Privacy Policy

1. Introduction & Overview

At AJ PIIZZAS ("we", "us", "our", or "Company"), we are committed to respecting and protecting the privacy of our clients, prospective clients, website visitors, and partners. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed and safeguarded.

We adhere strictly to applicable data protection regulations, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR).

2. Information We Collect

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

• Identity Data: First name, last name, title, and company/organization name.
• Contact Data: Email address, telephone number, business address, and billing details.
• Consultation & Business Data: Information regarding your business requirements, operational challenges, project scope, and consultation notes submitted via our forms or during consultations.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, platform, and device identifiers.
• Usage Data: Information about how you navigate and interact with our website, pages viewed, bounce rates, and traffic sources.
• Marketing & Communications Data: Your preferences in receiving communication or newsletters from us.

3. How We Collect Your Data

We use different methods to collect data from and about you:

• Direct Interactions: You provide details by completing our contact and consultation forms, requesting advisory services, emailing us, calling our team, or engaging us for business management contracts.
• Automated Technologies: As you interact with our website, we may automatically collect technical and usage data through cookies, server logs, and similar analytical technologies.
• Third Parties & Public Sources: We may receive professional contact information from verified public business registers, corporate websites, or professional networks (e.g., LinkedIn).

4. Legal Basis for Processing (UK GDPR Article 6)

We will only process your personal data when the law allows us to. Most commonly, we process your personal data under the following lawful bases:

• Contract Performance: Where processing is necessary to enter into or perform a business consultancy contract with you or your organization.
• Legitimate Interests: Where necessary for our legitimate business interests (e.g., responding to inquiries, providing relevant consultancy insights, preventing fraud, and enhancing platform security) without overriding your fundamental rights.
• Legal & Regulatory Compliance: Where required to comply with statutory accounting, tax, or legal requirements.
• Consent: Where you have provided clear, affirmative consent (e.g., opting in to receive specific marketing or newsletters). You have the right to withdraw consent at any time.

5. How We Use Your Information

Your personal data is utilized strictly for professional and legitimate operational purposes, including:

• Scheduling, preparing for, and conducting business consultations and strategic assessments.
• Delivering tailored business management, financial advisory, and operational consulting services.
• Communicating with you regarding project updates, proposals, and administrative notices.
• Processing billing, invoices, and payment transactions.
• Maintaining website security, diagnosing technical issues, and optimizing user experience.
• Meeting our legal, audit, and tax obligations.

6. Sharing & Disclosure of Personal Data

We do not sell, rent, trade, or monetize your personal information to third parties under any circumstances.

We may share your data only with trusted third parties under strict confidentiality and data protection agreements:

• Service Providers: Cloud infrastructure hosts, IT security providers, CRM systems, and email service providers who assist our operations under compliant Data Processing Agreements (DPAs).
• Professional Advisers: Legal counsels, accountants, auditors, and insurers when required for business governance.
• Law Enforcement & Regulators: When required by applicable law, court order, or governmental regulation.

7. International Data Transfers

Whenever we transfer your personal data outside the United Kingdom or the European Economic Area (EEA), we ensure an equivalent degree of protection is afforded by implementing appropriate safeguards, including:

• Transferring data to countries deemed by the UK Government / European Commission to provide an adequate level of personal data protection.
• Utilizing standard contractual clauses (SCCs) or the UK International Data Transfer Addendum approved by data protection authorities.

8. Data Security Measures

We have implemented robust technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, alteration, or disclosure. These measures include:

• SSL/TLS encryption across all web traffic and communication channels.
• Role-based access restrictions ensuring only authorized personnel access client records.
• Secure cloud infrastructure with continuous monitoring, regular backups, and vulnerability management.

9. How Long We Retain Your Data

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, tax, or reporting obligations.

Inquiries and consultation records that do not lead to a client engagement are periodically reviewed and securely deleted after 24 months, unless a longer retention period is required by law.

10. Your Data Protection Rights

Under UK and EU data protection laws, you possess significant rights concerning your personal information:

• Right to Access (Subject Access Request): You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of incomplete or inaccurate data.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of personal data where there is no good reason for us continuing to process it.
• Right to Restrict Processing: You have the right to request the suspension of processing of your personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object where we are relying on a legitimate interest or direct marketing.
• Right to Withdraw Consent: Where consent is the legal basis, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at info@ajpiizzas.uk. We will respond within one calendar month.

11. Cookies & Tracking Technologies

Our website uses cookies (small text files placed on your device) to ensure website stability, remember your preferences, and analyze website traffic.

• Essential Cookies: Required for the technical operation and navigation of our website.
• Analytical / Performance Cookies: Allow us to recognize and count visitors, tracking how users move through our site to improve functionality.

You can choose to set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Note that disabling cookies may affect certain site functionalities.

12. Children's Privacy

Our services and website are aimed exclusively at business professionals and adults. We do not knowingly collect or solicit personal data from anyone under the age of 18. If we learn that we have collected personal data from a child without parental consent, we will delete that data promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business practices, technology, or legal requirements. Any updates will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

14. Contact & Supervisory Authority

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please reach out to us:

You also have the right to lodge a complaint at any time with the supervisory authority for data protection issues in the UK, the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us first.