PRIVACY POLICY

1. Information We Collect

​

1.1 Information You Provide Directly

You may provide personal information when you:

• Make an online reservation

• Place an online order (collection or delivery)

• Join our loyalty or rewards program

• Subscribe to our newsletter or marketing communications

• Contact us with questions or feedback

• Enter competitions or promotions

• Apply for a job with us

This may include:

• Full name

• Email address

• Phone number

• Reservation details (date, time, party size, special requests)

• Order details (items ordered, delivery/collection info)

• Loyalty account details (membership ID, visit history, rewards)

• Marketing preferences

• CV and employment information

• Any other information you choose to provide

• ​

1.2 Automatically Collected Information

When you use our website, we may automatically collect:

• IP address

• Device information

• Browser type and version

• Website usage data (pages viewed, time on page, clicks)

• Cookies and tracking technologies (see Section 7)

• ​

2. How We Use Your Information

We use your personal information to provide services, improve your experience, and operate our business.

 

2.1 Reservations

• Process, manage, and confirm table bookings

• Contact you regarding reservation updates or issues

• Improve our seating and operational planning

• ​

2.2 Online Ordering

• Process and fulfil your orders

• Contact you regarding delivery, collection, or issues with your order

• Improve our menu and online ordering experience

• ​

2.3 Loyalty Program

• Create and manage your membership

• Track visits, points, and rewards

• Provide personalised offers and promotions

• Communicate your rewards and updates

• ​

2.4 Newsletters & Marketing

With your consent (where required), we may:

• Send news, updates, promotions, and exclusive offers

• Tailor marketing content based on your preferences or interactions

You can opt out at any time by clicking “unsubscribe” or contacting us.

​

2.5 General Business Purposes

• Respond to enquiries and provide customer support

• Improve our website, services, and customer experience

• Maintain the security of our systems

• Comply with UK legal obligations

We never sell your personal information.

​

3. Legal Bases for Processing (UK GDPR)

Under UK GDPR, we rely on the following legal bases:

• Performance of a contract – e.g. processing reservations or online orders

• Consent – e.g. sending marketing emails, where legally required

• Legitimate interests – e.g. improving our services, fraud prevention, analytics

• Legal obligation – e.g. accounting, regulatory, or law enforcement requirements

• ​

4. How We Share Your Information

We may share your information with trusted third parties who help us operate our business, such as:

• Reservation platforms (ResDiary)

• Online ordering and payment processors

• Loyalty program and CRM providers

• Email marketing platforms (Mailchimp)

• Website hosting and analytics services (Google Analytics)

• IT and security service providers

All third parties must comply with UK GDPR requirements and process your data securely.

We may also share your information if required by:

• Law enforcement

• Government authorities

• Legal proceedings

• ​

5. International Data Transfers

Some of our service providers may transfer your data outside the UK (e.g. to the EU or USA).
When this happens, we ensure appropriate safeguards are in place, such as:

• UK GDPR adequacy regulations

• Standard Contractual Clauses (SCCs)

• Additional protection measures

• ​

6. Data Retention

We keep your personal information only as long as necessary to:

• Provide our services

• Meet legal or accounting obligations

• Resolve disputes

When no longer required, we permanently delete or anonymise your data.

​

7. Cookies & Tracking Technologies

We may use cookies to:

• Ensure the website functions correctly

• Analyse website performance and traffic

• Remember your preferences

• Support features like reservations or online ordering

You can control or disable cookies through your browser.
Some features may not work correctly if cookies are disabled.

​

8. Your Rights (UK GDPR)

You have the following rights regarding your personal information:

• Right of access – request a copy of your data

• Right to rectification – correct inaccurate or incomplete data

• Right to erasure – request deletion of your data in certain cases

• Right to restrict processing

• Right to data portability

• Right to object – including to direct marketing

• Right to withdraw consent – at any time

• Right to lodge a complaint with the ICO (Information Commissioner’s Office)

To exercise your rights, contact us at:

📧 info@mamma.co.uk

​

9. Children’s Privacy

We do not knowingly collect personal information from children under 16.
If you believe a child has provided us data, please contact us so we can delete it.

​

10. Third-Party Links

Our website may contain links to external sites.
We are not responsible for their privacy practices.
We recommend reviewing their privacy policies before providing personal information.

​

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated “Last updated” date.

​

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, you can reach us at:

📧 info@mamma.co.uk
📍 R3 Priory Place, Fairfax Street, Coventry, CV1 5SQ.

​

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk