Privacy Policy

Last updated: 11 August 2025

This notice explains how The Pizza Index (“we”, “us”) collects and uses your information. It is designed for users in the UK. This page is general information and not legal advice.

Who we are & contact

Data controller: The Pizza Index. Contact: hello@kamwing.co.uk.

What we collect

  • Account data: name, email, profile photo (from your sign-in provider, e.g. Google).
  • Content you submit: reviews, ratings, photos, comments, and place selections.
  • Technical data: device/browser info, IP-derived approx. location, and logs (for security & diagnostics).
  • Analytics: aggregated usage via Google Analytics (GA4).
  • Maps data: we use Google Maps/Places to look up venues and photos.

Why we use it (legal bases)

  • Provide the service (contract/legitimate interests): accounts, posting, showing leaderboards.
  • Safety & moderation (legitimate interests): prevent spam/abuse, enforce policies.
  • Analytics (consent/legitimate interests): understand feature usage, improve UX.
  • Legal/compliance (legal obligation): respond to lawful requests.

Cookies & local storage

We use essential cookies/local storage (e.g., session, caching) and analytics cookies (GA4). You can manage cookies in your browser. Disabling some may impact functionality.

Sharing your data

  • Service providers: Vercel (hosting), Google (Auth, Analytics, Maps/Places), Firebase/Google Cloud (database & storage).
  • Public content: your reviews, ratings, username, and photos are public on the site.
  • Law enforcement/requests: where required by law.

International transfers

Our providers may process data outside the UK/EEA. We rely on appropriate safeguards (e.g., standard contractual clauses) where required.

Retention

Account/profile data: retained while your account is active. Reviews/photos: retained until you delete them or request removal, subject to backups and legal obligations. Logs: typically short-term for security/ops.

Your rights (UK GDPR)

  • Access, rectification, erasure, restriction, objection, portability.
  • Withdraw consent where we rely on it (e.g., analytics cookies).
  • Lodge a complaint with the ICO if you’re unhappy with our response.

Children

The service isn’t intended for children under 13. We don’t knowingly collect personal data from children.

Changes to this policy

We’ll update this page when our practices change. We’ll post the new effective date above.