Contents
1. Data Controller
L'Cinco Pizza ("we", "us", "our") is the data controller responsible for your personal data. We are registered in France and operate from our principal location at 1 Rue de Rivoli, 75001 Paris, France.
If you have any questions about how we handle your personal data, contact our data protection team at privacy@lcinco-pizza.fr.
2. Data We Collect
We collect the following categories of personal data when you use our services:
- Identity data: first name, last name
- Contact data: email address, phone number, delivery address
- Order data: items ordered, order history, preferences
- Payment data: payment method type and last 4 digits (we do not store full card numbers)
- Technical data: IP address, browser type and version, device type, pages visited, time and date of access
- Communication data: messages sent via our contact form or email
- Marketing data: your preferences for receiving marketing communications from us
We do not intentionally collect data from individuals under the age of 18. If you believe we have collected data about a minor, please contact us immediately.
3. How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling your orders (including delivery coordination)
- Sending order confirmations and delivery status updates
- Responding to your enquiries and customer service requests
- Sending marketing communications (only if you have opted in)
- Improving our website and service through analytics
- Fraud prevention and security
- Compliance with legal obligations
4. Legal Basis for Processing
Under GDPR, we process your personal data on the following legal bases:
- Contract performance: processing necessary to fulfil your order and deliver our services
- Legitimate interests: fraud prevention, security, analytics to improve our services
- Legal obligation: compliance with applicable laws and regulations
- Consent: marketing communications (you may withdraw consent at any time)
5. Data Sharing
We do not sell your personal data to third parties. We may share your data with:
- Delivery partners: your name, address, and phone number are shared with our delivery staff to fulfil your order
- Payment processors: secure payment gateways (Stripe, PayPal) to process transactions
- Analytics providers: anonymised usage data to improve our website performance
- Legal authorities: where required by law or court order
All third-party service providers are required to process your data securely and only for the specified purpose.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:
- Order and transaction data: 7 years (legal/tax obligation)
- Account data: until account deletion or 3 years of inactivity
- Marketing preferences: until you unsubscribe or request deletion
- Contact form messages: 2 years
- Technical/log data: 90 days
7. Cookies
Our website uses cookies and similar technologies to improve your experience. We use:
- Essential cookies: required for core site functions (cart, session management) — these cannot be disabled
- Analytics cookies: help us understand how visitors use our site (usage statistics)
- Local Storage: we store your cart data in your browser's local storage for convenience
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect site functionality.
8. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your personal data ("right to be forgotten")
- Right to restriction: request that we limit how we process your data
- Right to portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: withdraw consent for marketing at any time
To exercise any of these rights, please contact us at privacy@lcinco-pizza.fr. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include:
- HTTPS encryption for all data in transit
- Secure, access-controlled database storage
- Regular security assessments and updates
- Staff training on data protection
- Strict access controls — only authorised personnel can access personal data
In the event of a data breach affecting your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform you without undue delay.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the "Last updated" date revised accordingly. We encourage you to check this page periodically.
Where changes are significant, we will notify you by email or by placing a prominent notice on our website.
11. Contact
For any questions, requests, or concerns regarding this Privacy Policy or our data processing practices:
- Email: privacy@lcinco-pizza.fr
- Phone: +01 23 45 67 89
- Post: L'Cinco Pizza, Data Protection, 1 Rue de Rivoli, 75001 Paris, France
- Or use our contact form