PRIVACY POLICY

Last updated: 2 September 2026

Oi Vita Pizzeria is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect and use personal information when you visit our website, make a reservation, place an order, use our mobile app, purchase a gift card, contact us, visit our premises or use our guest Wi-Fi.

1. Who we are

PITAGORANDO LIMITED, company number 10310863, registered in England and Wales and trading as “Oi Vita Pizzeria”, is the data controller responsible for the personal data described in this policy.

Registered office: 49 Steeds Road, London, England, N10 1JB
Trading address: 67 Newington Green Road, London, N1 4QU
Email:oivitapizzeria@gmail.com

For orders placed through Slerp, Oi Vita and Slerp Limited act as joint data controllers for certain order information, as explained below.

2. Personal information we collect

Depending on how you interact with us, we may collect:

Your name, email address and telephone number;

Reservation details, including the date, time, number of guests and any message you provide;

Order details, including products ordered, customisations, order value and collection or delivery time;

Your delivery address and delivery instructions;

Customer account, order history, loyalty points, rewards and redemption history;

Your marketing and app-notification preferences;

Gift-card purchase information, including the purchaser’s and recipient’s details, gift-card value and any personal message;

Enquiries, complaints, feedback and other communications;

Payment status and transaction information;

Technical information such as IP address, browser type, device identifiers, app activity and website usage information;

Technical connection information generated when you use our guest Wi-Fi, such as IP address, device identifier and connection times;

CCTV images recorded when you visit our premises.

We do not receive or store your complete payment-card number or security code. Payments are handled by the relevant payment provider.

We do not intentionally request medical information through our reservation or contact forms.

Please inform a member of staff directly about any allergies before ordering.

3. How we collect your information

We collect personal information:directly from you;

Through Tablein when you make a reservation;

Through Slerp when you place an order, use the Oi Vita app, participate in our loyalty programme or select marketing preferences;

Through Gift Up when you purchase a gift card;

Through Typeform when you submit our contact form;

Through Squarespace when you visit or interact with our website;

Through payment providers and delivery partners involved in your transaction;

Through our CCTV system when you visit the restaurant;

Automatically when you connect to our guest Wi-Fi.

4. How we use your information and our legal bases

We use personal information only where we have a valid legal basis.

Reservations, orders, deliveries and gift cards

We use your information to take and manage reservations, process and fulfil orders, arrange collection or delivery, administer gift cards and provide the services you request.Our legal basis is that the processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Customer accounts and loyalty rewards

We use account, order and loyalty information to operate the Oi Vita customer account and rewards programme.Our legal basis is performance of our contract with you and our legitimate interest in operating and administering our loyalty programme.

Enquiries and customer service

We use your information to answer enquiries, manage complaints, resolve problems and communicate with you about reservations, orders or other requests.Our legal basis is performance of a contract where the communication concerns a service you requested, or our legitimate interest in providing customer service and managing our business.

App notifications and marketing

If you choose to receive promotional notifications through the Oi Vita app, we may send you information about our products, promotions, events and offers.Our legal basis is your consent. You can withdraw your consent at any time by changing the notification settings in the app or on your device. Withdrawing consent does not affect processing that took place before it was withdrawn.Service messages concerning an order, account, security issue or important operational matter are not marketing communications.

Accounting and legal compliance

We use and retain relevant transaction information to maintain accounting and tax records, comply with legal obligations and respond to lawful requests from public authorities.Our legal basis is compliance with a legal obligation.

Website and app operation

We use technical information to provide, maintain and secure our website and app, identify technical problems, prevent fraud and understand how our services are used.Our legal basis is our legitimate interest in operating secure and effective digital services. Where consent is legally required for analytics or other non-essential technologies, we rely on your consent.

CCTV

We operate CCTV at our restaurant to protect customers, staff, visitors and property, and to prevent, detect and investigate crime or other security incidents.The CCTV system records images but does not record audio.Our legal basis is our legitimate interest in maintaining safety and security, protecting our property, preventing and investigating incidents, and establishing or defending legal claims.CCTV images may be disclosed to the police, insurers, legal advisers or other authorised parties where reasonably necessary or required by law.Signs are displayed at the premises to inform visitors that CCTV is in operation.

Guest Wi-Fi

Guest Wi-Fi is available on request. When a device connects, the network equipment or internet-service provider may automatically process limited technical information, such as the device’s IP address, network identifier and connection time.We use this information only as necessary to provide, operate and secure the network. Our legal basis is our legitimate interest in providing a secure guest Wi-Fi service.

5. Who we share your information with

Where necessary, we may share personal information with:

Tablein, for restaurant reservations;

Slerp Limited, for online ordering, the Oi Vita app, customer accounts, loyalty rewards and related services;

Deliveroo, for orders placed through its platform, including order processing, payments, delivery and customer support;

Gift Up, for gift-card purchases;

Typeform, for enquiries submitted through our contact form;

Squarespace, for website hosting, website functionality and analytics;payment providers, for processing payments;

Courier and delivery partners, where delivery is requested;point-of-sale, IT and other operational service providers;

Accountants, insurers, solicitors and other professional advisers;

The police, regulators, courts and public authorities where required by law or reasonably necessary;

Purchaser or adviser involved in a sale, restructuring or transfer of our business, subject to appropriate safeguards.For the personal data needed to accept and fulfil an order through Slerp, Oi Vita and Slerp Limited act as joint controllers. Slerp also acts as an independent controller for certain platform-security, fraud-prevention, support, analytics and delivery activities.You may exercise your rights concerning joint-controller order information against either Oi Vita or Slerp. More information is available in Slerp’s Platform and End-Customer Privacy Notice:https://www.slerp.com/platform-privacy-notice/

Other providers may act as independent controllers for some activities. Their own privacy policies apply to those activities.

We do not sell personal information or share it with third parties for their own direct marketing.

6. International transfers

Some providers may process personal information outside the United Kingdom.Where Oi Vita is responsible for an international transfer, we take reasonable steps to ensure that an appropriate legal safeguard is used. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another safeguard permitted by UK data-protection law.Where Slerp or another independent controller is responsible for a transfer, its privacy notice explains the safeguards it uses.You may contact us for more information about the safeguards applicable to your personal information.

7. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.Normally:

Financial and transaction records are retained for up to six years from the end of the relevant financial year, or longer where required by law;

Reservation details and general enquiries are retained for up to 24 months;

Customer-account and loyalty information is retained while the account or loyalty relationship remains active and for a reasonable period afterwards;

Marketing preferences are retained until you withdraw consent or the information is no longer required;

CCTV images are normally deleted automatically after 30 days, unless footage must be retained for longer to investigate an incident, comply with the law or establish or defend a legal claim;

Guest Wi-Fi technical information, where generated, is retained only for as long as reasonably necessary to operate and protect the network;

Cookie and analytics information is retained for the periods stated in our Cookie Policy or the relevant provider’s settings.

Personal information may be retained for longer where necessary to resolve a dispute, comply with a legal obligation or establish, exercise or defend a legal claim. It may also be anonymised so that it no longer identifies anyone.

8. Cookies and similar technologies

Our website and digital services may use cookies and similar technologies.Essential technologies are used to operate and secure the website and provide features requested by the user. Where legally required, analytics and other non-essential technologies are used only after consent has been provided.You can manage your choices through the cookie controls available on our website and, where applicable, through your browser or device settings.For information about the specific technologies used, their purposes, providers and duration, please read our Cookie Policy:https://www.oivita.london/cookie-policy

9. Your data-protection rights

Depending on the circumstances, you may have the right to:

Request access to your personal information;

Request correction of inaccurate or incomplete information;

Request deletion of your information;

Request restriction of processing;

Object to processing based on legitimate interests;

Object at any time to direct marketing;

Request portability of information provided under consent or contract;

Withdraw consent at any time where we rely on consent;

Complain to the Information Commissioner’s Office.

These rights are not absolute and may be subject to legal exemptions.

To exercise your rights, email oivitapizzeria@gmail.com. We may ask for information reasonably necessary to verify your identity. We normally respond to valid requests within one month.If you are unhappy with how we use your personal information, please contact us first so that we have an opportunity to address your concerns.

You may also complain to the Information Commissioner’s Office:

Website:https://ico.org.uk/
Telephone: 0303 123 1113

10. Required information

Where information is marked as required, we need it to provide the requested reservation, order, gift card, account or response.If you do not provide the required information, we may be unable to provide that service.

11. Automated decision-making

Oi Vita does not make decisions about customers based solely on automated processing that produce legal or similarly significant effects.

12. How we protect your information

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.Access is limited to staff and service providers who need the information for the purposes described in this policy.No internet or storage system can be guaranteed to be completely secure.

13. Third-party services and links

Our website may contain links to third-party websites, apps and services. Those organisations are responsible for their own privacy practices when they act as independent controllers.We recommend reading their privacy policies before providing personal information.

14. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change.The latest version will be published on this page and the “Last updated” date will be amended.