Privacy

Last updated: 03/11/25

1. Introduction

Welcome to Rio’s Piri Piri (“we”, “us”, “our”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, store, use, share and otherwise process personal data when you use our website https://www.riospiripiri.com/ (the “Website”) and when you engage with our services (including ordering food, contact forms, newsletters, promotions, etc.).

By using our Website and/or providing personal data to us, you accept and agree to the practices described in this policy.

2. Data we collect

We may collect the following types of personal data:

• Identity data: name, date of birth (if required for age verification), title.
• Contact data: address, email address, telephone number.
• Transaction data: details of the food and/or drink you order, date/time of order, delivery address, payment information (handled by our payment provider).
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, other technology on the devices you use to access the Website.
• Usage data: information about how you use our Website, products and services.
• Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

3. How we collect your data

We collect data in a number of ways including:

• When you place an order or make a booking via the Website.
• When you register for an account (if applicable).
• When you subscribe to our newsletter or request marketing to be sent to you.
• When you visit our Website (automatically via cookies and similar technologies).
• When you contact us (via email, telephone or forms on the Site).
• From third parties and publicly-available sources (for example, analytics providers).

4. How we use your data

We use personal data for purposes including:

• Processing your order and delivering food or services to you.
• Managing payments, fees and charges.
• Managing our relationship with you (including notifying you about changes to our services).
• Administering and improving our Website, products and services.
• Personalising your experience (for example, remembering your preferences).
• Enabling you to participate in interactive features of our service when you choose to do so.
• Supplying you with marketing communications (if you have opted-in) about specials, new products or services.
• Complying with legal obligations and resolving disputes.

5. Lawful basis for processing (for EEA/UK)

If you are in the UK (or EEA), we rely on the following lawful bases under the UK GDPR:

• Performance of a contract: for example, when we process your order.
• Legal obligation: for example, to keep records for tax or food-safety compliance.
• Legitimate interests: for example, to administer and improve our services, provided this does not override your rights.
• Consent: where you have given clear consent (for example, to receive marketing emails).
• Vital interests: in rare circumstances (for example, to protect someone’s life).

6. Cookies and tracking technologies

We use cookies on our Website to distinguish you from other users, to remember your preferences, to enable certain features and to collect analytics. You can set your browser to refuse cookies, or to alert you when cookies are being sent. Please note that some parts of the Website may not function properly without cookies.

7. Data sharing and disclosure

We may share your personal data with:

• Payment service providers and delivery/logistics partners.
• IT and system administration service providers.
• Analytics and search engine providers that assist us in the improvement and optimisation of our Website.
• Government or regulatory authorities, when required by law.
• Other parties in the context of a business transfer (e.g., in connection with a merger or sale of our business or assets) — we will notify you of any change in ownership or use of your personal data.

8. Data retention

We will retain your personal data only for as long as is necessary for the purposes set out above, and in accordance with applicable laws. Once your data is no longer needed, we will securely delete or anonymise it.

9. International transfers

Your information may be transferred to, and stored at, a destination outside the UK or EEA. Where this happens, we will ensure appropriate safeguards are in place (e.g., standard contractual clauses) so that your data continues to receive the same protection as required under UK data protection law.

10. Your rights

You have certain rights under data protection legislation. Subject to applicable law, you may:

• Request access to your personal data.
• Request correction of your data.
• Request erasure of your data (“right to be forgotten”).
• Request restriction of processing.
• Object to processing (including for direct marketing).
• Request data portability.
• Withdraw your consent at any time (for processing based on consent).

If you wish to exercise any of these rights, please contact us at:
Email: info@riospiripiri.com
We may ask you for proof of identity before complying with your request.

11. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised or unlawful processing, accidental loss, destruction or damage.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date will indicate when the policy was last revised. We encourage you to review the policy periodically.

13. Contact us

If you have questions or comments about this policy or our privacy practices, you can contact us at:
Email: info@riospiripiri.com