Your information

Privacy policy

This notice explains how Pizza Box Scotland uses personal information when you visit this website, make an enquiry, book an event or join our mailing list.

Last updated: 10 September 2026

Who we are

Pizza Box Scotland is the controller responsible for personal information handled through this website and our services. You can contact us at info@pizzaboxscotland.co.uk.

Information we collect

  • Contact and enquiry details, including your name, email address, phone number and message.
  • Booking and event details you give us when discussing or arranging our services.
  • Your email address, signup time and consent record when you join our mailing list.
  • Technical and security information, such as IP address, browser information and form-verification data.
  • Your cookie preference and, if you consent to analytics, information about how the website is used.

How and why we use it

PurposeLawful basis
Answer enquiries and provide requested informationLegitimate interests and steps requested before entering a contract
Arrange and deliver bookings or event servicesPerformance of a contract
Send newsletter and pop-up updatesYour consent
Protect forms, systems and visitors from abuseLegitimate interests in operating a secure website
Maintain financial, tax and legal recordsLegal obligation and legitimate interests

Email marketing

Our newsletter uses double opt-in. After submitting the signup form, you must confirm your email address before we send marketing messages. You can withdraw consent at any time by using the unsubscribe link in an email or contacting us. Withdrawing consent does not affect processing carried out before withdrawal.

Who receives your information

We only share information where needed to operate the website and provide our services. Our service providers include our website host, Postmark for enquiry email delivery, Mailchimp for mailing-list management, Cloudflare Turnstile for form security and, where you consent, Google Analytics for website measurement. Professional advisers, regulators or public authorities may also receive information where the law requires it. We do not sell personal information.

Some providers may process information outside the UK. Where this happens, we require an applicable UK adequacy regulation or contractual and organisational safeguards recognised under UK data protection law.

How long we keep it

  • General enquiries that do not become bookings: normally up to 24 months after our last contact.
  • Booking, transaction and accounting records: normally six years after the end of the relevant financial year.
  • Mailing-list details: until you unsubscribe or we stop the newsletter. We may retain a minimal suppression record so we respect your choice.
  • Security and technical logs: only for as long as needed for security, diagnostics and legal requirements, normally no longer than 12 months.

Cookies and device storage

This website uses local storage named pizzabox_cookie_notice for up to six months to remember whether you selected necessary storage only or accepted analytics. This is strictly necessary to remember your preference.

Cloudflare Turnstile may use cookies or similar technologies when you use a protected form. These are used for security and fraud prevention and are treated as strictly necessary for the service you request. External font providers may receive basic connection information, such as your IP address, when your browser requests font files.

Google Analytics is optional and remains unloaded unless you select “Accept analytics”. If enabled, it may collect pages visited, interactions, device and browser details, approximate location and identifiers. Google Analytics may set _ga and _ga_<container-id> cookies for up to two years. We disable Google advertising signals and personalisation.

You can withdraw or change your choice at any time using Cookie Settings in the footer. Choosing necessary storage only disables analytics and removes Google Analytics cookies available to this site.

Your rights

Depending on the circumstances, you can ask us for access to your information, correction, deletion, restriction, portability or to object to processing. Where we rely on consent, you can withdraw it at any time. To exercise a right, email us at info@pizzaboxscotland.co.uk. We may need to confirm your identity and normally respond within one month.

Complaints and changes

Please contact us first if you have a concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

We may update this policy when our services, providers or legal obligations change. The date at the top shows the latest revision.