including any access notes such as a narrow gate or a soft lawn. This information is used to plan the crew, the fuel load and the equipment list for the day.
We may also record the menu that was agreed, the number of guests expected and any dietary requirements that the host passes to us. Dietary notes are treated with care and are shared only with the crew members who need them to prepare and serve food. After the event, we keep a short record of what was served and any issue that arose, so that we can improve our service and answer a question if one is raised later.
Where a host provides details about their guests, the host is responsible for making sure those guests know that their information has been shared with us for catering purposes. We use guest information only for the event in question and do not add guests to any mailing list.
6. Payment and Billing Data
Deposits and balances are handled by bank transfer or by a payment provider. We do not store full card numbers on our own systems. Where a card payment is taken, the provider processes the card details directly and shares only a confirmation reference and the amount with us. That reference appears on our invoice record and in our accounting software.
Our accounting records must be kept for the period required by United Kingdom tax law. Those records include the name of the payer, the amount paid, the date and a description of the service. They do not include the sensitive authentication data that belongs to a card provider.
If you believe a payment has been recorded incorrectly, contact us with the date and the reference. We will check the record and correct it where needed. We never ask for a password, a security code or a full card number by email or telephone.
7. Technical and Device Data
Like most websites, ours may receive limited technical information when you load a page. This can include the internet protocol address assigned to your connection, the type of browser you use, the size of your screen and the page that referred you to us. This data helps us understand whether the site works on common devices and whether a page is failing to load.
We do not use technical data to identify individual visitors for advertising. We do not build behavioural profiles of people who browse our pages. Where our hosting provider keeps server logs for security and reliability, those logs are retained for a short period and are accessed only when a fault or an attack needs investigation.
The site uses a small amount of script to improve readability, such as revealing sections as they scroll into view. These scripts run in your browser and do not transmit personal information to us. If JavaScript is disabled, all content remains visible and readable.
9. How We Use Information
We use personal information to reply to enquiries, to plan and deliver bookings, to prepare food safely, to issue and record invoices, to meet accounting and tax obligations and to improve the way we describe our services. Each of these uses is limited to what is needed for the task at hand.
We may also use contact details to send a short follow up after an event, asking whether everything went well. You can decline this follow up without affecting your booking or any future enquiry. We do not sell personal information, and we do not rent contact lists to other businesses.
Where information is used to improve the site, it is aggregated so that no individual can be identified. For example, we might note that visitors often ask which service suits a school fair, and then add a short section to the services page. That kind of change is based on general patterns, not on personal profiles.
10. Lawful Bases for Processing
Under United Kingdom data protection law we must have a lawful basis for each processing activity. Where you send an enquiry or make a booking, we process your information to take steps towards a contract or to perform that contract. Where we keep accounting records, we rely on a legal obligation.
Where we improve our services or keep a short safety record after an event, we rely on our legitimate interest in running a careful catering business. Before relying on that basis, we consider whether the use is proportionate and whether it could cause you harm. Where consent is the right basis, such as an optional follow up message, we ask for it clearly and you can withdraw it at any time.
For any special category information that you volunteer, such as a dietary requirement linked to a medical condition, we rely on your explicit consent and use the information only to prepare and serve food safely. You are never required to share such information, and you may simply ask us to note a preference such as a vegetarian choice instead.
12. Marketing Communications
We do not send bulk marketing email to people who have simply browsed the site. If you ask to hear about seasonal slots or class dates, we will add your email address to a short internal list. Every message of that kind includes a way to ask us to stop, and we honour that request promptly.
Booking confirmations, invoices and service updates are not marketing and are sent as part of the service you requested. If you make a booking on behalf of a group, we may contact you about that booking even if you have asked not to receive general news, because those messages are necessary to deliver the event.
13. How Long We Keep Data
We keep booking and correspondence records for as long as needed to deliver the service and to deal with any follow up. In practice this means we retain event records for a reasonable period after the event, then review them and delete the ones that are no longer needed.
Accounting records are kept for the period required by United Kingdom tax law, which is currently six years after the end of the relevant accounting period. Enquiries that do not lead to a booking are kept for a shorter period so that we can answer a question if you return, and are then removed.
Where we hold information only because you gave consent, we delete it when you withdraw that consent, unless the law requires us to keep a record for a defined purpose. When information is deleted from live systems, it may remain briefly in backups before those backups are overwritten in the normal cycle.
14. Security Measures
We protect personal information with practical measures suited to a small business. Access to booking records is limited to the people who need it to plan and deliver events. Devices that hold customer information are protected with passwords and kept up to date. Paper notes are stored in a locked space at the yard and are shredded when they are no longer needed.
The website is served over an encrypted connection, and forms open your own email application rather than storing messages on a server. This reduces the amount of information that sits on the site itself. If we ever introduce a change that sends information to a server, we will describe that change in this policy before the change goes live.
No system is completely immune to risk. If a security incident affects personal information, we will assess the impact, take steps to contain it and notify the relevant authority and any affected individuals where the law requires us to do so.
15. International Transfers
Our main records are kept in the United Kingdom. Some suppliers, such as an email host or an accounting platform, may store data in another country. Where that happens, we make sure an appropriate safeguard is in place, such as a recognised contractual clause or a finding of adequate protection.
We review these arrangements when a supplier changes its storage location or its terms. If you would like to know more about the safeguards used for a particular supplier, contact us and we will explain the position in plain language.
16. Your Privacy Rights
You have the right to ask what personal information we hold about you, to request a copy of it, to ask us to correct anything that is wrong and to ask us to delete information that we no longer need. You also have the right to object to certain uses and to ask us to restrict how information is handled while a question is being resolved.
Where we rely on consent, you have the right to withdraw it at any time. Withdrawing consent does not affect processing that took place before the withdrawal, and it does not affect processing that is based on another lawful basis, such as a legal obligation to keep accounting records.
To exercise a right, send a message to pizza@ustaadzpizza.buzz with enough detail for us to locate your records. We may ask for proof of identity if the request concerns sensitive information. We aim to respond within one month, and we will tell you if we need more time because a request is complex.
If you are not satisfied with our response, you may raise the matter with the Information Commissioner Office, the United Kingdom regulator for data protection. We would welcome the chance to resolve your concern first, so please contact us before making a formal complaint.
17. Privacy for Children
Our website is intended for adults who are arranging events, classes or oven hire. We do not knowingly collect personal information from children through this site. Where a family event includes children, the host provides the guest count and any relevant food notes, and we do not ask for information about individual children.
Class bookings must be made by an adult. If a young person attends a class, the booking adult remains the contact for that place. If you believe that a child has sent personal information to us directly, contact us and we will remove it promptly.
18. Changes to This Policy
We review this policy at least once a year and whenever a change to our services, suppliers or systems makes an update necessary. When a change affects the way personal information is handled, we will revise the date at the top of the page and adjust the relevant section.
Where a change is significant, we will highlight it on the site for a reasonable period. We encourage you to read this page when you return, especially before making a new booking. Continuing to use the site after an update means you accept the revised policy.
19. How to Reach Us
For any question about this policy or about personal information held by Ustaadz Pizza Ltd, write to us at Flat 1, 27 Causeway, Bicester - OX26 6AN, United Kingdom (GB). You can also email pizza@ustaadzpizza.buzz or call +15513327250 during business hours.
We aim to answer every privacy question within a few working days. If your message concerns a booking that is taking place soon, include the event date in the subject line so that the yard team can prioritise it.
Thank you for taking the time to read this policy. We take the responsibility that comes with handling your information seriously, and we would rather hear from you early than leave a question unanswered.