Last updated: 16 December 2025
This Privacy Policy explains how Signor Ciccio (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you visit or interact with our website https://italian-bistro.co.uk, make a booking, place an order, join our loyalty programme, or otherwise contact us.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
Signor Ciccio
Trading via: https://italian-bistro.co.uk
Email: signorcicciostreathamvale@yahoo.com
If you have any questions about this Privacy Policy or how we handle your personal data, you may contact us using the details above.
Personal data we collect
We may collect and process the following categories of personal data when you interact with us, depending on how you use our website and services:
• Identity and contact information, such as your name, email address, telephone number, and any details you choose to provide when contacting us or making a booking.
• Booking and reservation information, including date and time of booking, number of guests, special requests, deposits, cancellation or no-show history.
• Payment-related information where a deposit or payment is required. We do not store or process full card details on our website; payment information is handled securely by our payment service providers.
• Loyalty programme information, including account registration details, points earned or redeemed, and related activity.
• Technical and usage data, such as IP address, browser type, device information, operating system, pages visited, and interactions with our website.
• Communications data, including emails, messages, enquiries, feedback, or other correspondence you send to us.
How we use your personal data and our legal basis
We only use your personal data where the law allows us to do so. Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on include:
• Performance of a contract – where processing is necessary to manage reservations, bookings, deposits, loyalty programme participation, and to provide the services you request.
• Consent – where you have given clear permission, such as opting in to marketing communications or accepting non-essential cookies. You may withdraw your consent at any time.
• Legitimate interests – where processing is necessary for the operation, improvement, and security of our business and website, provided those interests are not overridden by your rights and freedoms.
We use personal data for the following purposes:
• To process and manage bookings, reservations, and deposits.
• To operate and administer our loyalty programme.
• To communicate with you regarding your bookings, enquiries, or customer service requests.
• To improve our website, services, and customer experience.
• To comply with legal and regulatory obligations.
Cookies and tracking technologies
Our website uses cookies and similar tracking technologies to ensure it functions correctly, to analyse performance, and to improve user experience.
Cookies are small text files placed on your device when you visit a website. Some cookies are essential and required for the website to operate properly, while others are optional and used for analytics or marketing purposes.
We use:
• Strictly necessary cookies – required for core website functionality, security, and page navigation. These cookies do not require consent.
• Analytics and performance cookies – used to understand how visitors interact with our website and to help us improve its performance.
• Functional cookies – used to remember your preferences and choices.
Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can manage or withdraw your cookie preferences at any time through our cookie banner or your browser settings.
For more information about how cookies work and how to control them, please refer to your browser’s help section.
Third-party services and payment processing
We use trusted third-party service providers to operate our website and deliver certain services, including booking management, payment processing, analytics, and email communications.
Where payments or deposits are required, we use Dojo payment services (provided by Paymentsense Limited and WalkUp Limited, trading as “Dojo”). When you make a payment or booking through Dojo’s systems, Dojo may act as an independent data controller for the personal data you provide through its payment or booking interfaces.
Personal data processed by Dojo may include:
• Name and contact details;
• Payment card information (processed securely and in accordance with PCI-DSS standards);
• Booking details such as date, time, and number of guests;
• Technical and device information necessary to complete transactions.
We do not store or process full payment card details on our own servers. All card payments are handled directly by Dojo and its PCI-compliant payment processors.
Dojo processes personal data in accordance with its own privacy policy, which you can review here:
https://dojo.tech/legal/privacy/
Data sharing, retention and international transfers
We do not sell your personal data.
We may share personal data with trusted third-party service providers where necessary to operate our business and provide our services. These may include booking platforms, payment providers, website hosting services, email communication tools, and analytics providers. Such third parties are only permitted to process personal data in accordance with our instructions or under their own legal obligations as independent data controllers.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing services, meeting legal and accounting requirements, resolving disputes, and enforcing our agreements. When personal data is no longer required, it is securely deleted or anonymised.
Some of our service providers may process personal data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect your personal data in accordance with UK data protection laws.
Your data protection rights
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data:
• The right to access your personal data and obtain a copy of the information we hold about you.
• The right to request correction of inaccurate or incomplete personal data.
• The right to request erasure of your personal data, where applicable.
• The right to request restriction of processing in certain circumstances.
• The right to object to processing where we rely on legitimate interests.
• The right to data portability, where applicable.
• The right to withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, please contact us using the details provided in this Privacy Policy. We may need to verify your identity before responding to a request.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. More information is available at https://www.ico.org.uk.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any updates will be published on this page and will take effect from the date shown at the top of the policy.
External links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third-party websites. We encourage you to review their privacy policies before providing any personal data.
Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:
Email: info@fmgroupuk.com
Ragno LTD (trading as Signor Ciccio)
Location: Streatham Vale, London, United Kingdom
