Privacy Notice

GustoSi, 188 Leigh Road, Leigh-on-Sea, Essex SS9 1BT, is the controller of the personal information described in this notice. This means we decide how and why it is used, and we are responsible for looking after it. If you have any questions, call us on 01702 472744 or speak to us in person at the restaurant.

We collect:

• your name and email address, so we can send you the gift card and contact you about it;
• the recipient's name and your personal message, if you choose to add them, so we can print them on the card;
• the card's value, code, purchase date, expiry date and when it was used, so we can check and honour it in the restaurant;
• a record that you accepted our gift card terms, and which version;
• a payment reference from Stripe and the email address entered on Stripe's checkout page, so we can match the card to your payment and handle refunds.

We use this information to perform our contract with you (selling, delivering and honouring the gift card) and to meet our legal obligations, such as keeping accounting records.

If we give you a gift card ourselves (for example as a thank-you or a prize), we keep the same kind of details: the names on the card, any message, and the email address we send it to.

Payments are taken by Stripe on its secure checkout page. We never see or store your card number or security code. Stripe tells us whether the payment succeeded and gives us a payment reference. Stripe uses your payment details under its own privacy policy, which you can read at stripe.com/gb/privacy.

We send your gift card by email using Resend, an email delivery service. Resend processes your email address and the content of the email only to deliver it on our behalf. The restaurant also receives a short notification of each sale, which does not include the full gift card code.

We only email you about your gift card. We do not send marketing or newsletter emails, and we will not add you to a mailing list.

Our website is hosted by Vercel. Gift card records are stored in a Neon database, provided through Vercel and hosted in the EU/UK region. Like any website host, Vercel may briefly keep technical information such as your IP address and browser type in server logs, to keep the site running and secure.

Some of our service providers are international companies and may process information outside the UK. Where they do, they protect it with safeguards recognised under UK data protection law, such as UK adequacy regulations or approved data transfer agreements.

The chatbot on our website runs entirely in your browser. What you type is not sent to us or to anyone else, and nothing is stored once you close the page.

We don't use advertising or tracking cookies on our website. Stripe's checkout page, which is run by Stripe rather than us, uses its own cookies to process payments securely and prevent fraud.

While you fill in the gift card form, your browser keeps a temporary copy of what you have typed in that tab, so it isn't lost if you go back from the payment page. This copy stays on your device, is not sent to us, and is cleared when you close the tab or complete your purchase.

We never sell your personal information or share it for advertising. We only share it with the service providers named above (Stripe, Resend, Vercel and Neon), who act on our instructions, and with authorities such as HMRC or the police where the law requires us to.

We keep gift card records for six years, because we need them for tax and accounting purposes. If you ask us to, we will remove your personal details sooner (for example your name, email address, the recipient's name and your message) wherever the law allows us to.

Under UK data protection law (the UK GDPR) you have the right to:

• ask for a copy of the personal information we hold about you (access);
• ask us to correct anything that is wrong or incomplete (correction);
• ask us to delete your information (erasure);
• object to how we use your information.

To use any of these rights, call us on 01702 472744, reply to your gift card email, or speak to us in person. It is free, and we will respond within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

We will update this notice if the way we use personal information changes. The date at the top shows when it was last updated. See also our gift card terms.