PRIVACY POLICY

Last updated: June 2026

This policy explains what personal information Pizza Sesh ("we", "us") collects through this website, why we collect it, and what your rights are. We keep it short and we don't sell your data.

Who we are

Pizza Sesh is a mobile wood-fired pizza business based in Worth Valley, West Yorkshire, operated by Pizza Sesh. For any privacy questions, email hello@pizzasesh.com or write to us at .

What we collect

• Booking enquiries: the details you submit in the enquiry form — your name, email, phone (optional), event date, location, guest numbers, event type and any message.
• Mailing list: your email address, if you choose to sign up for tour dates and updates.
• Rewards membership & account: if you join our loyalty scheme or create an account, your name, email and mobile number, your stamp/reward balance and a loyalty code, and (if you set one) a securely hashed password.
• Orders: when you order online, the name on the order, the items you ordered and the amount paid, plus a payment reference from our payment provider so we can match your payment to your order.
• Technical data: standard server logs (e.g. IP address, browser type) created automatically when you visit, used for security and to keep the site running.

Why we use it (lawful basis)

• To respond to and manage your catering enquiry — on the basis of taking steps at your request / our legitimate interest in running the business.
• To take and fulfil your online orders — on the basis of performing our contract with you.
• To send you updates you've asked for — on the basis of your consent. You can unsubscribe at any time by emailing us.
• To run our rewards scheme — recording your stamps and rewards and identifying you at the van — on the basis of performing the rewards membership you asked to join.
• To send you rewards offers and news by text or email — only if you tick the optional marketing box when you join, on the basis of your consent. Joining the scheme never requires agreeing to marketing, and you can opt out at any time.
• To maintain the security and performance of the website — on the basis of our legitimate interests.

Payments

Online payments are processed by Stripe, our payment provider. Your card details are entered with and handled securely by Stripe — we never see or store your full card number. We only store a Stripe payment reference (ID) against your order so we can confirm payment and handle any refunds.

Emails we send you

When you submit a booking enquiry, your details are emailed to our team so we can respond. If you join the rewards scheme or place an online order, we may email you a secure, time-limited sign-in link so you can reach your account without needing a password. We use an email delivery provider to send these messages.

Loyalty rewards scheme

When you join Pizza Sesh Rewards you give us your name, email and mobile number, and we create a membership record with a unique loyalty code (shown to you as a QR code) and your stamp/reward balance. We use this only to run the scheme — to recognise you at the van, add stamps and apply your free pizzas. Agreeing to this privacy policy is required to join, because we can't run your membership without it. Marketing messages are a separate, optional choice you can change at any time. To leave the scheme and have your membership deleted, just email us. We don't currently run an automated marketing campaign system — any updates are sent occasionally and manually.

How long we keep it

We keep enquiry details for as long as needed to handle your event and for our business records, then delete them. Mailing-list details are kept until you unsubscribe. Rewards membership and account details are kept while your account is active, and deleted on request or after a long period of inactivity. Order records are kept for our business and accounting records.

Who we share it with

We don't sell your data. We only share it with service providers that help us run the site and serve you, and only as needed:

• Stripe — to process payments.
• Our email delivery provider — to send enquiry, sign-in and account emails.
• Our website hosting — where the site and your data are stored.
• Google Fonts — this site loads fonts from Google, which may process your IP address as part of delivering them.

Real-time order and kitchen screens use our own (self-hosted) websocket service to show live order updates. We may also disclose information if required by law.

Cookies

This site uses only essential cookies needed for it to function and to keep forms secure — for example your login session and a security (CSRF) token. If you choose "remember me" when signing in, we store a token so you stay signed in. Our self-serve ordering kiosk uses a device cookie so only an authorised device can take orders. We don't currently use advertising or analytics tracking cookies.

Your rights

You have the right to access, correct or delete your personal data, to object to or restrict its use, and to withdraw consent. To exercise any of these — including deleting your account and data — email hello@pizzasesh.com and we'll action your request, normally within 30 days. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes

We may update this policy from time to time; the date at the top shows when it last changed.