Privacy Policy

Data We Collect

When you place an order or create an account, osteriapeppino collects your name, email address, shipping address, and payment method. Payment data is processed by a PCI-compliant third party — we never store card numbers.

We also collect basic browsing data such as pages visited, time on site, and device type. This data is aggregated and used only to improve website performance.

How We Use Your Information

Your data is used to process orders, send shipping confirmations, and respond to support queries. With your consent, we may also send product updates and promotions — you can unsubscribe at any time.

Cookies

osteriapeppino uses cookies to remember your session, save cart contents, and measure traffic through analytics tools. Strictly necessary cookies cannot be disabled. All others require your consent.

You can manage cookie preferences through your browser settings or via the consent banner displayed on your first visit. Blocking analytics cookies does not affect your ability to browse or purchase.

Data Sharing

osteriapeppino does not sell your personal data. We share only the minimum necessary information with shipping carriers, payment processors, and fraud prevention services — all bound by data processing agreements.

Data Security

All data transmitted to osteriapeppino is encrypted via TLS 1.3. Stored customer data is protected by access controls, encrypted at rest, and reviewed in annual security audits.

In the event of a data breach affecting your personal information, osteriapeppino will notify you within 72 hours in accordance with applicable data protection regulations.

Your Rights

You have the right to access, correct, or delete your personal data at any time. EU and UK residents also hold rights of portability and objection under GDPR. info@osteriapeppino.com Submit requests to info@osteriapeppino.com.

Third-Party Services

Our website uses Google Analytics and a third-party email platform for marketing. Each provider operates under its own privacy policy. Links to those policies are available on request.

Data Retention

Order records are retained for seven years to comply with tax regulations. Account data is deleted within 30 days of a verified deletion request. Anonymised analytics data may be retained indefinitely.

Policy Updates

This privacy policy may be updated to reflect changes in law or business practice. The current version is always available on this page. Last updated: January 2026.