Privacy Policy

1. Who We Are

marketing.pizza ("marketing.pizza," "we," "our," or "us") operates the website at marketing.pizza and provides marketing strategy, analytics and campaign services to pizza and restaurant businesses.

For the personal data of visitors to this website and holders of marketing.pizza accounts, we are the data controller. For the personal data of our clients' end customers that we process to provide the services, we act as a data processor on the client's behalf, and the client remains the controller. For privacy enquiries, contact hello@marketing.pizza.

2. Information We Collect

• Account information: username, display name, organisation name, and billing details where applicable. We issue accounts; there is no self-service registration, so we do not collect signup data from the public.
• Business data: operational, sales and customer data from the ordering, point-of-sale and marketing systems you connect, such as orders, tickets, discounts, campaign responses and store performance. You retain ownership of this data.
• End-customer data: on behalf of our clients, we may process data about their customers (order history, contact details, consent records and loyalty activity) for segmentation, analytics and, where the client directs it, campaigns.
• Locally held working data: where our software runs on your own equipment, the working data it creates is stored there and is not transmitted to us. What reaches us is limited to signing in and checking what your account is permitted to do.
• Sign-in records: sign-in attempts, session identifiers and expiry, device information and IP address, retained for security and to detect unauthorised access.
• Usage data: which features of the service are used, and when.

3. How We Use Information

• To provide, maintain and improve the marketing.pizza service and software
• To analyse connected business data and produce segments, findings and recommendations for the client that owns it
• To determine which features your account is entitled to, and to enable or disable them
• To run campaigns a client has directed, to that client's own customers
• To authenticate users, maintain sessions, and detect and prevent unauthorised access
• To send service, security and support communications
• To comply with legal obligations

4. Local Processing

Our software is designed so that customer data is processed on your own equipment. Data handled that way is held on the device where it was created. It is not synchronised to us, and it is not shared between devices by default.

Two consequences follow. First, using a different machine means the local data from the first machine is not present there. Second, if you ask us to enable shared visibility across a team, data made shareable becomes visible to everyone signing in under the same account, and we will tell you before that is switched on.

Our software contacts us to sign in, to keep that sign-in current, and to check what your account is permitted to do. It does not transmit your locally held working data to us as part of that exchange.

5. How We Share Information

We do not sell your personal data, and we do not use one client's business data to benefit another. We share information only in these circumstances:

• Service providers: vendors who process data on our behalf under written agreements, such as hosting and message delivery
• Legal requirements: where required by law or court order, or to protect the rights and safety of marketing.pizza and its users
• Business transfers: in connection with a merger, acquisition or sale of assets, with notice to affected account holders

6. Text Messaging

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with, sold to, or transferred to any third parties.

Where campaigns are sent on a client's behalf, recipients can opt out at any time by replying STOP to any message, or reply HELP for help. Message frequency varies; message and data rates may apply. Consent to receive text messages is never a condition of any purchase.

7. Data Retention

We retain account data for as long as the account is active, plus a reasonable period afterwards to resolve disputes and meet legal obligations. Connected business data and end-customer data are deleted or returned on account closure or on request. Sign-in attempt records are retained for a limited period for security purposes. Expired sessions are purged automatically.

8. Security

Passwords are stored as salted scrypt hashes and never in a recoverable form. Sessions use signed, HTTP-only cookies over TLS. Access to production data is restricted and logged, and each client's data is kept separate.

No system is completely secure. Because we issue credentials rather than letting users choose their own, we ask that you do not share them, and that you tell us at hello@marketing.pizza immediately if you believe an account has been compromised.

9. Cookies

This site uses one essential cookie to keep you signed in. We do not run advertising trackers on marketing.pizza. If we adopt analytics cookies in future, this policy will be updated before they are deployed.

10. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact hello@marketing.pizza. We will respond within 30 days. If you are an end customer of one of our clients, we will refer your request to that client and assist them in fulfilling it.

11. Messaging Law Compliance

Clients using marketing.pizza to contact their customers are responsible for ensuring their campaigns comply with the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act, GDPR and PECR where applicable, and all other applicable laws, including obtaining proper consent from recipients and honouring opt-outs. We provide tools and record-keeping structures to support compliance; we do not guarantee compliance on your behalf.

12. Children

The service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children under 13, and we will delete any such data brought to our attention at hello@marketing.pizza.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a notice on the website at least 14 days before taking effect.

14. Contact Us

marketing.pizza
hello@marketing.pizza